$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json) Hash identifier: ofBQNxbrYU78BQVdK0kSDaNDaeHX4/9nIo+I3WWSGiU= Subject key identifier: 28:ED:CC:47:90:B4:24:0B:B3:FB:5B:AC:DC:16:35:76:4A:7F:31:1F Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft Manifest number: 42 Signing time: Wed 05 Nov 2025 07:40:40 +0000 Manifest this update: Wed 05 Nov 2025 07:40:38 +0000 Manifest next update: Wed 12 Nov 2025 07:40:38 +0000 Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: shojdOs++R7boNOKP2WD+M6P788krPoyRWCO5cpNhW0=) 2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: EVLtvEiDogBu3QcVhxjleJTDGMs7gXBmi6TLdVrRV/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Validity Not Before: Nov 5 07:40:38 2025 GMT Not After : Nov 12 07:40:38 2025 GMT Subject: CN=690aff77-d21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:63:ef:52:88:f7:6d:3d:b0:82:6e:ea:eb: 1b:a9:31:04:82:eb:a4:31:84:45:e1:31:75:ea:37: 0c:92:8d:4a:bc:27:22:18:f4:82:51:3e:bf:7d:c2: b5:82:13:f8:f2:17:a9:ca:17:87:cd:ea:8e:c9:3e: 53:2f:d0:08:e0:87:f7:0a:ea:c3:c8:30:20:4a:b8: 7b:98:d4:68:1f:b6:5e:ce:07:7c:32:dd:89:c1:5d: 6f:b4:77:1f:4f:2b:ff:0e:a9:08:65:1e:f4:74:7f: 25:79:cf:2f:ed:d1:39:8b:d5:5b:c7:ff:74:80:f2: 0e:c1:b4:85:07:46:7b:7d:aa:c4:1c:79:0d:b6:85: 86:70:70:bf:05:28:8b:7f:d3:f1:e2:2e:f5:b9:48: 61:c8:9a:f6:a7:13:a2:71:1c:ff:cb:38:04:3d:76: d2:6c:e5:8f:38:67:68:24:3f:90:ad:5f:c3:08:d6: 6c:0d:df:e0:0d:cb:9a:62:67:79:3e:0f:0e:f4:c1: 81:f3:c8:51:8c:ba:9f:00:0d:19:38:a3:5e:dd:d6: 46:79:cf:b8:ba:84:d2:07:26:14:d8:3c:8e:93:d5: 55:f9:c7:2b:d9:26:fb:03:97:57:bd:9e:ac:4e:cb: b9:86:01:fb:a1:10:f8:28:72:14:23:37:25:80:32: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:CC:47:90:B4:24:0B:B3:FB:5B:AC:DC:16:35:76:4A:7F:31:1F X509v3 Authority Key Identifier: keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:b2:ce:37:a0:d8:ca:47:58:0c:ea:2b:2a:53:75:bf:4a: bc:e3:05:4a:de:5d:3f:55:d6:47:5d:cd:a0:31:b7:71:2f:cc: 82:3a:bd:20:a4:1e:ca:4e:49:2c:92:21:0e:fa:cf:34:8f:25: 35:6e:b0:fd:12:2d:c1:41:a4:a5:47:9b:f5:ca:32:aa:16:97: ae:dc:10:6a:5c:8f:a9:09:54:9a:42:2e:16:65:2d:40:dd:70: 62:d4:55:38:51:df:e2:e1:37:34:28:69:7f:3f:f2:9c:1f:7f: c3:1d:e4:52:37:95:1c:3d:e9:0d:a5:71:c4:93:4e:3c:9c:db: cd:af:6e:6f:eb:b4:bb:a6:35:22:aa:2b:94:55:5f:11:36:35: 6c:3e:bb:2a:ba:31:01:8e:e8:11:b1:02:86:f1:cd:83:53:22: f3:0c:78:8c:99:3b:08:1b:ba:50:3b:4c:48:18:59:87:95:f2: 2e:01:11:6b:2b:1a:4c:25:04:43:47:d2:ea:81:de:a8:59:40: 73:66:2e:c1:5c:38:46:92:18:d6:c3:eb:94:87:bc:23:34:cc: b8:92:a8:ac:3d:e7:c9:89:c1:09:e4:0c:0f:3c:55:61:1c:09: fa:2c:a5:9d:9b:24:bb:54:06:8b:ff:f0:6a:25:6f:67:58:6b: 2e:a2:54:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEY2MjExMC8GA1UEBRMoNjNGQTAwMDYyNjFEOUU0Q0Q0OTA1OTA2RTU0Mzk2OTRC RTYyN0JCMTAeFw0yNTExMDUwNzQwMzhaFw0yNTExMTIwNzQwMzhaMBgxFjAUBgNV BAMTDTY5MGFmZjc3LWQyMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQtWPvUoj3bT2wgm7q6xupMQSC66QxhEXhMXXqNwySjUq8JyIY9IJRPr99wrWC E/jyF6nKF4fN6o7JPlMv0Ajgh/cK6sPIMCBKuHuY1Ggftl7OB3wy3YnBXW+0dx9P K/8OqQhlHvR0fyV5zy/t0TmL1VvH/3SA8g7BtIUHRnt9qsQceQ22hYZwcL8FKIt/ 0/HiLvW5SGHImvanE6JxHP/LOAQ9dtJs5Y84Z2gkP5CtX8MI1mwN3+ANy5piZ3k+ Dw70wYHzyFGMup8ADRk4o17d1kZ5z7i6hNIHJhTYPI6T1VX5xyvZJvsDl1e9nqxO y7mGAfuhEPgochQjNyWAMpOxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKO3MR5C0 JAuz+1us3BY1dkp/MR8wHwYDVR0jBBgwFoAUY/oABiYdnkzUkFkG5UOWlL5ie7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjYyL0I4NzhDMkM4NURG RDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWV9vQUJpWWRua3pVa0ZrRzVVT1dsTDVpZTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RjYyL0I4NzhDMkM4NURGRDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6 VWtGa0c1VU9XbEw1aWU3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDHss43oNjKR1gM6isqU3W/SrzjBUreXT9V1kddzaAxt3EvzII6vSCk HspOSSySIQ76zzSPJTVusP0SLcFBpKVHm/XKMqoWl67cEGpcj6kJVJpCLhZlLUDd cGLUVThR3+LhNzQoaX8/8pwff8Md5FI3lRw96Q2lccSTTjyc282vbm/rtLumNSKq K5RVXxE2NWw+uyq6MQGO6BGxAobxzYNTIvMMeIyZOwgbulA7TEgYWYeV8i4BEWsr GkwlBENH0uqB3qhZQHNmLsFcOEaSGNbD65SHvCM0zLiSqKw958mJwQnkDA88VWEc CfospZ2bJLtUBov/8Golb2dYay6iVHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:38 2025 by rpki-client