$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: nSclk3JwF/gkEE9ADmytbvdZygSR+z5BiOSXchCnOcU= Subject key identifier: B3:9E:B0:3C:AC:DC:66:21:18:C1:10:17:F8:17:60:BE:08:44:1C:96 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 04FD Signing time: Tue 04 Nov 2025 23:48:25 +0000 Manifest this update: Tue 04 Nov 2025 23:48:25 +0000 Manifest next update: Tue 11 Nov 2025 23:48:25 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: cxukymSefhjWrh5WtdIO5z2fi0FVcV+O2mP1BZfKYZs=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: FE6e27RdwbgfOIo+ikPTPJ/pdQA+p/z7qpPIRAny0BQ=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: Pm0s4Nw0vjEdOt8OEH+67yrk/B68Gy2u6QwOvd+DpWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Nov 4 23:48:25 2025 GMT Not After : Nov 11 23:48:25 2025 GMT Subject: CN=690a90c9-be55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:3f:93:28:3c:4c:e1:92:07:74:64:d7:74: 61:22:f7:36:6c:69:f8:02:f3:3e:75:b0:af:cd:0d: 34:a2:1a:f4:96:18:51:1c:5d:4c:2e:41:9b:e0:9f: 32:f3:2f:83:13:c6:1f:86:d5:18:9f:df:f9:79:30: 46:5e:8a:43:22:55:4f:60:f1:d2:4c:e1:23:1f:cb: d3:bd:37:a0:59:1c:b8:f3:93:f6:e8:4c:1b:e3:f2: 89:d0:3f:b0:7b:79:44:de:d0:65:7d:5d:09:ed:98: 45:39:c7:b6:7f:43:07:a2:5c:83:a1:69:f2:e8:82: d5:00:db:c3:ed:9b:cb:b3:4c:a5:d8:51:2d:6f:a7: 25:18:c3:ce:12:e0:e2:9f:d9:94:26:d5:9b:e3:73: 4a:24:79:f2:8d:81:0b:1f:dc:a7:36:ea:b6:1c:b1: 21:76:1c:95:fa:04:ea:bc:f9:42:4f:23:12:e8:7b: 1e:37:b1:ba:ef:51:26:94:30:44:c9:3b:a8:30:b3: de:6a:76:c4:6e:83:a9:dc:b8:9d:37:8e:8c:5f:0f: 68:e5:4d:a9:cc:6b:68:bb:29:24:0a:1b:f4:df:7e: ba:dd:39:98:1e:5f:5e:f8:eb:3f:44:7d:4d:09:9f: af:7c:4a:27:d0:f5:20:22:0a:ab:c5:61:35:d4:65: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9E:B0:3C:AC:DC:66:21:18:C1:10:17:F8:17:60:BE:08:44:1C:96 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:89:8d:91:28:c0:00:73:c7:74:3b:c6:5d:dc:de:4a:d4:32: ca:cd:2a:e7:c7:e6:17:47:9a:29:69:3a:07:38:f8:62:5e:f8: 7b:a1:b4:bb:6e:69:63:67:da:c6:ed:51:eb:0b:a6:f4:c8:48: 40:74:e8:55:45:ab:32:ac:bb:d4:d1:88:7f:bd:17:67:70:75: c8:06:42:b6:f8:22:85:70:8b:6d:a2:3b:b8:ae:d7:0b:c8:34: a1:de:3c:2a:5a:04:37:01:1d:aa:9c:6b:a7:b8:45:3d:88:8d: 0c:4e:54:4d:52:71:55:ea:d3:14:4c:cd:e2:79:28:26:0a:1e: 6d:ec:5b:3d:2f:e8:2a:5d:b6:88:db:00:77:a8:8b:69:4c:ce: 77:af:56:9f:d4:a4:67:92:75:7d:90:4f:f2:fc:dd:fb:73:a3: e7:d8:af:bb:fa:dc:ce:73:50:0d:5b:31:bd:4a:44:ef:6f:91: 37:58:b2:90:ed:26:b1:75:ff:1a:89:e8:5f:f2:8e:8a:90:86: ec:75:84:96:31:80:91:c0:79:37:2a:7f:7d:59:2f:b2:fa:56: 80:96:62:06:e0:35:40:09:a8:a2:7a:2f:6e:5a:fe:44:44:3c: 75:b4:b1:72:89:80:ed:e7:54:44:8a:53:9f:18:e6:23:9f:08: 83:8a:57:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUxMTA0MjM0ODI1WhcNMjUxMTExMjM0ODI1WjAYMRYwFAYD VQQDEw02OTBhOTBjOS1iZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLk/kyg8TOGSB3Rk13RhIvc2bGn4AvM+dbCvzQ00ohr0lhhRHF1MLkGb4J8y 8y+DE8YfhtUYn9/5eTBGXopDIlVPYPHSTOEjH8vTvTegWRy485P26Ewb4/KJ0D+w e3lE3tBlfV0J7ZhFOce2f0MHolyDoWny6ILVANvD7ZvLs0yl2FEtb6clGMPOEuDi n9mUJtWb43NKJHnyjYELH9ynNuq2HLEhdhyV+gTqvPlCTyMS6HseN7G671EmlDBE yTuoMLPeanbEboOp3LidN46MXw9o5U2pzGtouykkChv033663TmYHl9e+Os/RH1N CZ+vfEon0PUgIgqrxWE11GWL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOesDys 3GYhGMEQF/gXYL4IRByWMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCciY2RKMAAc8d0O8Zd3N5K1DLKzSrnx+YXR5opaToHOPhiXvh7obS7 bmljZ9rG7VHrC6b0yEhAdOhVRasyrLvU0Yh/vRdncHXIBkK2+CKFcIttoju4rtcL yDSh3jwqWgQ3AR2qnGunuEU9iI0MTlRNUnFV6tMUTM3ieSgmCh5t7Fs9L+gqXbaI 2wB3qItpTM53r1af1KRnknV9kE/y/N37c6Pn2K+7+tzOc1ANWzG9SkTvb5E3WLKQ 7Saxdf8aiehf8o6KkIbsdYSWMYCRwHk3Kn99WS+y+laAlmIG4DVACaiiei9uWv5E RDx1tLFyiYDt51REilOfGOYjnwiDilfR -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:10 2025 by rpki-client