$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: kCy4iR1poyeFhocnaWX+Sjy9OkvN8Jzj1k4eDQlCVj8= Subject key identifier: CD:15:2C:EE:67:63:1C:77:C1:17:6E:76:A2:4B:81:CB:54:70:FF:DD Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 67 Signing time: Wed 05 Nov 2025 07:13:23 +0000 Manifest this update: Wed 05 Nov 2025 07:13:22 +0000 Manifest next update: Wed 12 Nov 2025 07:13:22 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: geZ3TiznViOWMZcdYWPWJ0a1nbzCl8bpXoZRzcliEJQ=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: qPzJ/oeyp8XIlVlZetvJbilZBw8geUbM+mpNnzYDNLQ=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: hVkpqBz8Nr9HJbp7PiFoLwVsufH9j8FcqYll8CUZa9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Nov 5 07:13:22 2025 GMT Not After : Nov 12 07:13:22 2025 GMT Subject: CN=690af912-639e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:e5:0b:ed:50:02:35:ec:e3:da:49:cf:97: 7e:eb:68:d2:04:91:b1:6d:ae:15:61:59:dc:16:79: 40:7f:ca:4c:a1:82:73:e7:10:4b:76:ac:98:c0:05: 92:f3:b0:72:a2:a8:18:93:19:4f:2f:42:25:88:fc: 7e:65:74:8f:66:79:8a:09:6d:68:4e:cf:09:71:e2: 06:2d:fd:a6:65:ba:da:d3:e1:25:c1:ef:e5:38:61: 59:ad:8e:83:cc:98:b9:2a:13:fd:8d:11:a3:e0:fb: 57:63:e5:af:fc:be:ca:2f:12:5f:b1:f9:68:e9:b8: ab:8f:bd:29:db:82:0c:88:fd:89:00:88:64:f3:fc: 2b:c6:22:fc:a0:de:af:53:18:dd:c9:c6:d3:98:6c: 5b:9b:11:4c:1f:aa:5a:14:1e:1a:a6:2b:94:2d:d0: 6f:c8:cd:8b:ef:16:ee:7a:6f:50:10:11:5d:6d:ae: 03:2e:ac:db:0c:b2:e4:37:a0:55:47:fb:d3:d7:e1: d6:9d:fc:9e:2e:8d:57:fd:3c:9e:bf:fd:11:33:e7: 97:ea:2a:35:e6:85:67:3f:20:21:a2:1a:f2:81:ee: 02:d6:61:c0:e1:d4:56:d6:c9:41:dc:26:1a:b3:f0: d3:6d:06:cf:1c:59:d5:04:48:d1:84:ef:67:4f:32: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:15:2C:EE:67:63:1C:77:C1:17:6E:76:A2:4B:81:CB:54:70:FF:DD X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a3:33:02:ff:4a:55:7b:ca:f8:a0:59:a0:18:ed:18:de:2f: b9:13:f7:77:e7:3c:a6:38:2f:9b:97:51:98:bb:7f:c8:bb:08: 6d:2b:d3:93:cd:23:6c:cc:15:f7:51:a7:2c:62:ba:57:4b:0e: d3:c4:c3:a3:c5:d8:cb:ac:f8:3b:97:71:38:29:20:6e:66:a7: 74:cd:2d:c8:57:4c:a7:74:8e:e0:71:2a:66:da:15:dd:ee:03: 3b:f2:1a:65:96:f0:28:3c:f5:30:84:11:92:cd:5d:3d:d3:8b: 7e:0f:30:b3:b4:e2:94:2e:c2:5d:a4:07:77:ad:bb:f6:12:27: ae:2c:0f:27:dd:a9:36:dc:13:cd:bb:2f:9e:db:ed:f1:37:44: fc:33:5f:10:12:3e:10:9e:78:f0:70:d5:fd:34:ea:fa:7c:8d: b5:5b:e8:83:e3:23:54:c5:6a:0c:7f:29:58:8b:73:7e:92:55: 12:c9:7a:4e:1b:79:32:de:b1:c3:39:26:5e:07:8a:15:40:63: 85:60:ee:0f:e2:5e:50:18:38:e1:54:10:b7:aa:56:1d:98:c5: 9d:60:f3:72:9d:00:70:62:23:e8:10:f9:01:dc:44:60:b6:0a: a4:08:75:52:b0:6f:17:f8:49:b5:8e:e8:d8:56:e6:75:b7:0c: 85:c1:1c:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTExMDUwNzEzMjJaFw0yNTExMTIwNzEzMjJaMBgxFjAUBgNV BAMTDTY5MGFmOTEyLTYzOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4yuUL7VACNezj2knPl37raNIEkbFtrhVhWdwWeUB/ykyhgnPnEEt2rJjABZLz sHKiqBiTGU8vQiWI/H5ldI9meYoJbWhOzwlx4gYt/aZlutrT4SXB7+U4YVmtjoPM mLkqE/2NEaPg+1dj5a/8vsovEl+x+WjpuKuPvSnbggyI/YkAiGTz/CvGIvyg3q9T GN3JxtOYbFubEUwfqloUHhqmK5Qt0G/IzYvvFu56b1AQEV1trgMurNsMsuQ3oFVH +9PX4dad/J4ujVf9PJ6//REz55fqKjXmhWc/ICGiGvKB7gLWYcDh1FbWyUHcJhqz 8NNtBs8cWdUESNGE72dPMjDJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzRUs7mdj HHfBF252okuBy1Rw/90wHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6jMwL/SlV7yvigWaAY7RjeL7kT93fnPKY4L5uXUZi7f8i7CG0r05PN I2zMFfdRpyxiuldLDtPEw6PF2Mus+DuXcTgpIG5mp3TNLchXTKd0juBxKmbaFd3u AzvyGmWW8Cg89TCEEZLNXT3Ti34PMLO04pQuwl2kB3etu/YSJ64sDyfdqTbcE827 L57b7fE3RPwzXxASPhCeePBw1f006vp8jbVb6IPjI1TFagx/KViLc36SVRLJek4b eTLescM5Jl4HihVAY4Vg7g/iXlAYOOFUELeqVh2YxZ1g83KdAHBiI+gQ+QHcRGC2 CqQIdVKwbxf4SbWO6NhW5nW3DIXBHCc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:19 2025 by rpki-client