$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: 5LzxgLQY1mvFjghQoJ2wT/IvWktVoirc6xNBxi2aGIE= Subject key identifier: 4C:3E:E3:DA:17:C8:17:C4:7B:8C:00:0A:DD:52:D7:CA:73:45:3E:ED Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 07AE Signing time: Sun 02 Nov 2025 21:24:45 +0000 Manifest this update: Sun 02 Nov 2025 21:24:45 +0000 Manifest next update: Sun 09 Nov 2025 21:24:45 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: ow97LepL36cND5XmcvGNWou5tG7hBlsreDOKdGOSsJY=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Nov 2 21:24:45 2025 GMT Not After : Nov 9 21:24:45 2025 GMT Subject: CN=6907cc1d-7cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:48:ab:26:58:7d:43:76:36:23:51:e3:23:22: 94:5a:04:eb:11:42:83:b4:62:2a:e0:aa:d6:fb:cc: 57:1f:6c:49:71:a1:d7:20:c7:43:5c:3f:ba:96:eb: 5f:45:37:ae:6b:b4:7f:3f:b7:6c:dc:49:38:10:81: c7:b3:42:ee:e8:da:af:82:e6:e1:80:61:7f:86:51: 5e:22:3d:69:20:79:28:25:97:26:35:7a:22:4f:42: 53:db:7a:86:a9:37:85:ea:30:2d:b5:65:91:82:f1: 9f:4a:41:20:5a:97:d9:9c:49:4a:5b:72:89:22:be: 2c:a0:be:58:e7:97:91:01:a8:bd:1c:ea:04:c2:71: 5e:d4:88:c7:6d:c3:e8:6b:4b:8f:18:cf:90:11:bf: 74:a7:71:d1:55:88:83:ef:a9:58:4e:6c:18:62:c6: d9:0a:7e:28:5a:82:93:56:35:94:1c:3f:7c:9a:63: 4c:35:da:3d:7b:c2:0f:5e:ae:c5:eb:55:3b:a0:e4: 31:df:c6:52:35:e7:6f:05:e7:3a:5a:da:09:3f:1d: cf:f3:4a:84:2e:c5:70:93:d5:d8:1e:09:2c:9b:3c: 56:88:20:44:ea:ab:8b:36:c6:0c:dc:b6:3b:70:02: d7:fc:e6:07:e8:17:4d:10:a8:ad:6c:8b:0e:ab:2f: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3E:E3:DA:17:C8:17:C4:7B:8C:00:0A:DD:52:D7:CA:73:45:3E:ED X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:9e:a2:c6:66:92:9c:c0:a0:11:39:ac:5f:f0:23:d0:b2: e9:a0:06:b6:0a:7a:e7:fa:7e:18:4a:09:bb:cd:08:a7:b0:43: 08:6a:c1:ee:d9:18:5b:11:e4:89:6a:c3:e4:f1:22:60:41:11: ed:a7:b3:26:3f:2a:cc:cc:cd:c1:06:b0:8a:3b:81:58:9b:fd: 58:d2:c3:fe:a1:19:a0:bf:34:8f:ed:02:fc:65:35:84:fd:aa: 5c:ca:41:9b:69:8b:a5:86:ee:18:60:92:f9:5c:81:38:84:35: d3:bf:05:89:91:19:6f:31:93:a3:a0:81:e5:d2:25:3c:d7:db: a3:7b:87:ce:86:f9:e1:78:0e:25:03:05:77:f8:06:01:ba:36: 88:89:11:ec:d7:ab:4c:7d:af:28:b3:d4:50:a3:13:38:32:98: fe:6b:76:5a:e0:1b:b6:73:12:d7:e0:8e:fc:79:47:48:b8:c8: 5e:61:35:d3:d5:53:cc:f1:4d:d9:e4:1d:2e:5b:fe:a1:c7:05: 78:75:5e:89:2a:79:62:5b:a8:7d:6a:0e:b7:b7:14:3e:dc:5a: 21:ac:db:9a:3d:36:f1:c9:20:a0:f5:23:26:50:7e:e6:45:78: e5:86:d0:de:01:a9:30:7d:fa:65:02:a4:ca:b3:91:d5:7d:da: c5:8b:42:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUxMTAyMjEyNDQ1WhcNMjUxMTA5MjEyNDQ1WjAYMRYwFAYD VQQDEw02OTA3Y2MxZC03Y2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EirJlh9Q3Y2I1HjIyKUWgTrEUKDtGIq4KrW+8xXH2xJcaHXIMdDXD+6lutf RTeua7R/P7ds3Ek4EIHHs0Lu6NqvgubhgGF/hlFeIj1pIHkoJZcmNXoiT0JT23qG qTeF6jAttWWRgvGfSkEgWpfZnElKW3KJIr4soL5Y55eRAai9HOoEwnFe1IjHbcPo a0uPGM+QEb90p3HRVYiD76lYTmwYYsbZCn4oWoKTVjWUHD98mmNMNdo9e8IPXq7F 61U7oOQx38ZSNedvBec6WtoJPx3P80qELsVwk9XYHgksmzxWiCBE6quLNsYM3LY7 cALX/OYH6BdNEKitbIsOqy9uOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw+49oX yBfEe4wACt1S18pzRT7tMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6Z6ixmaSnMCgETmsX/Aj0LLpoAa2Cnrn+n4YSgm7zQinsEMIasHu 2RhbEeSJasPk8SJgQRHtp7MmPyrMzM3BBrCKO4FYm/1Y0sP+oRmgvzSP7QL8ZTWE /apcykGbaYulhu4YYJL5XIE4hDXTvwWJkRlvMZOjoIHl0iU819uje4fOhvnheA4l AwV3+AYBujaIiRHs16tMfa8os9RQoxM4Mpj+a3Za4Bu2cxLX4I78eUdIuMheYTXT 1VPM8U3Z5B0uW/6hxwV4dV6JKnliW6h9ag63txQ+3FohrNuaPTbxySCg9SMmUH7m RXjlhtDeAakwffplAqTKs5HVfdrFi0Lm -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:15 2025 by rpki-client