$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: CWHO7Zqpv56sDpPD44S57i8I0trH1p6Zl2CrI6m65Kg= Subject key identifier: BF:1F:80:D9:9D:1B:55:94:16:32:0B:26:B0:7A:2A:BA:AD:08:57:29 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 06:24:02 +0000 Manifest this update: Mon 03 Nov 2025 06:24:02 +0000 Manifest next update: Mon 10 Nov 2025 06:24:02 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: X5s+hZKiw641UYb9crDDf2yVsImmCBVJIyDdgdTxCkM=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: GeuC23bQErzKdp21604gyKYVikutfo5J7NTb8XiSV2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Nov 3 06:24:02 2025 GMT Not After : Nov 10 06:24:02 2025 GMT Subject: CN=69084a82-a4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:85:39:c0:6e:eb:03:86:ac:b2:89:3a:3a: 76:b0:aa:79:e2:1b:16:e7:5d:2e:ce:57:ac:4c:8f: 60:fc:52:bb:b1:20:fa:0f:45:36:c6:1b:e9:e1:80: 4b:4b:4e:6d:fd:1b:3f:9c:18:63:df:d4:e7:7d:9a: 7b:7a:14:bb:b0:37:a6:bb:f9:a2:b9:54:e7:61:8b: a1:f4:32:98:3a:e2:09:fc:e7:f8:51:04:16:ae:c1: 8a:90:3e:89:0a:97:ae:90:96:15:c2:00:af:91:c2: ad:4e:ef:93:d2:cd:6f:b7:36:b5:c8:70:7e:24:44: 2b:ea:d2:19:05:81:02:4d:71:a5:bc:6a:93:25:34: d1:3b:d3:6b:72:a7:92:2e:59:0a:74:08:7a:89:b9: 48:47:ba:03:8b:72:6b:0b:74:42:0d:a0:a1:22:6a: 6e:54:66:8b:1f:f1:16:ad:61:c7:a9:ca:f5:17:4a: e4:64:1a:cc:e4:24:37:e8:f0:8f:e5:5e:d5:9b:49: e1:6d:82:73:b1:74:9b:15:fc:18:25:45:3e:5f:8c: cf:e5:36:53:97:8c:b1:32:cb:4e:e0:6c:cd:56:d5: 4e:3b:93:cf:68:ce:cf:25:b5:f5:8c:c4:8c:26:6e: 4e:c4:33:51:a0:de:62:d6:7e:97:3a:8a:5e:f4:ca: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1F:80:D9:9D:1B:55:94:16:32:0B:26:B0:7A:2A:BA:AD:08:57:29 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:3a:6c:fa:0f:52:9c:e3:41:3c:d0:89:d9:3b:61:aa:f7: 1c:0c:5a:1e:68:a6:67:4d:19:98:af:7e:69:a6:73:b5:58:64: 8d:a4:10:3a:c3:e8:88:cb:31:c2:4f:5f:e3:4a:2f:e5:76:ed: 53:55:74:ca:81:6d:cd:29:41:cc:a5:e0:a7:1c:aa:d7:4e:eb: 8f:d7:0f:5d:01:4d:65:9f:a2:5d:12:02:31:03:bb:87:1d:25: 21:96:3a:63:49:fc:67:df:db:97:71:fc:3c:08:54:16:9b:ea: cb:a5:65:c2:e6:19:59:44:0c:b0:26:17:0a:de:16:af:de:11: e6:d7:c7:ca:77:8a:5d:78:7b:95:ae:28:10:92:2e:2d:fc:ff: 2e:81:fb:9a:d9:43:59:78:99:5c:92:33:75:f8:de:0a:6e:e8: 85:d5:66:c3:15:15:9a:31:87:cc:84:c0:a0:cc:9d:4a:fc:ae: 31:f0:06:b1:bf:91:f6:0a:1a:5a:b7:43:b3:e2:ea:13:7c:15: 4c:4d:a0:48:dd:a0:0d:6a:69:69:5e:89:24:4e:f9:52:f0:8d: 10:5b:c3:b0:fb:87:74:fd:32:04:dc:f3:c2:80:80:3b:1c:ad: 4b:27:23:98:51:87:70:1b:19:0d:dc:86:76:cc:f8:ea:6a:31: 7f:0f:b0:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjUxMTAzMDYyNDAyWhcNMjUxMTEwMDYyNDAyWjAYMRYwFAYD VQQDEw02OTA4NGE4Mi1hNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBWFOcBu6wOGrLKJOjp2sKp54hsW510uzlesTI9g/FK7sSD6D0U2xhvp4YBL S05t/Rs/nBhj39TnfZp7ehS7sDemu/miuVTnYYuh9DKYOuIJ/Of4UQQWrsGKkD6J CpeukJYVwgCvkcKtTu+T0s1vtza1yHB+JEQr6tIZBYECTXGlvGqTJTTRO9NrcqeS LlkKdAh6iblIR7oDi3JrC3RCDaChImpuVGaLH/EWrWHHqcr1F0rkZBrM5CQ36PCP 5V7Vm0nhbYJzsXSbFfwYJUU+X4zP5TZTl4yxMstO4GzNVtVOO5PPaM7PJbX1jMSM Jm5OxDNRoN5i1n6XOope9Mok2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8fgNmd G1WUFjILJrB6KrqtCFcpMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW4zps+g9SnONBPNCJ2TthqvccDFoeaKZnTRmYr35ppnO1WGSNpBA6 w+iIyzHCT1/jSi/ldu1TVXTKgW3NKUHMpeCnHKrXTuuP1w9dAU1ln6JdEgIxA7uH HSUhljpjSfxn39uXcfw8CFQWm+rLpWXC5hlZRAywJhcK3hav3hHm18fKd4pdeHuV rigQki4t/P8ugfua2UNZeJlckjN1+N4KbuiF1WbDFRWaMYfMhMCgzJ1K/K4x8Aax v5H2Chpat0Oz4uoTfBVMTaBI3aANamlpXokkTvlS8I0QW8Ow+4d0/TIE3PPCgIA7 HK1LJyOYUYdwGxkN3IZ2zPjqajF/D7B6 -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:53 2025 by rpki-client