$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: G/tszTQ6dSltzNE1iChQ3+nsGYlf0g3fYxtTmJ+YnY0= Subject key identifier: 2D:9B:A2:E0:85:59:9E:DC:5B:BF:74:9C:82:19:49:CA:9C:C5:39:B1 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 252B Signing time: Sun 02 Nov 2025 15:46:10 +0000 Manifest this update: Sun 02 Nov 2025 15:46:09 +0000 Manifest next update: Sun 09 Nov 2025 15:46:09 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: 0JrU0dLZJ3dK3uZUZDeS3aW5k4L8U20EMD4sU2AVHoQ=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9544 (0x2548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Nov 2 15:46:09 2025 GMT Not After : Nov 9 15:46:09 2025 GMT Subject: CN=69077cc1-2285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:b3:00:7b:56:7c:e7:21:df:39:80:ec:c0: 4e:6b:ef:8c:78:69:66:aa:58:2b:2b:45:c9:b4:bb: d9:f5:f9:a8:71:d8:d3:7d:b2:15:05:d1:9d:8d:fb: 3c:fb:39:0c:61:b1:32:b5:d7:26:6a:d5:9d:fc:11: c4:d4:ad:00:67:0e:ba:00:d0:86:95:c6:38:b1:fe: 0e:9b:45:41:56:3d:3e:2d:77:ae:86:0c:80:0b:6c: 92:5c:9c:31:57:81:ea:0d:4a:af:4e:9a:dd:15:fe: c4:d6:3c:ca:91:ed:d0:48:da:11:b7:fb:3f:b0:c8: 93:19:62:db:b8:4d:1c:06:24:fa:50:8b:6e:6e:19: 2e:ce:68:83:21:e6:00:ca:2e:30:61:33:f8:8d:0b: 1b:03:31:f6:64:40:0c:9c:e8:61:0e:a0:a9:f3:76: ad:da:78:6a:b1:93:72:e2:15:4e:b6:a9:c5:5d:f5: c1:c4:a9:e9:77:51:62:19:78:e9:ba:34:da:1e:46: 10:13:76:b9:d7:e2:57:f3:57:77:86:25:09:91:8d: ef:46:39:28:16:9a:86:7e:0f:75:23:72:89:3a:86: fc:5e:c7:03:d5:69:0b:bf:a7:8c:08:09:e8:ff:0d: d8:87:fc:65:70:63:d4:b8:79:89:7d:57:ad:3b:d4: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:A2:E0:85:59:9E:DC:5B:BF:74:9C:82:19:49:CA:9C:C5:39:B1 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:d2:ff:fe:e7:4d:df:91:7f:fb:95:63:e5:82:46:da:88: 91:b7:98:bf:a5:bc:79:43:04:74:ed:40:cd:52:1f:16:ae:bc: dd:cf:20:85:67:0e:04:37:cd:73:97:8c:2c:55:b3:19:6b:67: d3:c2:51:34:e6:ad:9c:c2:8e:b7:53:f2:04:7d:52:49:7f:8e: 43:cb:d8:b9:8b:6f:ee:c5:dc:03:1d:95:d6:b4:d1:03:be:fa: 7a:f3:05:18:07:7c:62:bb:e8:0a:f5:05:83:a9:dc:e4:9d:35: 30:ec:f5:8d:47:e2:98:27:6b:99:96:1c:e5:f2:5f:dd:80:8b: b9:c9:00:88:f9:f4:9b:f7:93:2f:d3:10:01:e2:fe:4f:9e:1d: 05:f8:22:9e:71:4e:c2:e6:41:cd:16:d2:cd:46:8b:c4:49:a9: 69:0c:b3:97:a2:88:37:69:e0:be:d4:e6:78:2b:d0:2b:08:d9: 64:88:aa:55:86:1c:cb:c1:47:9c:12:e0:6e:ca:03:95:80:8a: e5:a7:2e:22:db:37:23:22:cf:03:18:c6:8b:2a:32:01:c7:8e: 12:12:4d:04:cc:21:9d:5d:e9:cb:cd:43:88:c5:45:b2:93:a7: 51:82:32:70:90:d8:93:fa:95:0a:df:ff:bd:57:05:ab:a5:2b: ab:d3:9b:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUxMTAyMTU0NjA5WhcNMjUxMTA5MTU0NjA5WjAYMRYwFAYD VQQDEw02OTA3N2NjMS0yMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H2zAHtWfOch3zmA7MBOa++MeGlmqlgrK0XJtLvZ9fmocdjTfbIVBdGdjfs8 +zkMYbEytdcmatWd/BHE1K0AZw66ANCGlcY4sf4Om0VBVj0+LXeuhgyAC2ySXJwx V4HqDUqvTprdFf7E1jzKke3QSNoRt/s/sMiTGWLbuE0cBiT6UItubhkuzmiDIeYA yi4wYTP4jQsbAzH2ZEAMnOhhDqCp83at2nhqsZNy4hVOtqnFXfXBxKnpd1FiGXjp ujTaHkYQE3a51+JX81d3hiUJkY3vRjkoFpqGfg91I3KJOob8XscD1WkLv6eMCAno /w3Yh/xlcGPUuHmJfVetO9QovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2bouCF WZ7cW790nIIZScqcxTmxMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqOdL//udN35F/+5Vj5YJG2oiRt5i/pbx5QwR07UDNUh8WrrzdzyCF Zw4EN81zl4wsVbMZa2fTwlE05q2cwo63U/IEfVJJf45Dy9i5i2/uxdwDHZXWtNED vvp68wUYB3xiu+gK9QWDqdzknTUw7PWNR+KYJ2uZlhzl8l/dgIu5yQCI+fSb95Mv 0xAB4v5Pnh0F+CKecU7C5kHNFtLNRovESalpDLOXoog3aeC+1OZ4K9ArCNlkiKpV hhzLwUecEuBuygOVgIrlpy4i2zcjIs8DGMaLKjIBx44SEk0EzCGdXenLzUOIxUWy k6dRgjJwkNiT+pUK3/+9VwWrpSur05uO -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:52 2025 by rpki-client