$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: JrfZORmz6TP/6Xvo7S+xG2Cx1brw49hhHte9gwCYNqc= Subject key identifier: 66:B5:57:F9:06:C2:05:40:80:93:8D:7F:AC:B1:13:F7:06:71:7B:E7 Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 0223 Signing time: Wed 05 Nov 2025 02:14:21 +0000 Manifest this update: Wed 05 Nov 2025 02:14:21 +0000 Manifest next update: Wed 12 Nov 2025 02:14:21 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: DouedTpIfSTTpmNohzizE+u1+2iiIegItzwG8S/+I2A=) 2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: Nov 5 02:14:21 2025 GMT Not After : Nov 12 02:14:21 2025 GMT Subject: CN=690ab2fd-a9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:57:88:2c:99:ec:48:41:6b:1f:2d:fe:5d: 24:ff:c4:18:82:a1:7e:78:9c:a6:7a:82:8e:92:cc: 48:ef:69:bc:b1:cd:8b:9f:9d:99:80:85:ce:2b:39: ce:21:ca:83:dc:a8:1a:62:c4:f9:6e:6d:e0:d1:62: bd:7b:93:27:ac:90:0e:6b:2f:30:ba:67:b1:57:a8: 52:2a:a0:b9:83:dd:97:19:8b:f3:da:73:aa:67:65: cb:b5:bd:50:86:cc:a4:f2:99:ee:92:9e:51:3f:c6: d5:e7:11:8f:09:29:c2:62:7a:4e:98:a6:c8:79:14: 37:32:73:4c:3f:23:9d:92:57:5e:b4:6b:11:aa:c6: ed:6c:d8:23:7e:93:24:07:b7:8d:73:b5:b6:eb:96: 0a:ae:cd:c0:29:d7:e5:2f:bb:a2:07:33:1f:79:58: 80:2a:4a:7d:0c:a4:cd:07:c7:9c:bc:38:a5:7a:17: 2d:31:c6:e7:a0:68:e6:35:04:bf:c0:c9:bc:ec:08: b4:60:aa:2e:04:d7:2b:4b:c2:1a:76:33:c3:cb:ec: 9d:dc:6a:ac:cf:30:3a:3a:cc:a2:f4:80:12:ce:5c: e6:a8:dd:7d:07:03:6f:dc:24:3e:81:e9:da:3d:71: 6e:cc:b5:be:34:50:b8:65:52:36:e7:79:1c:b6:89: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:57:F9:06:C2:05:40:80:93:8D:7F:AC:B1:13:F7:06:71:7B:E7 X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e0:99:ca:63:46:51:60:de:59:3c:25:07:1f:3a:4e:ba:ff: 8d:15:4a:0e:7b:71:dd:02:a3:5d:a1:ec:de:76:fe:a2:1a:17: 26:10:46:9d:07:2e:64:fb:b3:23:65:58:65:bd:e7:68:e5:e1: 99:be:2a:10:ea:49:cc:3f:e2:c1:ef:20:68:ea:e5:99:e1:f2: bc:11:5f:62:ef:81:a7:9a:0b:9c:63:b8:a5:87:6b:93:ed:fe: e3:c0:ba:bf:cf:a7:83:4e:95:e3:e6:60:06:59:63:eb:15:67: a8:e3:77:a3:ac:44:dc:a9:6d:32:3c:e0:3d:80:fd:b7:12:fb: 25:11:9d:df:80:10:ff:36:fa:61:c1:14:5d:b3:83:82:65:4f: 67:2f:73:a3:25:27:22:d5:e5:16:cb:b1:08:34:34:be:37:e0: 86:4f:09:3c:4c:24:8d:7c:4e:47:2a:34:ef:0f:5d:db:9b:33: 5a:00:8c:70:c1:8e:50:09:55:bb:8f:dc:4d:c4:9d:78:b8:06: e7:ec:6a:53:ad:a2:43:8d:8f:d8:ed:f5:87:46:3d:d2:50:8a: 59:65:45:87:53:01:a7:67:41:3e:5e:52:e1:cd:8a:cc:fe:1c: a2:9f:25:2d:74:e0:e7:c5:2b:14:cc:9d:30:09:99:70:bc:4a: a5:78:a7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjUxMTA1MDIxNDIxWhcNMjUxMTEyMDIxNDIxWjAYMRYwFAYD VQQDEw02OTBhYjJmZC1hOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4BXiCyZ7EhBax8t/l0k/8QYgqF+eJymeoKOksxI72m8sc2Ln52ZgIXOKznO IcqD3KgaYsT5bm3g0WK9e5MnrJAOay8wumexV6hSKqC5g92XGYvz2nOqZ2XLtb1Q hsyk8pnukp5RP8bV5xGPCSnCYnpOmKbIeRQ3MnNMPyOdkldetGsRqsbtbNgjfpMk B7eNc7W265YKrs3AKdflL7uiBzMfeViAKkp9DKTNB8ecvDilehctMcbnoGjmNQS/ wMm87Ai0YKouBNcrS8IadjPDy+yd3GqszzA6Osyi9IASzlzmqN19BwNv3CQ+gena PXFuzLW+NFC4ZVI253kctolOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa1V/kG wgVAgJONf6yxE/cGcXvnMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34JnKY0ZRYN5ZPCUHHzpOuv+NFUoOe3HdAqNdoezedv6iGhcmEEad By5k+7MjZVhlvedo5eGZvioQ6knMP+LB7yBo6uWZ4fK8EV9i74GnmgucY7ilh2uT 7f7jwLq/z6eDTpXj5mAGWWPrFWeo43ejrETcqW0yPOA9gP23EvslEZ3fgBD/Nvph wRRds4OCZU9nL3OjJSci1eUWy7EINDS+N+CGTwk8TCSNfE5HKjTvD13bmzNaAIxw wY5QCVW7j9xNxJ14uAbn7GpTraJDjY/Y7fWHRj3SUIpZZUWHUwGnZ0E+XlLhzYrM /hyinyUtdODnxSsUzJ0wCZlwvEqleKe8 -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:02 2025 by rpki-client