$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json) Hash identifier: XHpOVVvkvfaOSPvv/ZcS3Arg8yO9H2TSx8ydccD7OgE= Subject key identifier: A2:55:E1:DE:25:4B:04:A1:80:E0:08:45:76:59:D3:CC:D4:60:90:C4 Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft Manifest number: 26 Signing time: Mon 03 Nov 2025 07:42:00 +0000 Manifest this update: Mon 03 Nov 2025 07:41:59 +0000 Manifest next update: Mon 10 Nov 2025 07:41:59 +0000 Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: EQQT6A0m65Ovz/jCEhWLIq2ky+IdF+ydrn6ael6nbd4=) 2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Validity Not Before: Nov 3 07:41:59 2025 GMT Not After : Nov 10 07:41:59 2025 GMT Subject: CN=69085cc8-61c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:11:a9:96:50:8c:4d:81:8a:9e:f8:1c:01: 1e:c6:7f:ca:dc:29:65:53:ed:56:1e:0b:80:8d:17: 49:c4:28:7d:a1:16:87:c9:4b:fc:db:b7:c9:15:c6: 2b:07:83:a6:f7:9b:00:67:e5:22:85:c0:6b:c1:56: 15:28:e4:a7:74:97:f5:9d:3d:9c:dd:42:42:e1:5c: 73:0a:46:de:f4:ac:d4:f1:c5:0a:00:0b:7e:b4:22: 37:79:e0:d5:71:7d:4c:a1:f0:49:73:f9:2e:fb:70: 47:66:e3:b7:6f:bc:4a:9f:5e:a4:10:1b:5a:d8:6a: 79:bb:47:10:5d:6d:a9:11:b6:c0:3e:7d:d9:81:f4: 5c:75:88:ae:04:42:a3:c9:47:25:11:1d:3f:00:0f: 9f:e9:ed:0f:54:d0:bb:ee:20:2e:4c:87:ef:42:a0: 85:b9:e8:0b:f8:32:49:c8:5c:33:ed:f6:f9:1c:72: d2:3f:1e:6d:ec:a2:81:94:84:97:3e:27:f7:41:54: 98:76:49:70:fe:a3:5c:09:72:c8:b5:f4:98:b4:1b: 05:e0:b0:40:34:bc:31:a8:e0:fe:93:13:7a:13:a4: 5b:c6:08:ba:95:3a:3d:68:d6:60:37:08:db:de:35: 14:8d:73:f7:ca:50:fa:94:7f:6f:59:45:64:35:31: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:E1:DE:25:4B:04:A1:80:E0:08:45:76:59:D3:CC:D4:60:90:C4 X509v3 Authority Key Identifier: keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e8:ff:e8:fb:df:bd:26:b7:05:31:a8:7a:05:f0:5a:9d:d1: 4d:80:08:9c:96:72:3d:d4:6c:ee:f9:6d:17:87:8b:ae:39:fc: d0:1d:78:56:b0:d4:4b:ea:3b:51:30:c3:db:3a:d2:48:54:fb: a3:49:d0:a1:d8:b2:a4:d6:f2:9c:89:54:19:d8:e9:16:28:d3: 96:79:13:af:f7:e7:14:53:dd:e2:ad:96:ac:d2:c7:09:5a:6e: 10:1e:af:1c:cc:5c:87:98:36:2e:5d:78:4f:04:2a:a7:3e:33: 64:90:ef:3c:dc:99:51:80:72:41:2f:47:a5:4f:c1:ad:d9:59: 70:1b:f2:84:e6:b2:d9:59:29:72:77:78:cd:b0:b2:44:96:be: 91:23:0e:b1:cf:96:9b:e8:0d:cd:cd:66:25:2d:57:f4:ab:35: fd:86:7c:47:1e:60:b4:bb:40:c9:f8:8b:cd:29:83:c7:43:17: ee:ce:34:56:af:6f:e8:69:0b:c7:3c:44:23:b3:55:ef:14:45: 6d:01:b0:92:15:c3:6e:8a:46:8b:4c:43:96:43:22:e4:3a:7f: f9:a7:35:97:98:71:16:51:03:e9:95:75:fa:63:24:9a:7d:0c: c6:29:f1:a5:45:20:c8:09:a0:f7:69:6c:98:ef:fb:b5:91:f3: 15:3a:16:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF NkZEQkM1RjAeFw0yNTExMDMwNzQxNTlaFw0yNTExMTAwNzQxNTlaMBgxFjAUBgNV BAMTDTY5MDg1Y2M4LTYxYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJMRGpllCMTYGKnvgcAR7Gf8rcKWVT7VYeC4CNF0nEKH2hFofJS/zbt8kVxisH g6b3mwBn5SKFwGvBVhUo5Kd0l/WdPZzdQkLhXHMKRt70rNTxxQoAC360Ijd54NVx fUyh8Elz+S77cEdm47dvvEqfXqQQG1rYanm7RxBdbakRtsA+fdmB9Fx1iK4EQqPJ RyURHT8AD5/p7Q9U0LvuIC5Mh+9CoIW56Av4MknIXDPt9vkcctI/Hm3sooGUhJc+ J/dBVJh2SXD+o1wJcsi19Ji0GwXgsEA0vDGo4P6TE3oTpFvGCLqVOj1o1mA3CNve NRSNc/fKUPqUf29ZRWQ1MQRtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUolXh3iVL BKGA4AhFdlnTzNRgkMQwHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzc0M0QxNjdFN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZ NVJBdEFxdGRmbGViOXZGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLo/+j7370mtwUxqHoF8Fqd0U2ACJyWcj3UbO75bReHi645/NAdeFaw 1EvqO1Eww9s60khU+6NJ0KHYsqTW8pyJVBnY6RYo05Z5E6/35xRT3eKtlqzSxwla bhAerxzMXIeYNi5deE8EKqc+M2SQ7zzcmVGAckEvR6VPwa3ZWXAb8oTmstlZKXJ3 eM2wskSWvpEjDrHPlpvoDc3NZiUtV/SrNf2GfEceYLS7QMn4i80pg8dDF+7ONFav b+hpC8c8RCOzVe8URW0BsJIVw26KRotMQ5ZDIuQ6f/mnNZeYcRZRA+mVdfpjJJp9 DMYp8aVFIMgJoPdpbJjv+7WR8xU6Fss= -----END CERTIFICATE-----Generated at Wed Nov 5 04:23:51 2025 by rpki-client