$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: 7KjNsIl4KriGLFVhe+Hbhxlguc2tG3gS8jyF1EVt6ko= Subject key identifier: C0:83:D8:45:54:1A:B8:4D:F6:D6:7F:D6:EC:A6:99:D2:DA:D9:92:10 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 14C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 14C6 Signing time: Tue 04 Nov 2025 16:57:11 +0000 Manifest this update: Tue 04 Nov 2025 16:57:10 +0000 Manifest next update: Tue 11 Nov 2025 16:57:10 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: SQib6C8FC1IJBifLLzwc6EsFKqMujRTTCeyCD6JjKfc=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Nov 4 16:57:10 2025 GMT Not After : Nov 11 16:57:10 2025 GMT Subject: CN=690a3067-1e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:06:7f:4b:b2:42:c8:d0:c2:a1:d4:37:38: 81:2b:49:44:b8:f2:d4:7f:da:27:93:9d:14:83:44: 27:ca:ff:b4:6f:e4:25:0e:6e:c2:8b:74:78:d6:ac: 52:f8:fe:cb:17:e7:86:05:b7:b8:63:08:d2:f3:04: 4c:44:9b:0e:55:b2:e0:cc:c9:91:c5:40:e2:47:51: 96:a2:c4:40:b6:6a:0a:4d:ed:b3:76:90:03:ac:40: fe:f3:a9:09:07:f1:93:7f:23:0d:fd:7e:82:db:dd: ec:47:12:cd:5c:9a:7a:2e:0c:9a:55:1a:94:62:0b: 41:dc:a8:0f:a0:9c:30:a3:b6:e8:6a:19:39:8b:d3: 6d:27:c9:11:30:a9:d3:c7:c3:75:64:22:1c:fd:3b: 9d:19:cb:6c:26:28:36:75:52:54:02:da:f9:12:70: 9f:df:6e:8d:b5:38:67:97:2e:27:e9:49:9b:f9:68: 08:73:c7:fb:3a:7a:b6:41:d9:70:30:ca:ac:6c:1a: b6:ed:2d:c8:65:76:9a:c9:66:eb:03:0f:f7:f7:53: 6b:f6:af:13:d7:ce:3f:d5:f8:40:fb:69:8e:79:a2: 25:16:a6:ce:4a:26:74:dd:da:67:0c:7e:df:13:95: ab:26:e3:93:be:78:87:41:f3:b5:46:a0:e3:3a:44: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:D8:45:54:1A:B8:4D:F6:D6:7F:D6:EC:A6:99:D2:DA:D9:92:10 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e3:1f:b9:c0:f6:e0:30:0c:d5:e7:52:c7:7a:d9:51:5f:5e: 1d:73:05:89:a4:2b:37:b9:3e:4e:84:d3:b9:96:ff:94:9b:2f: 2a:52:59:7b:12:77:cc:ce:6d:b1:5c:b8:95:e0:5f:79:1d:8e: d9:91:17:5a:1a:e7:7c:da:6c:dc:e9:44:8a:e6:52:ca:a6:09: 66:ee:83:35:3b:03:10:84:4c:ba:8c:69:de:3e:14:2e:c4:28: 3b:54:c7:47:ee:4a:ff:92:5b:17:1e:b8:b0:8e:e7:6c:5a:4f: d9:02:94:f4:b6:33:1f:33:b2:e6:0e:74:b0:91:7e:a7:49:29: ff:d9:a3:84:5b:8f:e6:0c:3e:ef:8a:8b:92:4c:9c:5f:88:aa: ad:40:bc:0b:a3:08:4e:6d:2f:e8:da:d0:95:97:c8:1d:ba:ba: 8d:43:fb:77:47:a7:2a:2d:b4:e8:f6:1e:d4:98:fc:cd:08:02: 8e:f3:5f:4b:c1:21:ea:a1:02:bb:c4:a6:2d:c6:a0:ec:e3:26: ab:47:87:55:23:39:0b:07:24:48:25:b1:a8:a0:0c:10:6c:83: 35:8d:01:47:51:dc:c3:78:b4:56:f2:67:81:e9:cc:9c:3e:3d: e9:bd:4b:7f:e5:7d:3b:9e:8f:23:b3:f2:73:1a:0f:2e:6c:8a: 73:ad:03:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUxMTA0MTY1NzEwWhcNMjUxMTExMTY1NzEwWjAYMRYwFAYD VQQDEw02OTBhMzA2Ny0xZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsoGf0uyQsjQwqHUNziBK0lEuPLUf9onk50Ug0Qnyv+0b+QlDm7Ci3R41qxS +P7LF+eGBbe4YwjS8wRMRJsOVbLgzMmRxUDiR1GWosRAtmoKTe2zdpADrED+86kJ B/GTfyMN/X6C293sRxLNXJp6LgyaVRqUYgtB3KgPoJwwo7boahk5i9NtJ8kRMKnT x8N1ZCIc/TudGctsJig2dVJUAtr5EnCf326NtThnly4n6Umb+WgIc8f7Onq2Qdlw MMqsbBq27S3IZXaayWbrAw/391Nr9q8T184/1fhA+2mOeaIlFqbOSiZ03dpnDH7f E5WrJuOTvniHQfO1RqDjOkR5EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCD2EVU GrhN9tZ/1uymmdLa2ZIQMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL4x+5wPbgMAzV51LHetlRX14dcwWJpCs3uT5OhNO5lv+Umy8qUll7 EnfMzm2xXLiV4F95HY7ZkRdaGud82mzc6USK5lLKpglm7oM1OwMQhEy6jGnePhQu xCg7VMdH7kr/klsXHriwjudsWk/ZApT0tjMfM7LmDnSwkX6nSSn/2aOEW4/mDD7v iouSTJxfiKqtQLwLowhObS/o2tCVl8gdurqNQ/t3R6cqLbTo9h7UmPzNCAKO819L wSHqoQK7xKYtxqDs4yarR4dVIzkLByRIJbGooAwQbIM1jQFHUdzDeLRW8meB6cyc Pj3pvUt/5X07no8js/JzGg8ubIpzrQNv -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:47 2025 by rpki-client