$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: JFzV+LjnhhQzGFFvP8X6S4G62+Uu/IoHabScuX5MOj8= Subject key identifier: 07:C3:AE:BD:BC:17:DD:BC:92:FB:B0:6F:14:22:4B:20:AC:EB:17:CB Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 04E5 Signing time: Tue 04 Nov 2025 23:51:00 +0000 Manifest this update: Tue 04 Nov 2025 23:51:00 +0000 Manifest next update: Tue 11 Nov 2025 23:51:00 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: ZlbWNFivJ8HVInQTENEhIOPyaKm9lFP1t3q6eawAmb4=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: GWZiL4+KkXKacwwHdWBVfV3QtoEcyH45HgJbisXMlBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: Nov 4 23:51:00 2025 GMT Not After : Nov 11 23:51:00 2025 GMT Subject: CN=690a9164-2f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:44:e5:bb:f5:af:44:62:f6:21:d0:a6:57: a4:65:c6:37:00:36:76:ac:5d:19:29:60:b9:fa:4e: 57:b0:90:d4:0b:2f:47:b1:9e:f0:d3:2e:bd:23:9a: 62:84:c0:e0:f9:af:5a:12:80:33:4a:4a:9a:cf:8d: 04:5f:8c:57:90:31:7c:a8:d0:b5:64:ab:85:a0:1d: 36:2d:ab:6f:dd:0a:66:81:2e:4a:21:6f:7d:77:64: 6c:1e:0b:ab:2f:93:ec:d0:d2:ca:db:67:f4:a1:3b: ec:ee:4b:a1:b0:1b:fe:69:2e:df:8b:be:8d:4a:cc: 6a:73:8e:81:f1:5c:d4:29:fc:19:6b:13:ae:c3:90: d4:64:5a:73:11:e5:5a:7e:47:bf:0f:26:37:e3:27: 4c:0f:e4:1a:49:76:c9:ed:a7:4f:db:dd:f4:5c:7b: 50:0f:fb:e6:67:15:73:51:61:c6:8d:be:c6:8e:2d: 78:ed:51:b6:35:9a:de:ea:8d:b7:c2:01:d7:3d:5a: ec:a7:ba:86:32:10:12:f2:ab:1c:30:29:08:13:9f: 96:b3:9f:1a:ba:24:b7:9a:cc:46:0d:af:67:c3:8f: 7d:bf:7b:88:6f:ff:06:8e:0f:86:29:1d:98:b5:07: 2e:da:f4:dc:3b:39:1d:9f:89:58:1e:5b:b2:05:08: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:AE:BD:BC:17:DD:BC:92:FB:B0:6F:14:22:4B:20:AC:EB:17:CB X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:00:27:68:14:46:73:ff:ad:a6:3f:8e:e7:b4:3d:c8:b9:b6: 71:9a:8a:42:6e:87:5f:2b:2a:af:63:ba:73:86:ce:fe:c3:51: 33:46:1d:4e:05:a5:af:27:94:c4:64:42:8b:34:64:01:5f:25: b3:c3:9f:47:59:33:6b:42:4e:b5:66:b4:9f:68:b9:a4:5f:a9: 91:ac:4b:59:1a:6b:f9:da:d0:de:f8:81:d8:c8:00:4b:1d:69: ac:80:65:0e:5f:50:b1:4b:e0:92:a4:04:ad:6f:8b:cc:bc:c6: 6a:db:2b:16:dc:ba:3b:3f:64:30:0d:f7:c7:8b:5d:6c:c4:dc: 44:a3:49:55:cf:47:90:90:7d:6e:29:bd:9e:e6:d8:bb:f4:c7: 67:4a:9a:b9:66:84:9c:d3:15:93:8a:42:e9:d0:01:ef:3c:cc: 35:9e:85:a4:9e:30:7d:54:06:8b:d2:b7:cc:c3:ff:d4:fd:eb: 60:92:80:2d:24:a9:46:5d:26:72:5c:79:a9:07:37:39:91:2f: 54:ac:83:b6:7d:60:7b:c0:7c:e0:8f:1e:0b:e1:f2:31:15:17: d4:4c:c7:b7:09:7f:f5:e5:32:cd:06:4f:f2:e2:7e:17:a5:23: dd:38:82:dd:87:d9:94:6e:e7:5e:8a:aa:23:c3:3d:64:4b:50: d7:de:16:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjUxMTA0MjM1MTAwWhcNMjUxMTExMjM1MTAwWjAYMRYwFAYD VQQDEw02OTBhOTE2NC0yZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuZE5bv1r0Ri9iHQplekZcY3ADZ2rF0ZKWC5+k5XsJDUCy9HsZ7w0y69I5pi hMDg+a9aEoAzSkqaz40EX4xXkDF8qNC1ZKuFoB02Latv3QpmgS5KIW99d2RsHgur L5Ps0NLK22f0oTvs7kuhsBv+aS7fi76NSsxqc46B8VzUKfwZaxOuw5DUZFpzEeVa fke/DyY34ydMD+QaSXbJ7adP2930XHtQD/vmZxVzUWHGjb7Gji147VG2NZre6o23 wgHXPVrsp7qGMhAS8qscMCkIE5+Ws58auiS3msxGDa9nw499v3uIb/8Gjg+GKR2Y tQcu2vTcOzkdn4lYHluyBQjnyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfDrr28 F928kvuwbxQiSyCs6xfLMB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeACdoFEZz/62mP47ntD3IubZxmopCbodfKyqvY7pzhs7+w1EzRh1O BaWvJ5TEZEKLNGQBXyWzw59HWTNrQk61ZrSfaLmkX6mRrEtZGmv52tDe+IHYyABL HWmsgGUOX1CxS+CSpAStb4vMvMZq2ysW3Lo7P2QwDffHi11sxNxEo0lVz0eQkH1u Kb2e5ti79MdnSpq5ZoSc0xWTikLp0AHvPMw1noWknjB9VAaL0rfMw//U/etgkoAt JKlGXSZyXHmpBzc5kS9UrIO2fWB7wHzgjx4L4fIxFRfUTMe3CX/15TLNBk/y4n4X pSPdOILdh9mUbudeiqojwz1kS1DX3hbw -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:26 2025 by rpki-client