$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft File: yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json) Hash identifier: k8kHOhW0Yd/CAU/24bwnXUfQAWVTVJJW6DMp7ebnU7A= Subject key identifier: E5:D8:21:73:6F:88:1B:9B:4F:72:05:66:AA:99:79:BF:AA:AE:64:3C Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9 Certificate issuer: /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft Manifest number: 085D Signing time: Tue 04 Nov 2025 20:45:16 +0000 Manifest this update: Tue 04 Nov 2025 20:45:16 +0000 Manifest next update: Tue 11 Nov 2025 20:45:16 +0000 Files and hashes: 1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: 7xGwpBLBSJzv7vyvzeQcsISHezCs3fd8MJ2i/NIKESs=) 2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: a26G9stfHyp0Gux3jQKbfLSUgjXPlGCMpAEtwizoJbM=) 3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: 6rnru1Tv8+/CdqX1493WbqB7SUJPoKusoDtttnuxJBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9 Validity Not Before: Nov 4 20:45:16 2025 GMT Not After : Nov 11 20:45:16 2025 GMT Subject: CN=690a65dc-e8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:dd:0e:3d:e1:2e:32:29:0b:f1:bf:7b:9b: e6:3b:44:f3:7a:3d:ca:32:07:da:58:39:47:df:69: 13:a0:b8:7e:32:40:40:b7:05:7c:1d:36:85:9d:af: b0:e1:f8:e2:10:1b:37:0a:bc:44:e8:46:1a:47:42: 05:9a:c5:8f:df:04:b3:2e:16:9f:5d:30:a5:f6:53: 17:ae:6d:8f:b6:4f:ce:4e:30:51:76:3c:23:2a:83: c7:e7:df:da:67:9e:b2:53:3b:60:fd:57:2f:e1:cc: 3c:dd:ed:72:b4:d2:82:b1:f7:38:7a:df:50:44:12: ea:71:57:3f:2e:69:e1:ae:f1:55:70:34:50:a9:75: cf:95:21:45:2a:3f:84:92:4c:a8:3a:04:81:82:e5: 7f:be:78:8e:0d:63:2b:27:ad:c8:fe:ea:af:65:94: c5:cf:d3:e1:9d:35:13:b5:d4:1c:8f:d5:c0:c5:62: 1e:a2:45:20:36:64:57:35:a4:0a:e3:e6:01:13:84: a3:16:af:3d:d3:c1:78:85:15:f4:8d:00:22:0a:5a: 8a:4a:12:8c:fb:e2:13:dc:6e:87:04:91:63:6b:52: 66:01:69:c2:7c:36:c2:a9:ff:16:ae:bf:20:05:04: 7c:f1:25:05:ef:7e:7f:a4:5e:ee:a7:96:b6:10:b6: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D8:21:73:6F:88:1B:9B:4F:72:05:66:AA:99:79:BF:AA:AE:64:3C X509v3 Authority Key Identifier: keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e6:00:34:4d:2a:92:78:6a:5e:16:19:c0:a2:77:e2:48:44: 8c:9c:1e:ca:1d:94:03:0c:d3:8b:49:54:55:7c:a7:1c:7b:ee: 51:aa:4b:cb:94:4d:0a:14:36:20:da:a2:eb:3e:63:ba:6f:f9: 41:a3:98:9e:0b:ae:c5:87:7e:93:57:20:ad:ab:e6:8a:64:b9: 77:88:b4:01:a6:c3:ab:41:7a:d1:ba:5d:c1:93:3e:78:81:d0: bc:bf:d9:9d:09:5d:a4:5c:37:16:4d:a1:28:be:a5:9f:b4:6d: 19:4a:5c:9e:7e:7c:68:32:57:b9:0a:6b:5f:20:d0:9f:d2:42: 8f:a7:b6:b3:41:fe:09:9f:a7:90:b2:21:bb:23:b6:dd:43:5e: 71:5b:85:70:59:72:92:f0:fd:e5:3f:cb:4a:0e:38:9e:00:bf: 0d:e6:cb:e3:be:d1:16:19:e2:bb:bb:af:35:de:47:b1:70:20: 1c:2a:0f:a4:0e:a6:5c:3b:33:1c:20:4d:7b:3a:8f:59:80:9a: 6e:bd:a4:e1:dc:c4:38:0f:a8:8e:73:05:29:3e:11:0d:c6:b8: e2:cb:b7:06:24:45:01:83:61:c6:2d:04:b4:8a:f5:9c:04:fe: dc:ba:42:78:e5:ea:49:48:54:38:b6:28:aa:f5:1e:00:f9:66: 52:5e:21:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxODIxMTAvBgNVBAUTKENBMjNFQzAwREMzNkU4RjM1NDY3RjA1OTkxNzRFQTBC RUZEQjQxRjkwHhcNMjUxMTA0MjA0NTE2WhcNMjUxMTExMjA0NTE2WjAYMRYwFAYD VQQDEw02OTBhNjVkYy1lOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bjdDj3hLjIpC/G/e5vmO0Tzej3KMgfaWDlH32kToLh+MkBAtwV8HTaFna+w 4fjiEBs3CrxE6EYaR0IFmsWP3wSzLhafXTCl9lMXrm2Ptk/OTjBRdjwjKoPH59/a Z56yUztg/Vcv4cw83e1ytNKCsfc4et9QRBLqcVc/LmnhrvFVcDRQqXXPlSFFKj+E kkyoOgSBguV/vniODWMrJ63I/uqvZZTFz9PhnTUTtdQcj9XAxWIeokUgNmRXNaQK 4+YBE4SjFq8908F4hRX0jQAiClqKShKM++IT3G6HBJFja1JmAWnCfDbCqf8Wrr8g BQR88SUF735/pF7up5a2ELY/1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXYIXNv iBubT3IFZqqZeb+qrmQ8MB8GA1UdIwQYMBaAFMoj7ADcNujzVGfwWZF06gvv20H5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Mi8xNjJEREQ5MkRE MTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQTlVaX0Jaa1hUcUMtX2JR ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpUHNBTncyNlBOVVpfQlprWFRxQy1fYlFmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjE4Mi8xNjJEREQ5MkREMTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQ TlVaX0Jaa1hUcUMtX2JRZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT5gA0TSqSeGpeFhnAonfiSESMnB7KHZQDDNOLSVRVfKcce+5RqkvL lE0KFDYg2qLrPmO6b/lBo5ieC67Fh36TVyCtq+aKZLl3iLQBpsOrQXrRul3Bkz54 gdC8v9mdCV2kXDcWTaEovqWftG0ZSlyefnxoMle5CmtfINCf0kKPp7azQf4Jn6eQ siG7I7bdQ15xW4VwWXKS8P3lP8tKDjieAL8N5svjvtEWGeK7u6813kexcCAcKg+k DqZcOzMcIE17Oo9ZgJpuvaTh3MQ4D6iOcwUpPhENxrjiy7cGJEUBg2HGLQS0ivWc BP7cukJ45epJSFQ4tiiq9R4A+WZSXiG6 -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:24 2025 by rpki-client