$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft File: yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json) Hash identifier: sI2gkGI1PgK0KnMfznjCE2MgvYHL1tx9CfWxzLqvbnk= Subject key identifier: 05:DC:B1:D9:CF:12:60:ED:30:A0:D5:A3:23:5C:EF:57:76:1E:F6:9F Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 Certificate issuer: /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Certificate serial: 09DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft Manifest number: 09D4 Signing time: Tue 04 Nov 2025 20:02:00 +0000 Manifest this update: Tue 04 Nov 2025 20:02:00 +0000 Manifest next update: Tue 11 Nov 2025 20:02:00 +0000 Files and hashes: 1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: WuexkH+lpfMOHwG5qZIQ10V6OxIeh4t58pTUXCii/3M=) 2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: lg62QlYMqjfdPrlhdfFEapPKxJAEOZfWw6bA0op19ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Validity Not Before: Nov 4 20:02:00 2025 GMT Not After : Nov 11 20:02:00 2025 GMT Subject: CN=690a5bb8-14c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:9a:22:2e:f5:ae:f6:47:04:17:42:bb:af: 66:f8:d5:76:f1:28:13:9b:b9:ba:e2:a4:c3:c8:8c: 2b:86:51:16:3e:27:a1:ea:b4:a5:a2:95:7b:db:55: 99:b1:d2:53:1e:f8:bc:fe:c2:ab:0b:88:a8:40:28: 5b:e4:e5:a1:b8:57:30:16:bf:87:13:c8:e8:d4:10: 04:e9:69:94:81:2e:d8:45:f1:ac:71:e0:c1:4e:56: 79:b4:90:5e:01:f5:55:59:b6:01:17:09:bb:21:3b: 04:41:f5:78:cb:3a:aa:07:02:ba:96:0f:34:d8:88: 7d:64:3b:92:29:a5:a8:44:3b:f9:59:b4:35:d0:f9: 77:d9:ae:e7:78:1f:96:e6:48:5a:41:36:c2:20:fb: 69:4e:38:dc:4d:7c:f7:ca:59:e6:c7:e8:1c:5d:8a: e4:61:79:2f:cc:18:d5:38:3f:7b:6a:35:1c:c2:29: b7:fc:80:14:2e:86:99:ef:88:da:98:62:85:59:22: 95:de:a6:29:cc:75:fd:ca:62:f2:85:71:e9:d4:f6: ee:db:53:22:57:e9:25:6f:19:ed:70:35:89:50:17: 9e:8a:8f:05:d7:37:6e:b3:4b:fc:a1:1f:e1:29:12: a7:ae:f2:66:c5:dc:6f:4d:40:ab:77:00:7c:b6:7e: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DC:B1:D9:CF:12:60:ED:30:A0:D5:A3:23:5C:EF:57:76:1E:F6:9F X509v3 Authority Key Identifier: keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ef:c1:2a:a2:b8:ba:6c:05:25:e6:f1:1c:e4:54:2f:c6:b1: e0:3a:18:c2:b1:90:81:aa:ee:16:01:3a:6c:48:08:15:ad:5a: 08:8d:68:7a:42:a3:29:81:b2:59:fd:b8:35:0a:9b:3c:88:11: 6b:df:19:6f:d4:29:fd:fa:63:de:1a:82:79:b7:1d:51:e1:c8: 28:da:38:d2:ac:e4:4d:9d:45:e7:23:bf:95:c7:b1:04:29:d0: 1a:df:b8:6e:be:6d:07:b2:31:36:d4:f6:3c:0f:1b:49:6b:08: a3:14:f8:67:c2:48:34:95:96:1b:5e:d3:12:08:27:ec:57:eb: d6:fa:53:87:7c:b6:b6:8d:bd:9e:52:79:48:e5:ce:3d:06:5e: 4b:b9:6e:4d:21:71:a7:8a:b6:aa:31:20:dd:c0:26:74:69:03: 64:80:2e:88:2f:1c:67:b3:8a:aa:1d:de:2e:61:7d:fe:4a:67: 30:4f:d2:73:3e:87:14:be:ff:24:78:6e:dd:a1:5c:fd:77:b7: 98:1a:a4:06:a9:79:8a:78:11:75:ab:7c:04:dd:31:df:8a:55: 68:6f:0c:0c:84:9c:44:54:0e:ab:51:48:bd:e8:32:50:31:50: 17:9c:38:11:94:fb:0b:14:1f:45:8d:1a:3b:2b:f8:f3:ba:d3: d8:33:da:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNDIxMTAvBgNVBAUTKENCMjRDRjMzMTJBMTYyNzE1OENDM0FEQTg4OEU1QkNC MEM2N0NFQTEwHhcNMjUxMTA0MjAwMjAwWhcNMjUxMTExMjAwMjAwWjAYMRYwFAYD VQQDEw02OTBhNWJiOC0xNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8WaIi71rvZHBBdCu69m+NV28SgTm7m64qTDyIwrhlEWPieh6rSlopV721WZ sdJTHvi8/sKrC4ioQChb5OWhuFcwFr+HE8jo1BAE6WmUgS7YRfGsceDBTlZ5tJBe AfVVWbYBFwm7ITsEQfV4yzqqBwK6lg802Ih9ZDuSKaWoRDv5WbQ10Pl32a7neB+W 5khaQTbCIPtpTjjcTXz3ylnmx+gcXYrkYXkvzBjVOD97ajUcwim3/IAULoaZ74ja mGKFWSKV3qYpzHX9ymLyhXHp1Pbu21MiV+klbxntcDWJUBeeio8F1zdus0v8oR/h KRKnrvJmxdxvTUCrdwB8tn6WOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXcsdnP EmDtMKDVoyNc71d2HvafMB8GA1UdIwQYMBaAFMskzzMSoWJxWMw62oiOW8sMZ86h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM0Mi8wQjQxMDBDMDhF OEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFluRll6RHJhaUk1Ynl3eG56 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5VFBNeEtoWW5GWXpEcmFpSTVieXd4bnpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM0Mi8wQjQxMDBDMDhFOEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFlu Rll6RHJhaUk1Ynl3eG56cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG78Eqori6bAUl5vEc5FQvxrHgOhjCsZCBqu4WATpsSAgVrVoIjWh6 QqMpgbJZ/bg1Cps8iBFr3xlv1Cn9+mPeGoJ5tx1R4cgo2jjSrORNnUXnI7+Vx7EE KdAa37huvm0HsjE21PY8DxtJawijFPhnwkg0lZYbXtMSCCfsV+vW+lOHfLa2jb2e UnlI5c49Bl5LuW5NIXGniraqMSDdwCZ0aQNkgC6ILxxns4qqHd4uYX3+SmcwT9Jz PocUvv8keG7doVz9d7eYGqQGqXmKeBF1q3wE3THfilVobwwMhJxEVA6rUUi96DJQ MVAXnDgRlPsLFB9FjRo7K/jzutPYM9qt -----END CERTIFICATE-----Generated at Wed Nov 5 15:42:50 2025 by rpki-client