$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: UZpiy7a1hiU90TiU/mzZnLCpEPLoBvbg+UEnqr+JY5Y= Subject key identifier: 86:D1:E5:94:E0:EF:F6:E8:ED:96:41:51:97:8F:2E:9A:5C:18:AF:83 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 34E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 34DA Signing time: Tue 04 Nov 2025 14:59:58 +0000 Manifest this update: Tue 04 Nov 2025 14:59:57 +0000 Manifest next update: Tue 11 Nov 2025 14:59:57 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: gCVsKQgv9R2IU4lKxTbErj293Ms4NEcO+8NO+Tw86d4=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Nov 4 14:59:57 2025 GMT Not After : Nov 11 14:59:57 2025 GMT Subject: CN=690a14ee-b1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:06:97:4e:d3:61:42:d4:02:cc:1a:ec:bb: e0:90:c2:84:4e:4a:be:d0:7c:eb:1e:3c:67:45:52: bf:96:f3:d4:f1:f3:e1:5b:56:71:3b:cb:5d:29:6e: ff:15:50:a1:cf:8d:5d:2d:b7:73:2f:50:c0:14:69: 94:11:56:04:14:37:4a:34:19:93:57:4e:de:f2:3a: 8a:0f:bb:25:01:52:9f:04:a3:6d:b7:59:33:5c:b5: 5b:72:79:a5:8c:31:48:e7:fa:96:bb:35:98:74:e2: 5e:2b:2a:21:18:ba:b5:8e:67:84:21:2f:df:24:98: 7c:d8:dc:69:c6:d9:95:7d:42:03:3d:ec:e1:7c:96: c5:1f:0a:18:71:f5:3d:f9:b5:08:0b:88:87:50:0d: 11:8e:ec:db:91:10:a5:e4:6e:ea:92:69:1e:56:3c: 6a:bc:19:92:8f:35:ab:a4:ea:3c:f1:b8:c2:b6:ee: 23:e4:5d:ca:7c:42:d8:3c:ae:72:e5:b5:01:6a:19: a6:9d:9a:68:e3:b1:b3:b8:4d:fa:7a:2e:df:f5:ed: 9e:21:1f:d4:45:b0:8d:ec:59:9a:70:b5:9c:f1:d1: 61:48:c2:ce:ee:d9:e7:39:85:03:f6:81:7c:93:75: b6:30:13:bc:7f:eb:44:8e:15:86:aa:5e:be:e1:d0: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D1:E5:94:E0:EF:F6:E8:ED:96:41:51:97:8F:2E:9A:5C:18:AF:83 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9d:b7:b7:9a:1d:3a:06:68:90:a8:e9:df:d6:ab:9f:95:9f: 54:36:b2:8b:16:51:34:70:c2:29:70:51:ae:b5:2a:01:0a:68: 48:62:d7:52:3b:60:58:2c:cb:65:0e:cd:d7:db:51:f7:59:90: 33:de:e4:3b:15:87:2f:2c:cf:19:55:78:40:30:d6:9e:4a:20: a4:c7:0f:24:b4:e0:be:de:da:57:07:52:84:54:8c:25:7b:0e: d3:b0:3e:3b:45:0a:f3:e0:4b:40:c4:6f:44:17:55:62:31:6c: 38:cf:3f:ff:aa:ad:88:23:03:6d:aa:bb:75:8d:30:14:c8:3a: a1:66:aa:e1:d9:8f:35:d0:c1:76:d4:25:df:d3:43:26:30:d6: 71:ee:25:27:f2:66:c9:80:2e:8a:46:dd:a0:7f:a7:d7:8e:07: fa:a7:28:ec:15:46:6e:b8:54:66:ce:59:da:79:20:3f:15:11: b4:41:4d:0f:8a:44:3e:90:da:28:e5:d1:26:2d:26:ab:aa:97: 9f:10:f6:4a:b9:ee:15:3e:d3:48:26:21:2d:19:8e:36:63:93: 95:b5:15:1a:c3:7f:58:43:1d:b4:6e:4f:77:cb:fc:3e:b2:4d: 7e:18:b3:93:36:7d:b4:5c:b7:36:0b:8c:05:77:00:9d:ba:2e: 46:7e:d1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUxMTA0MTQ1OTU3WhcNMjUxMTExMTQ1OTU3WjAYMRYwFAYD VQQDEw02OTBhMTRlZS1iMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA238Gl07TYULUAswa7LvgkMKETkq+0HzrHjxnRVK/lvPU8fPhW1ZxO8tdKW7/ FVChz41dLbdzL1DAFGmUEVYEFDdKNBmTV07e8jqKD7slAVKfBKNtt1kzXLVbcnml jDFI5/qWuzWYdOJeKyohGLq1jmeEIS/fJJh82NxpxtmVfUIDPezhfJbFHwoYcfU9 +bUIC4iHUA0RjuzbkRCl5G7qkmkeVjxqvBmSjzWrpOo88bjCtu4j5F3KfELYPK5y 5bUBahmmnZpo47GzuE36ei7f9e2eIR/URbCN7FmacLWc8dFhSMLO7tnnOYUD9oF8 k3W2MBO8f+tEjhWGql6+4dATfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbR5ZTg 7/bo7ZZBUZePLppcGK+DMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvnbe3mh06BmiQqOnf1quflZ9UNrKLFlE0cMIpcFGutSoBCmhIYtdS O2BYLMtlDs3X21H3WZAz3uQ7FYcvLM8ZVXhAMNaeSiCkxw8ktOC+3tpXB1KEVIwl ew7TsD47RQrz4EtAxG9EF1ViMWw4zz//qq2IIwNtqrt1jTAUyDqhZqrh2Y810MF2 1CXf00MmMNZx7iUn8mbJgC6KRt2gf6fXjgf6pyjsFUZuuFRmzlnaeSA/FRG0QU0P ikQ+kNoo5dEmLSarqpefEPZKue4VPtNIJiEtGY42Y5OVtRUaw39YQx20bk93y/w+ sk1+GLOTNn20XLc2C4wFdwCdui5GftFB -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:34 2025 by rpki-client