$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: 09Y+q6p5woEfie7CUR/meJb7QbAtHcE0UNxs2n5ESCQ= Subject key identifier: 24:A4:27:6D:37:29:65:C0:A0:32:17:49:D5:33:CB:5C:6F:A4:A6:50 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D93 Signing time: Tue 04 Nov 2025 18:00:54 +0000 Manifest this update: Tue 04 Nov 2025 18:00:53 +0000 Manifest next update: Tue 11 Nov 2025 18:00:53 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: uynJxUGDz04x1obexRNKdpe7rNp6ZIkqhzqGJMM5ijw=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Nov 4 18:00:53 2025 GMT Not After : Nov 11 18:00:53 2025 GMT Subject: CN=690a3f55-93f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:90:bb:cc:78:b1:69:cb:f3:78:0f:34:41: 7a:97:c0:32:71:ef:0a:4e:7c:ad:01:f4:b2:da:bf: 6d:43:d4:a0:60:74:9c:00:e5:71:44:1f:6b:8b:94: 1d:e5:76:e9:d9:4d:98:7e:05:d6:c1:0f:92:d7:33: 58:b8:5a:ed:65:dc:99:8c:cf:e6:53:82:3e:94:d6: ab:42:1c:0d:74:e4:2b:e8:15:36:8b:8d:aa:41:3a: 80:cb:2d:fc:76:e0:b6:f7:12:49:fb:d5:04:f1:3e: a7:bb:5d:f4:21:3e:a0:10:1f:85:2b:c9:4a:6f:10: 9f:66:a8:33:c6:01:3b:a9:e8:06:e6:45:6a:4e:44: 0a:56:6e:21:01:85:e2:f4:c3:3d:ca:e8:7f:11:3e: b0:df:8b:e8:3d:d0:0a:68:a9:8e:20:6a:f1:ad:50: c2:a6:a9:c9:be:f3:c6:6f:1b:8a:b9:bf:68:b7:d6: 6e:32:d7:8c:97:a9:4e:59:04:84:0d:e3:90:1c:e2: af:86:ee:ad:9c:d1:cb:38:1d:42:57:b4:53:4f:84: 3a:78:08:a0:5a:d9:1e:86:79:45:cd:7e:49:f5:c1: 9c:ec:6e:6d:1d:5a:67:6c:69:11:bd:fc:54:2f:d9: 58:96:30:b4:1e:96:25:82:3d:36:db:d0:21:0e:32: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A4:27:6D:37:29:65:C0:A0:32:17:49:D5:33:CB:5C:6F:A4:A6:50 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:13:ef:dd:4c:bd:aa:02:88:d4:fb:5d:2f:a5:60:d3:3b:ae: 7a:95:9c:95:c2:ee:14:bd:27:75:77:9e:c5:fb:60:2e:fb:6b: 52:61:62:77:33:bf:e7:30:43:43:f7:94:e0:ec:9b:ef:6d:08: 72:0e:25:90:72:7e:b3:e1:cf:ab:dc:7b:8e:4f:45:40:0b:34: 55:5b:63:42:a0:81:6f:f3:62:55:77:ce:fb:99:68:21:10:6e: e1:c9:e5:aa:58:9a:c7:c6:23:b6:78:b6:79:cd:60:53:00:d0: 9f:29:f4:9b:04:65:7a:49:dc:c8:67:2a:a2:33:13:62:55:68: 1a:a2:cf:34:ac:cd:45:d8:aa:be:bf:3f:5c:70:14:74:dc:ab: e8:bd:51:e7:0f:d5:21:95:a2:12:1a:56:ac:73:49:c3:58:ec: 9b:dd:9d:62:0d:20:d5:3d:20:73:ba:b3:e1:44:7b:db:83:95: ca:2b:41:4b:14:38:ea:52:11:67:b4:bb:7f:8b:74:30:61:c2: cb:56:86:bb:f7:d2:7a:3c:15:e0:f0:7e:51:08:3c:12:76:a3: d6:a3:25:62:1c:1d:cc:41:8a:b6:46:3d:30:31:ef:68:a1:70: cd:64:11:b6:57:1d:53:98:fa:be:18:81:98:0a:4d:4f:17:7a: d3:74:f0:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUxMTA0MTgwMDUzWhcNMjUxMTExMTgwMDUzWjAYMRYwFAYD VQQDEw02OTBhM2Y1NS05M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDCQu8x4sWnL83gPNEF6l8Ayce8KTnytAfSy2r9tQ9SgYHScAOVxRB9ri5Qd 5Xbp2U2YfgXWwQ+S1zNYuFrtZdyZjM/mU4I+lNarQhwNdOQr6BU2i42qQTqAyy38 duC29xJJ+9UE8T6nu130IT6gEB+FK8lKbxCfZqgzxgE7qegG5kVqTkQKVm4hAYXi 9MM9yuh/ET6w34voPdAKaKmOIGrxrVDCpqnJvvPGbxuKub9ot9ZuMteMl6lOWQSE DeOQHOKvhu6tnNHLOB1CV7RTT4Q6eAigWtkehnlFzX5J9cGc7G5tHVpnbGkRvfxU L9lYljC0HpYlgj0229AhDjI2gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSkJ203 KWXAoDIXSdUzy1xvpKZQMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbE+/dTL2qAojU+10vpWDTO656lZyVwu4UvSd1d57F+2Au+2tSYWJ3 M7/nMEND95Tg7JvvbQhyDiWQcn6z4c+r3HuOT0VACzRVW2NCoIFv82JVd877mWgh EG7hyeWqWJrHxiO2eLZ5zWBTANCfKfSbBGV6SdzIZyqiMxNiVWgaos80rM1F2Kq+ vz9ccBR03KvovVHnD9UhlaISGlasc0nDWOyb3Z1iDSDVPSBzurPhRHvbg5XKK0FL FDjqUhFntLt/i3QwYcLLVoa799J6PBXg8H5RCDwSdqPWoyViHB3MQYq2Rj0wMe9o oXDNZBG2Vx1TmPq+GIGYCk1PF3rTdPDC -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:59 2025 by rpki-client