$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: ZRlWIvPy3lFqGnuCNKSROoMwmQ6NDnrgMxKyhUx8Fw4= Subject key identifier: B2:4E:AB:4E:F0:DE:6A:22:CE:71:0A:54:70:36:7E:67:3B:45:CE:BE Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: D4 Signing time: Wed 05 Nov 2025 05:47:26 +0000 Manifest this update: Wed 05 Nov 2025 05:47:26 +0000 Manifest next update: Wed 12 Nov 2025 05:47:26 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: 26G2c6mlXFLOHMjIwcEz5EKLagkEiply9Rrlz9sQAV8=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Nov 5 05:47:26 2025 GMT Not After : Nov 12 05:47:26 2025 GMT Subject: CN=690ae4ee-2a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:22:6a:5d:ca:86:57:a5:55:49:56:b0:75: d6:38:f0:bc:14:3c:0b:c7:71:02:27:f8:71:e4:77: 0f:d1:61:eb:7a:c6:cd:3a:9f:7f:a2:dc:3f:23:38: 8f:fc:fe:00:3c:1f:98:ec:df:76:7d:c9:33:9e:4b: df:49:17:bf:02:9f:a9:d5:62:28:b2:a3:d5:b9:11: b4:e3:e6:02:54:7b:38:c4:9f:b3:c6:a0:69:3f:33: 8d:85:16:a2:10:9b:88:fb:cf:ae:bc:28:85:27:4b: 60:2c:1f:b9:56:d1:5d:5a:3e:2e:0e:f7:e5:8a:43: 32:8a:33:8e:a5:c6:c6:10:12:5e:d3:98:5e:ea:8c: 66:9f:ae:55:64:c7:dd:7e:c7:10:bf:7a:ac:2d:ba: d7:dc:dd:23:4f:eb:96:87:c3:87:e0:69:09:77:70: 99:87:74:f1:9c:a6:82:bf:2b:cc:8f:08:8b:f4:fe: dc:92:17:43:b0:51:0e:9d:8e:8c:4d:55:9d:cf:16: bc:15:5c:ea:1c:8f:72:06:29:b4:47:76:ac:7b:64: 1c:17:b5:3c:b0:57:ea:d8:05:73:8a:48:96:79:f0: 07:31:1b:35:b9:96:f1:90:56:e2:31:a8:35:1a:e6: 2d:ee:78:08:38:58:5b:eb:f7:b2:97:02:b7:be:f7: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:AB:4E:F0:DE:6A:22:CE:71:0A:54:70:36:7E:67:3B:45:CE:BE X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:36:80:3c:b1:ee:49:28:a1:3d:a8:ff:46:5c:1f:5e:27:0a: 56:ae:df:27:67:c9:72:14:39:31:6a:45:9f:05:4d:d9:61:64: ae:b6:28:3e:18:b2:7b:f7:ca:63:b5:3d:99:b6:2c:33:63:f9: 83:b9:49:2c:71:16:b9:ff:30:70:7b:21:bc:95:cb:a5:de:0c: e9:db:6e:20:04:0e:8f:3f:8c:5f:cb:09:ce:aa:b8:aa:ef:0f: 8e:57:be:e6:f0:b3:eb:9e:00:5a:56:b0:db:d8:8d:ef:51:b9: de:9e:35:b8:b2:18:91:5d:f9:36:94:cb:ce:48:70:ae:87:cd: 9e:6e:49:77:a4:65:6a:77:c7:6f:e4:22:88:0f:bb:9a:53:2f: 0d:f7:e0:a1:4a:ce:64:52:97:2d:da:f8:6e:c9:c7:15:94:8a: 33:93:00:95:2b:d6:79:fb:5c:d7:9b:ae:40:1f:65:60:cf:30: 72:6b:e8:6c:d3:dc:7e:a8:29:c6:84:e5:a6:39:8b:91:ed:9e: 0a:d3:c3:46:92:ec:d3:bc:3d:60:39:d2:a3:af:02:ba:5b:e8: 60:31:e7:86:3a:e8:0b:a8:0d:42:f7:70:2f:47:d1:c5:00:ee: d1:b7:18:a5:63:6a:92:ad:43:15:fe:80:d5:9a:b8:bb:81:50: de:31:76:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUxMTA1MDU0NzI2WhcNMjUxMTEyMDU0NzI2WjAYMRYwFAYD VQQDEw02OTBhZTRlZS0yYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlwial3KhlelVUlWsHXWOPC8FDwLx3ECJ/hx5HcP0WHresbNOp9/otw/IziP /P4APB+Y7N92fckznkvfSRe/Ap+p1WIosqPVuRG04+YCVHs4xJ+zxqBpPzONhRai EJuI+8+uvCiFJ0tgLB+5VtFdWj4uDvflikMyijOOpcbGEBJe05he6oxmn65VZMfd fscQv3qsLbrX3N0jT+uWh8OH4GkJd3CZh3TxnKaCvyvMjwiL9P7ckhdDsFEOnY6M TVWdzxa8FVzqHI9yBim0R3ase2QcF7U8sFfq2AVzikiWefAHMRs1uZbxkFbiMag1 GuYt7ngIOFhb6/eylwK3vvdipwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJOq07w 3moiznEKVHA2fmc7Rc6+MB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiNoA8se5JKKE9qP9GXB9eJwpWrt8nZ8lyFDkxakWfBU3ZYWSutig+ GLJ798pjtT2ZtiwzY/mDuUkscRa5/zBweyG8lcul3gzp224gBA6PP4xfywnOqriq 7w+OV77m8LPrngBaVrDb2I3vUbnenjW4shiRXfk2lMvOSHCuh82ebkl3pGVqd8dv 5CKID7uaUy8N9+ChSs5kUpct2vhuyccVlIozkwCVK9Z5+1zXm65AH2VgzzBya+hs 09x+qCnGhOWmOYuR7Z4K08NGkuzTvD1gOdKjrwK6W+hgMeeGOugLqA1C93AvR9HF AO7RtxilY2qSrUMV/oDVmri7gVDeMXZL -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:13 2025 by rpki-client