$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: mNK8iGugMKOOpbj1jJUotKKKMm2YAXYLEtuqff2oXYA= Subject key identifier: B1:8A:07:35:F0:E6:98:A8:47:55:B0:10:0C:16:C2:D6:E2:9D:44:CC Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 01B5 Signing time: Wed 05 Nov 2025 03:17:24 +0000 Manifest this update: Wed 05 Nov 2025 03:17:24 +0000 Manifest next update: Wed 12 Nov 2025 03:17:24 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: pCvK48OCnSFG58JhCzq1Ry5MuaV+4XyVys+I/vbmM34=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: T9bgb6w+YEKZ5F9ekCDjbubT5zB0ZkUsFds1ZxlsLrE=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: Poe8WZPLlmMRopxum73vePC7h4bI4X/kM9rphS1LhLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Nov 5 03:17:24 2025 GMT Not After : Nov 12 03:17:24 2025 GMT Subject: CN=690ac1c4-1bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:1f:47:70:a7:82:30:d1:6b:f9:03:ee:28: 82:e0:29:a0:4c:73:9c:75:b0:13:c9:f7:97:fc:36: 09:0b:1a:a7:b9:9c:d0:e0:61:ef:2a:c8:81:bd:cd: 9a:01:8e:9e:ce:9a:fa:f9:84:74:25:21:31:32:fa: 9f:a4:9e:2f:01:14:e8:36:aa:9a:8c:0e:bf:4d:05: 73:cb:2e:b6:76:23:54:16:39:9f:75:48:da:c5:12: cd:ab:f2:ae:12:ec:1f:bb:8e:e8:8b:df:0e:c3:91: 5f:1d:39:f6:68:40:39:60:04:1e:a4:c7:a5:c8:62: e0:d2:be:d3:4c:d0:6b:3d:e7:01:d4:a2:89:b1:fe: 43:e2:3e:66:8e:58:f9:5f:72:c7:b3:4c:c2:43:2a: f3:43:68:78:e3:40:d5:29:e2:87:ca:4b:8f:3b:c7: f1:00:f2:04:70:b5:e7:56:e1:04:86:7d:59:b5:c9: 7d:15:e6:78:d0:c5:0e:7d:e6:3b:c3:22:db:30:e8: 7c:0b:01:88:63:f7:65:91:96:a5:2e:de:fe:2b:fc: cc:c5:2d:14:c4:17:ba:e4:d4:7c:d0:dc:f5:20:47: 00:a0:18:f0:02:c0:bc:3b:a1:95:52:b2:0f:16:fb: 7b:ec:ae:ca:ef:a6:60:66:92:83:4b:f0:53:b7:8d: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8A:07:35:F0:E6:98:A8:47:55:B0:10:0C:16:C2:D6:E2:9D:44:CC X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7a:2f:52:40:4a:dc:92:b9:47:f8:ec:f7:b5:b6:fe:88:15: 1b:36:c8:2d:af:87:6c:4f:7f:e1:2e:55:1c:5a:17:4c:14:22: 76:f2:cd:bf:7d:d2:ac:61:83:95:58:6f:34:83:43:56:85:61: cc:d4:a0:ef:7d:11:45:0e:66:39:58:c7:84:c5:e7:32:bb:b0: 7a:89:75:01:a4:a3:3d:ab:a1:03:bb:ee:6c:7c:3c:a6:82:bd: 27:0e:ec:a7:c9:d4:e8:05:29:3f:ea:e6:5b:ec:ed:a7:ae:8c: 03:49:72:c1:8f:67:f4:ec:ef:0c:27:fc:3e:49:df:cb:da:41: 6e:fb:67:99:c1:6f:c5:dd:7f:74:90:8d:ff:6f:a2:9d:bc:4b: eb:c4:4d:a5:50:06:93:a3:98:bf:91:91:e6:24:1b:da:74:65: 57:00:16:fc:86:a9:38:cd:6e:54:e1:e1:6b:43:df:d5:4d:f8: 11:d8:1a:17:2d:ad:7e:d6:eb:6a:b3:38:39:7c:35:85:f8:ff: 3b:99:78:b5:6b:b3:03:8f:f4:d0:b5:a8:f4:91:88:53:32:1a: a1:ee:b0:45:d4:5c:eb:e7:7e:5e:3e:17:c2:d4:cc:3f:cf:d5: d5:48:e6:bf:8d:74:ba:cf:b4:44:dc:97:93:41:fa:cb:4a:97: 06:ae:6e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUxMTA1MDMxNzI0WhcNMjUxMTEyMDMxNzI0WjAYMRYwFAYD VQQDEw02OTBhYzFjNC0xYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNkfR3CngjDRa/kD7iiC4CmgTHOcdbATyfeX/DYJCxqnuZzQ4GHvKsiBvc2a AY6ezpr6+YR0JSExMvqfpJ4vARToNqqajA6/TQVzyy62diNUFjmfdUjaxRLNq/Ku Euwfu47oi98Ow5FfHTn2aEA5YAQepMelyGLg0r7TTNBrPecB1KKJsf5D4j5mjlj5 X3LHs0zCQyrzQ2h440DVKeKHykuPO8fxAPIEcLXnVuEEhn1Ztcl9FeZ40MUOfeY7 wyLbMOh8CwGIY/dlkZalLt7+K/zMxS0UxBe65NR80Nz1IEcAoBjwAsC8O6GVUrIP Fvt77K7K76ZgZpKDS/BTt41NzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGKBzXw 5pioR1WwEAwWwtbinUTMMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPei9SQErckrlH+Oz3tbb+iBUbNsgtr4dsT3/hLlUcWhdMFCJ28s2/ fdKsYYOVWG80g0NWhWHM1KDvfRFFDmY5WMeExecyu7B6iXUBpKM9q6EDu+5sfDym gr0nDuynydToBSk/6uZb7O2nrowDSXLBj2f07O8MJ/w+Sd/L2kFu+2eZwW/F3X90 kI3/b6KdvEvrxE2lUAaTo5i/kZHmJBvadGVXABb8hqk4zW5U4eFrQ9/VTfgR2BoX La1+1utqszg5fDWF+P87mXi1a7MDj/TQtaj0kYhTMhqh7rBF1Fzr535ePhfC1Mw/ z9XVSOa/jXS6z7RE3JeTQfrLSpcGrm6b -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:57 2025 by rpki-client