$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: xZc1tZjqoCtfPtiy6JrWJtA7YYsTf+RTJ4r8F/sbUD4= Subject key identifier: 20:21:DF:FD:17:1B:7C:9F:E2:C9:82:75:4D:F0:68:C9:CC:1F:57:5A Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 082E Signing time: Tue 04 Nov 2025 20:52:15 +0000 Manifest this update: Tue 04 Nov 2025 20:52:14 +0000 Manifest next update: Tue 11 Nov 2025 20:52:14 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: 7MlYskVptmE8d8svaPrmrxBwQ9wETe2VuUiBLr2+qx8=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: EmQdF5GLB5bUu9T1LF70zLmHofep4YvVxF8l/ylf5kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Nov 4 20:52:14 2025 GMT Not After : Nov 11 20:52:14 2025 GMT Subject: CN=690a677e-a091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:cd:8b:73:87:17:60:1d:3a:5e:f1:39:df: 5b:2e:76:8c:df:64:39:00:7e:d3:38:91:5c:eb:53: ac:85:66:9c:25:76:c3:3f:4a:f1:c9:da:69:de:1e: 44:cf:5c:c0:51:9c:c3:dd:5a:d1:3d:35:8b:be:28: 07:21:d5:57:17:34:44:46:d1:05:3a:7d:f2:6e:98: 21:67:4e:58:68:d1:50:a6:73:c9:db:05:a6:ac:d5: 0c:29:e4:3b:1b:59:04:22:2e:af:e9:17:39:8e:66: 50:41:10:26:e5:d0:bf:fd:b3:1e:d6:34:2f:90:e4: ab:b3:69:6e:8c:0b:19:92:14:7d:c0:1a:f5:ce:74: 55:21:bc:ca:f0:32:4f:8e:16:11:23:62:2c:99:7f: 76:85:e3:3b:32:52:4f:b3:cc:b7:97:04:7f:ce:31: 7c:31:8d:79:35:52:f2:2a:82:28:c6:9c:e6:a2:f9: 5d:a4:dd:27:f0:0b:02:52:0b:c6:70:5c:84:18:c0: 4a:17:6e:4b:43:66:65:73:22:29:b4:52:4d:3c:63: 99:99:98:44:c5:51:2f:80:bd:27:5d:37:fe:08:e4: d0:b6:c3:d5:d7:03:12:05:1e:58:6a:79:a2:9f:29: 9d:09:a0:8d:13:b7:ce:ae:4d:a6:aa:cf:62:ed:53: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:DF:FD:17:1B:7C:9F:E2:C9:82:75:4D:F0:68:C9:CC:1F:57:5A X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:4c:f7:5f:c6:4c:ac:d4:d4:38:a1:f4:8c:d3:92:5a:48: f9:b8:64:ed:ad:4f:14:35:19:1d:e0:c3:cd:b0:b0:20:f1:9b: a9:b0:d4:5e:06:9e:04:31:84:88:f1:35:7c:e7:90:f2:64:5a: 10:0a:0e:cd:c7:fc:88:0b:01:c3:d6:89:33:82:f1:37:4d:90: 1f:c3:8f:d1:66:35:8a:e2:ed:e2:5e:9f:f9:7c:2c:b2:a6:cd: 8f:2e:12:6f:3f:07:fe:92:ed:64:16:30:b9:90:ba:d5:64:aa: 68:13:5e:01:e6:9a:d3:36:39:e6:33:4e:1f:e6:b4:c3:11:e1: 94:0b:eb:43:55:45:8b:98:38:ff:ff:fd:7b:28:93:d7:6f:27: ba:d8:6d:f0:55:cf:9c:9a:0b:1e:c6:a6:25:ba:9f:f8:d9:80: 33:44:dc:ff:67:9b:d4:68:dc:74:4e:cb:11:f0:8f:51:36:1a: a2:97:1c:2c:43:3b:58:ab:93:fa:6c:6c:d9:e4:31:d3:44:89: e8:ed:28:a2:3a:c0:8e:5a:7d:c9:82:6d:60:f3:ba:4e:20:4c: 0b:e6:4d:05:d2:7b:3d:80:20:2e:63:22:c4:76:4c:e8:cd:ef: 9c:5b:6c:d7:ce:9b:d8:b1:c5:c9:d9:8d:34:de:d1:a3:b9:a2: 8d:a3:ee:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUxMTA0MjA1MjE0WhcNMjUxMTExMjA1MjE0WjAYMRYwFAYD VQQDEw02OTBhNjc3ZS1hMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gDNi3OHF2AdOl7xOd9bLnaM32Q5AH7TOJFc61OshWacJXbDP0rxydpp3h5E z1zAUZzD3VrRPTWLvigHIdVXFzRERtEFOn3ybpghZ05YaNFQpnPJ2wWmrNUMKeQ7 G1kEIi6v6Rc5jmZQQRAm5dC//bMe1jQvkOSrs2lujAsZkhR9wBr1znRVIbzK8DJP jhYRI2IsmX92heM7MlJPs8y3lwR/zjF8MY15NVLyKoIoxpzmovldpN0n8AsCUgvG cFyEGMBKF25LQ2ZlcyIptFJNPGOZmZhExVEvgL0nXTf+COTQtsPV1wMSBR5Yanmi nymdCaCNE7fOrk2mqs9i7VMWXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAh3/0X G3yf4smCdU3waMnMH1daMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPbUz3X8ZMrNTUOKH0jNOSWkj5uGTtrU8UNRkd4MPNsLAg8ZupsNRe Bp4EMYSI8TV855DyZFoQCg7Nx/yICwHD1okzgvE3TZAfw4/RZjWK4u3iXp/5fCyy ps2PLhJvPwf+ku1kFjC5kLrVZKpoE14B5prTNjnmM04f5rTDEeGUC+tDVUWLmDj/ //17KJPXbye62G3wVc+cmgsexqYlup/42YAzRNz/Z5vUaNx0TssR8I9RNhqilxws QztYq5P6bGzZ5DHTRIno7SiiOsCOWn3Jgm1g87pOIEwL5k0F0ns9gCAuYyLEdkzo ze+cW2zXzpvYscXJ2Y003tGjuaKNo+5i -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:08 2025 by rpki-client