$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: P/ilEhZ8BF2JS5oq0jNK8G2DwTEUZBxKxan23SlLZBk= Subject key identifier: 0D:78:87:4F:13:F8:D9:46:DB:29:31:06:51:4C:03:B0:74:AA:CE:C0 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 0129 Signing time: Mon 03 Nov 2025 04:43:15 +0000 Manifest this update: Mon 03 Nov 2025 04:43:15 +0000 Manifest next update: Mon 10 Nov 2025 04:43:15 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: R1izpY9TerVaNP8idwDgAL+Jr5uvIfmjvz0u7n6vACw=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Nov 3 04:43:15 2025 GMT Not After : Nov 10 04:43:15 2025 GMT Subject: CN=690832e3-9b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:73:5a:be:be:ec:69:ff:05:f5:a6:88:07: 00:73:53:4e:bf:ba:e9:f7:1d:d8:8a:d9:fd:85:43: 97:ac:ed:d5:1c:33:35:3d:c0:b3:79:3a:95:c5:31: c6:5b:bb:ad:4d:43:d5:7f:cb:94:07:42:87:73:a9: a6:e3:10:c9:37:fc:13:ad:49:7a:f2:43:f1:f1:e0: 47:17:89:40:a0:73:c2:26:77:27:df:c6:b1:eb:f0: 15:8e:4e:1a:9e:2b:c9:f7:3f:e8:4b:73:2d:b4:67: d8:6a:0d:74:5b:b0:49:66:23:f4:d5:a8:74:d6:71: b5:61:03:52:58:b1:fc:15:fd:a4:a7:3a:57:d0:d9: 7d:6f:54:49:03:f3:b8:1b:e4:1d:5a:06:cb:01:0c: e3:3f:70:f7:69:f1:4f:f6:59:b0:3a:d0:9a:a3:a4: 88:ff:f6:05:f8:bf:85:02:1a:13:65:ec:21:e3:c9: 6b:04:b3:b0:61:5f:41:da:2d:88:8e:24:2e:16:18: 26:9d:41:e8:31:20:8d:68:cd:33:0c:33:78:60:89: e1:1d:1e:33:0a:e5:04:3e:1a:26:1d:d0:f2:76:e8: f4:d1:b4:6e:38:17:6d:0a:7e:ba:f4:49:ee:b3:7c: eb:c7:07:ff:44:38:ed:80:12:ae:02:e7:fd:d5:1e: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:87:4F:13:F8:D9:46:DB:29:31:06:51:4C:03:B0:74:AA:CE:C0 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:42:b4:3f:b8:cb:c3:52:bc:9b:78:71:19:f6:ea:93:59:43: 01:5c:f8:98:98:67:71:37:e2:94:1a:dd:90:90:c6:bb:32:de: 43:94:94:44:11:4a:7f:90:d4:18:be:72:0a:76:87:7f:6c:45: 6a:aa:ab:97:99:ab:e8:cc:1d:20:1f:d6:db:82:93:9e:d8:b2: 01:da:ef:aa:60:21:82:b1:aa:98:64:10:bb:5d:00:a6:dd:9c: b5:b8:37:9f:98:f9:f6:f8:1a:47:f2:49:0e:bd:68:74:61:fd: 40:80:f7:ff:ee:af:5f:f8:9e:24:a0:f3:b4:11:e6:a8:a6:04: 60:38:37:7d:61:12:20:05:b5:22:99:26:e2:74:ff:fe:e3:c7: e5:91:a1:02:3e:59:65:ae:b6:cf:95:f1:a7:03:6f:e8:9a:a1: 9b:6d:8d:ee:16:5e:81:68:30:cf:5b:63:84:3e:d7:0d:9f:69: 3d:6b:3a:60:95:91:1b:a1:f0:a8:20:52:c5:33:87:7c:63:a9: 5d:73:51:a9:83:cf:42:30:52:2d:65:d0:fe:03:53:a3:ae:08: 72:74:09:da:60:15:56:ec:fb:24:66:a2:91:9e:cb:fc:ce:7d: 53:a4:ec:e2:69:85:6f:5a:f4:81:a7:65:2e:d2:e0:5a:17:ad: e5:2c:01:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUxMTAzMDQ0MzE1WhcNMjUxMTEwMDQ0MzE1WjAYMRYwFAYD VQQDEw02OTA4MzJlMy05YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqURzWr6+7Gn/BfWmiAcAc1NOv7rp9x3Yitn9hUOXrO3VHDM1PcCzeTqVxTHG W7utTUPVf8uUB0KHc6mm4xDJN/wTrUl68kPx8eBHF4lAoHPCJncn38ax6/AVjk4a nivJ9z/oS3MttGfYag10W7BJZiP01ah01nG1YQNSWLH8Ff2kpzpX0Nl9b1RJA/O4 G+QdWgbLAQzjP3D3afFP9lmwOtCao6SI//YF+L+FAhoTZewh48lrBLOwYV9B2i2I jiQuFhgmnUHoMSCNaM0zDDN4YInhHR4zCuUEPhomHdDyduj00bRuOBdtCn669Enu s3zrxwf/RDjtgBKuAuf91R4VpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA14h08T +NlG2ykxBlFMA7B0qs7AMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKQrQ/uMvDUrybeHEZ9uqTWUMBXPiYmGdxN+KUGt2QkMa7Mt5DlJRE EUp/kNQYvnIKdod/bEVqqquXmavozB0gH9bbgpOe2LIB2u+qYCGCsaqYZBC7XQCm 3Zy1uDefmPn2+BpH8kkOvWh0Yf1AgPf/7q9f+J4koPO0EeaopgRgODd9YRIgBbUi mSbidP/+48flkaECPlllrrbPlfGnA2/omqGbbY3uFl6BaDDPW2OEPtcNn2k9azpg lZEbofCoIFLFM4d8Y6ldc1Gpg89CMFItZdD+A1OjrghydAnaYBVW7PskZqKRnsv8 zn1TpOziaYVvWvSBp2Uu0uBaF63lLAHg -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:24 2025 by rpki-client