$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json) Hash identifier: ta8A/TUnB6EqqAhZsUUV8U5HqMiGL6TsImLDEO5/W8o= Subject key identifier: 3E:66:26:A0:89:44:EE:AC:67:87:A0:C3:51:90:19:BA:BA:08:86:DF Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft Manifest number: 04A9 Signing time: Wed 05 Nov 2025 00:44:55 +0000 Manifest this update: Wed 05 Nov 2025 00:44:54 +0000 Manifest next update: Wed 12 Nov 2025 00:44:54 +0000 Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: gOT4Are+7KICk9m0xY4LirwpiXJbbkjvzNn2pEqXzns=) 2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=) 3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Validity Not Before: Nov 5 00:44:54 2025 GMT Not After : Nov 12 00:44:54 2025 GMT Subject: CN=690a9e07-d26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:39:ca:a0:0c:fc:7b:63:66:e6:78:f2:d0: 28:35:62:e0:7f:66:d6:58:37:d8:6e:99:8d:56:de: 29:b2:f9:5c:e2:71:a7:8d:6f:19:7b:ce:07:38:64: 76:cb:e2:d4:bb:6f:7b:af:a1:a0:3b:64:2c:18:8c: 4d:d5:91:6e:df:2b:93:d9:e6:1e:ca:f3:3c:05:c0: ee:29:25:9c:1e:8d:6b:2f:fe:13:f9:3e:22:81:e3: 01:74:f6:a6:fb:b0:be:08:7a:2a:db:17:d3:2b:77: 66:ed:f2:d9:05:d3:47:af:e9:b6:95:1a:3d:7c:ae: b6:95:4f:cb:74:f9:95:76:93:ea:f8:46:6c:09:62: b1:e0:43:b0:f3:31:1c:f7:f0:f9:d0:43:75:fb:3a: ee:72:15:bc:2b:1d:95:a6:41:31:69:db:4b:6f:37: 14:cd:dd:be:fb:f6:e5:4a:68:0c:8a:d4:5b:d4:86: 98:45:27:73:c2:f3:40:0e:a7:03:ed:77:46:93:41: 37:4d:f7:e2:c4:5a:59:14:d7:46:1a:80:5b:b1:67: 7b:94:6a:cc:8d:dd:07:d5:9c:fd:da:02:45:7b:c1: cf:fc:81:60:2d:fd:b6:d2:cd:75:89:5a:ee:0e:e8: 25:f0:2d:1e:4b:c0:e2:d3:ce:42:b3:b7:44:9d:19: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:66:26:A0:89:44:EE:AC:67:87:A0:C3:51:90:19:BA:BA:08:86:DF X509v3 Authority Key Identifier: keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c7:74:1e:e7:4e:9b:cb:dd:51:ba:4d:53:ab:d4:d7:f9:6f: 9c:4d:68:bd:18:84:d8:48:ee:c0:5e:f2:3d:40:cb:6a:b4:43: 29:34:f1:9e:ac:2c:55:64:8a:08:44:6d:29:59:9c:6b:6f:b6: f3:d9:25:4f:bd:b8:26:28:ac:f8:3e:60:24:97:4d:7b:ad:ab: 45:99:d1:3a:2c:36:6d:d7:34:12:66:e3:5d:1e:eb:12:a4:db: f9:b5:0e:09:fa:35:90:1e:28:8a:c1:b7:ad:aa:fa:87:48:eb: 35:f0:22:1e:eb:1f:58:ef:16:ce:5b:fc:c9:b7:1d:ba:3b:1d: 47:90:4e:03:97:13:8f:22:4a:d4:1b:ac:fa:cb:c9:7f:38:fb: e6:00:83:c5:5c:0e:15:ad:9d:98:0b:da:8b:aa:1d:3a:10:2d: aa:21:ac:37:8d:34:3c:0d:f3:0e:f5:1e:7a:09:64:73:06:5b: 5c:38:e1:94:81:db:80:c0:cd:d0:0c:b6:ca:9b:5a:ed:c9:d9: 2b:51:24:e3:2b:46:a8:d0:7e:ad:aa:58:ad:8d:5e:7d:e4:71: 30:3c:95:a6:60:d5:25:16:eb:fc:5b:06:99:e9:55:ab:95:93: d3:60:33:75:02:96:aa:9a:19:42:b6:81:be:35:3b:bc:ba:3c: fb:6a:87:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoNjMyM0U1NkNEOTkyQUI4RkNFMzg3NTMxNUFFNjFBQzVF NDcxQUNCRDAeFw0yNTExMDUwMDQ0NTRaFw0yNTExMTIwMDQ0NTRaMBgxFjAUBgNV BAMTDTY5MGE5ZTA3LWQyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChCjnKoAz8e2Nm5njy0Cg1YuB/ZtZYN9humY1W3imy+VzicaeNbxl7zgc4ZHbL 4tS7b3uvoaA7ZCwYjE3VkW7fK5PZ5h7K8zwFwO4pJZwejWsv/hP5PiKB4wF09qb7 sL4IeirbF9Mrd2bt8tkF00ev6baVGj18rraVT8t0+ZV2k+r4RmwJYrHgQ7DzMRz3 8PnQQ3X7Ou5yFbwrHZWmQTFp20tvNxTN3b779uVKaAyK1FvUhphFJ3PC80AOpwPt d0aTQTdN9+LEWlkU10YagFuxZ3uUasyN3QfVnP3aAkV7wc/8gWAt/bbSzXWJWu4O 6CXwLR5LwOLTzkKzt0SdGUFJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPmYmoIlE 7qxnh6DDUZAZuroIht8wHwYDVR0jBBgwFoAUYyPlbNmSq4/OOHUxWuYaxeRxrL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRfT09IVXhXdVlheGVSeHJM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXlQbGJObVNxNF9PT0hVeFd1WWF4ZVJ4ckwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRf T09IVXhXdVlheGVSeHJMMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPHdB7nTpvL3VG6TVOr1Nf5b5xNaL0YhNhI7sBe8j1Ay2q0Qyk08Z6s LFVkighEbSlZnGtvtvPZJU+9uCYorPg+YCSXTXutq0WZ0TosNm3XNBJm410e6xKk 2/m1Dgn6NZAeKIrBt62q+odI6zXwIh7rH1jvFs5b/Mm3Hbo7HUeQTgOXE48iStQb rPrLyX84++YAg8VcDhWtnZgL2ouqHToQLaohrDeNNDwN8w71HnoJZHMGW1w44ZSB 24DAzdAMtsqbWu3J2StRJOMrRqjQfq2qWK2NXn3kcTA8laZg1SUW6/xbBpnpVauV k9NgM3UClqqaGUK2gb41O7y6PPtqh5s= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:31 2025 by rpki-client