$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: qOxTie2UeRcdpVIbzcqkEeBSC2j3C8qgKF7+SmchZgY= Subject key identifier: B8:E2:B0:24:9A:8B:AD:DA:D4:74:48:F9:B5:CA:D3:C7:A7:64:87:76 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 109D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 109D Signing time: Tue 04 Nov 2025 17:26:13 +0000 Manifest this update: Tue 04 Nov 2025 17:26:12 +0000 Manifest next update: Tue 11 Nov 2025 17:26:12 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: UGoTyGiVRhh59s+cLpbzqQeWOl5bDRQORelk1a7Kb7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Nov 4 17:26:12 2025 GMT Not After : Nov 11 17:26:12 2025 GMT Subject: CN=690a3735-ea74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:09:e8:94:e5:76:b6:86:70:2c:d6:82:97: ba:d6:6e:cb:b1:f1:8f:3c:52:2c:1f:0f:35:8d:7b: 35:c0:41:74:ec:fe:98:af:27:fe:07:f9:43:f4:80: 97:bc:ea:4f:8a:66:7a:a5:aa:2e:82:e7:4a:e5:f1: 60:28:bc:9f:d2:2f:49:fe:54:0f:49:88:e8:4c:6b: c6:eb:df:54:4a:f4:c2:4f:b9:62:2c:29:9e:ed:f2: 11:d3:17:a7:a7:3a:b6:1b:d6:df:e9:7f:01:58:72: bd:1c:a0:12:50:0f:8c:a9:9a:46:47:e2:f9:00:22: 31:7a:71:fa:f5:f3:75:ec:b1:98:9d:4f:52:72:a0: b2:60:08:68:03:40:b3:de:ec:42:e5:ce:75:de:f3: 00:4e:ca:49:25:39:f1:21:2b:b6:bc:7e:77:a1:a5: 57:4c:53:cd:9d:f3:e8:48:05:20:d5:eb:96:99:fc: 75:1e:4e:0b:d3:ac:1d:cc:14:42:da:46:13:64:a3: 61:e5:a9:55:40:95:38:bc:e0:36:37:69:ec:d4:56: a2:d8:02:cc:8b:b7:16:1f:ab:ae:a9:c6:3c:c9:ca: 81:4f:ce:73:2b:bc:e4:66:92:3c:e8:89:36:20:fb: cf:fa:09:9f:2f:bb:53:bc:ab:1d:f1:cd:88:09:7e: 35:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:B0:24:9A:8B:AD:DA:D4:74:48:F9:B5:CA:D3:C7:A7:64:87:76 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:ed:52:97:43:78:fc:33:f6:c8:f8:1f:e9:46:14:1f:da: 57:7a:68:d2:48:19:3d:65:e8:a5:de:5a:36:b8:d1:db:6a:14: bc:29:dc:98:25:48:57:61:9c:bc:c4:3e:fa:a6:42:b9:a2:93: b8:9b:b5:be:53:a0:1e:06:cf:03:3b:67:00:e6:0c:d9:df:64: 10:03:18:48:f7:31:b3:b9:bc:aa:95:06:fe:53:27:fc:80:db: 1f:e6:ae:fb:76:c9:26:69:c8:19:8b:50:dc:c5:7b:29:12:3e: 2e:25:31:5c:a4:eb:7f:2d:b9:fe:aa:d6:ea:f9:4e:51:db:51: ff:75:a7:bf:14:45:a1:aa:a4:f0:11:e8:19:1d:4e:82:ad:fc: 9a:b8:81:e7:37:ed:2c:e7:cb:16:26:17:eb:a7:82:43:ff:ab: 9e:6d:d7:da:82:d8:86:6a:3e:17:37:66:ba:61:50:d1:94:51: 60:fb:8b:15:2d:f1:db:ea:82:df:96:25:93:b0:bb:f4:88:05: 51:0a:c2:46:e3:c5:b5:6c:56:95:08:80:5f:30:c9:8d:b2:35: 40:29:ae:3f:9d:02:2a:99:d9:f1:e1:05:fd:aa:4d:eb:e9:0f: 23:12:c9:51:72:69:02:31:bb:a0:47:9b:cb:f1:d6:a4:ae:9d: 93:0a:38:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUxMTA0MTcyNjEyWhcNMjUxMTExMTcyNjEyWjAYMRYwFAYD VQQDEw02OTBhMzczNS1lYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXUJ6JTldraGcCzWgpe61m7LsfGPPFIsHw81jXs1wEF07P6Yryf+B/lD9ICX vOpPimZ6paougudK5fFgKLyf0i9J/lQPSYjoTGvG699USvTCT7liLCme7fIR0xen pzq2G9bf6X8BWHK9HKASUA+MqZpGR+L5ACIxenH69fN17LGYnU9ScqCyYAhoA0Cz 3uxC5c513vMATspJJTnxISu2vH53oaVXTFPNnfPoSAUg1euWmfx1Hk4L06wdzBRC 2kYTZKNh5alVQJU4vOA2N2ns1Fai2ALMi7cWH6uuqcY8ycqBT85zK7zkZpI86Ik2 IPvP+gmfL7tTvKsd8c2ICX41gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjisCSa i63a1HRI+bXK08enZId2MB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOou1Sl0N4/DP2yPgf6UYUH9pXemjSSBk9Zeil3lo2uNHbahS8KdyY JUhXYZy8xD76pkK5opO4m7W+U6AeBs8DO2cA5gzZ32QQAxhI9zGzubyqlQb+Uyf8 gNsf5q77dskmacgZi1DcxXspEj4uJTFcpOt/Lbn+qtbq+U5R21H/dae/FEWhqqTw EegZHU6CrfyauIHnN+0s58sWJhfrp4JD/6uebdfagtiGaj4XN2a6YVDRlFFg+4sV LfHb6oLfliWTsLv0iAVRCsJG48W1bFaVCIBfMMmNsjVAKa4/nQIqmdnx4QX9qk3r 6Q8jEslRcmkCMbugR5vL8dakrp2TCjiS -----END CERTIFICATE-----Generated at Wed Nov 5 23:50:08 2025 by rpki-client