$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json) Hash identifier: tKITbVQKRFnx575CR2kjkuC98HwFNSK1lzTab4eU6z4= Subject key identifier: 7E:B2:50:74:64:86:FB:24:C4:53:F0:8E:EA:D6:A3:46:99:E6:03:C1 Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft Manifest number: 0C70 Signing time: Tue 04 Nov 2025 18:38:52 +0000 Manifest this update: Tue 04 Nov 2025 18:38:52 +0000 Manifest next update: Tue 11 Nov 2025 18:38:52 +0000 Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: 0x1hSTTSAgYtN1Da2xVbLtSWjCMauV0H4nBKeQ+ZV3E=) 2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: KCbvW2+iTb2FhCUJSCAthuyvDnx7MU5+U8PZ8z1pu+g=) 3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: LFZ6uBkW6voau17buZXmD8B1WuozeZe536RV9ixDxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Nov 4 18:38:52 2025 GMT Not After : Nov 11 18:38:52 2025 GMT Subject: CN=690a483c-e855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:79:b2:8d:9e:fb:24:e3:8f:04:74:b5:fa: 82:8e:bd:67:f1:34:f5:ab:92:b9:da:ab:fa:8f:bb: b3:60:94:78:2e:10:4a:8d:33:12:d3:de:a9:4a:ab: a7:8b:30:ac:4c:91:0a:16:12:8f:b9:9e:18:95:28: 77:48:0a:38:3c:c0:93:36:bc:58:cc:0e:bf:ae:67: 0f:4d:a2:6f:8f:6c:5c:8f:31:ca:c0:54:0f:ac:7c: 41:cf:d4:d4:55:db:98:01:f6:52:43:55:c7:80:eb: 15:f2:a9:54:c6:e1:6f:6c:8d:cd:32:06:7e:d1:65: 6e:68:5c:ae:f4:16:c9:e3:33:65:96:49:da:01:a7: 37:84:e1:65:b0:a6:de:3f:a1:d5:43:81:06:65:b9: f8:a8:de:8d:d3:a5:e2:f9:46:fd:8d:23:8d:66:4b: 8b:27:81:b4:01:96:35:b1:76:52:fa:e7:ce:0f:d7: 7a:de:a8:55:a8:20:3b:b1:db:4a:16:c3:e5:9e:d7: 04:10:ef:63:61:65:5c:46:4b:64:c4:41:be:9c:02: 60:8f:30:0e:82:bd:8a:96:27:6f:67:fa:a1:83:69: 3d:35:92:8c:a6:91:51:7a:b7:95:60:33:f2:ce:ec: e3:6c:bd:55:ed:ae:70:0d:5a:d1:8b:0f:34:c9:97: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:50:74:64:86:FB:24:C4:53:F0:8E:EA:D6:A3:46:99:E6:03:C1 X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:5c:d7:f8:2a:24:e7:d9:70:b3:17:44:27:7a:12:87:67: 8d:ba:e0:48:62:30:e3:d0:eb:a0:ab:5e:85:9d:e7:51:bb:8d: f1:97:73:91:6c:ab:8d:bd:8f:0a:2c:dd:df:18:50:54:c3:21: 3d:55:85:17:e9:4b:0b:9e:e9:42:72:d5:c6:50:5f:21:21:f0: d4:f9:1f:4b:5c:15:82:63:9f:56:0e:3a:55:bb:85:48:f8:05: 9b:c7:29:08:e6:7d:65:8c:36:9a:d2:4e:c2:99:b9:7b:91:48: 12:65:69:a8:79:66:71:7b:0f:9f:2b:a6:f6:d5:c5:bf:01:06: c6:69:86:33:ec:fa:d4:8f:73:fe:07:54:5b:06:2d:48:40:bc: b4:63:14:88:22:f3:f8:12:e8:c7:5c:31:50:a6:9f:c0:2e:a6: 32:aa:b2:3b:bc:db:f7:66:ef:79:e5:58:88:d3:3e:9f:99:7c: ae:39:d0:e1:37:06:a7:b5:70:03:68:92:db:3e:d5:5e:84:cd: 80:4c:75:62:ad:5f:92:51:9f:f1:8f:ea:e8:68:df:5f:34:53: 98:85:78:2c:fc:cd:65:63:6c:27:af:42:99:5a:d8:27:2c:82: 85:59:b0:a9:c2:fe:1d:c5:b7:75:25:dc:e9:e0:c2:3d:55:e6: d0:f1:79:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjUxMTA0MTgzODUyWhcNMjUxMTExMTgzODUyWjAYMRYwFAYD VQQDEw02OTBhNDgzYy1lODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDZ5so2e+yTjjwR0tfqCjr1n8TT1q5K52qv6j7uzYJR4LhBKjTMS096pSqun izCsTJEKFhKPuZ4YlSh3SAo4PMCTNrxYzA6/rmcPTaJvj2xcjzHKwFQPrHxBz9TU VduYAfZSQ1XHgOsV8qlUxuFvbI3NMgZ+0WVuaFyu9BbJ4zNllknaAac3hOFlsKbe P6HVQ4EGZbn4qN6N06Xi+Ub9jSONZkuLJ4G0AZY1sXZS+ufOD9d63qhVqCA7sdtK FsPlntcEEO9jYWVcRktkxEG+nAJgjzAOgr2KlidvZ/qhg2k9NZKMppFRereVYDPy zuzjbL1V7a5wDVrRiw80yZeBAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6yUHRk hvskxFPwjurWo0aZ5gPBMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0YwMy82NEY2QzI4RTBERTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZ bXpXY004azhxcHRic1FZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKwFzX+Cok59lwsxdEJ3oSh2eNuuBIYjDj0Ougq16FnedRu43xl3OR bKuNvY8KLN3fGFBUwyE9VYUX6UsLnulCctXGUF8hIfDU+R9LXBWCY59WDjpVu4VI +AWbxykI5n1ljDaa0k7Cmbl7kUgSZWmoeWZxew+fK6b21cW/AQbGaYYz7PrUj3P+ B1RbBi1IQLy0YxSIIvP4EujHXDFQpp/ALqYyqrI7vNv3Zu955ViI0z6fmXyuOdDh NwantXADaJLbPtVehM2ATHVirV+SUZ/xj+roaN9fNFOYhXgs/M1lY2wnr0KZWtgn LIKFWbCpwv4dxbd1Jdzp4MI9VebQ8Xl2 -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:05 2025 by rpki-client