$ rpki-client -vvf rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft (raw, json) Hash identifier: OoM3yrIzRRtwY3UC5hMT8N4IJOYRy+CB1UezqYFc4Ts= Subject key identifier: 49:9F:45:7F:F3:45:15:85:43:3D:8A:AF:C4:E7:F6:9E:EB:6D:57:E2 Authority key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 Certificate issuer: /CN=A9193037/serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft Manifest number: 0949 Signing time: Tue 04 Nov 2025 20:16:42 +0000 Manifest this update: Tue 04 Nov 2025 20:16:41 +0000 Manifest next update: Tue 11 Nov 2025 20:16:41 +0000 Files and hashes: 1: ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl (hash: yLvEv1wEtol4W458jKXtnFvxBl0cMV3m0cVitmjQBag=) 2: D9C523A0B05A11EAA233021EC4F9AE02.roa (hash: plSH71jqFHiqVOcppEgGivQOT8E3EqzsKsifhjqPdW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Validity Not Before: Nov 4 20:16:41 2025 GMT Not After : Nov 11 20:16:41 2025 GMT Subject: CN=690a5f2a-954d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:f0:27:52:39:76:8c:5e:47:bd:a5:39:43: 83:53:a4:70:db:ad:41:17:dd:4b:64:d5:43:ad:db: bb:d7:1f:e0:c9:9a:df:01:bf:bb:e0:3b:22:65:2f: 44:cc:22:c8:cf:33:fe:a2:b2:bd:f6:b4:bc:08:42: e3:b9:3f:60:7b:7b:09:07:0e:26:db:26:4a:c1:c9: 19:e9:79:56:b1:66:13:50:74:70:a5:49:35:b9:b7: ce:77:84:c1:18:22:03:83:9c:e1:71:28:5b:53:52: 4f:1e:7b:38:81:71:ee:ab:59:71:00:f2:fe:19:f7: a2:69:bd:b9:89:9b:3d:4d:56:ff:b5:f8:f9:45:6c: 30:e7:15:02:64:0f:1d:0d:cc:b8:31:03:99:47:13: d7:b2:2f:33:58:a7:7c:7d:97:b2:99:de:c0:78:74: ef:64:ac:42:40:e5:cb:b6:ae:f7:c1:90:fc:ce:3a: 8c:02:f6:cb:b4:a9:2d:93:bf:67:d2:30:3d:d5:f1: 4d:d2:a9:92:54:83:19:b5:2a:81:62:1c:80:ea:5b: e0:07:e8:2b:5b:b2:b7:f5:15:71:03:a1:f2:db:58: 97:c0:86:54:67:f6:8d:18:a0:20:2e:a4:2d:18:70: 9a:10:3d:ed:fc:48:c0:b2:56:d3:c4:51:f0:f2:cb: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9F:45:7F:F3:45:15:85:43:3D:8A:AF:C4:E7:F6:9E:EB:6D:57:E2 X509v3 Authority Key Identifier: keyid:CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:07:ba:8b:22:02:78:a7:55:79:00:38:5c:bf:fc:4e:6d: 14:0c:28:0d:96:e9:3a:bf:ee:b8:dc:76:c1:57:4c:73:a8:66: eb:be:60:36:5b:52:85:aa:6b:df:07:71:ee:cb:74:77:b5:32: 44:1c:94:41:04:f1:f0:18:04:fa:fa:75:38:11:29:27:db:d5: 7a:e9:75:00:83:d2:66:0c:2c:ac:c4:13:a7:cb:1e:92:16:13: c3:a4:ad:6b:e3:9c:a3:0b:ff:93:23:61:c6:d1:6a:e7:8e:f3: 97:0f:17:60:f3:5c:4e:06:a5:cd:28:71:ee:64:90:89:4e:ba: 9a:13:13:ac:15:65:15:43:07:bb:e2:2d:7c:f9:13:ca:0a:70: 74:ad:df:41:17:d2:f0:1b:a7:2b:00:4c:d6:6c:1d:36:b6:25: e9:96:11:83:b3:ed:5a:a5:45:ef:7b:ac:1f:99:9c:b2:0f:10: 1d:33:93:59:4e:cb:79:95:ec:cb:5c:f0:0a:44:54:a1:c8:e4: 99:80:0f:14:d8:6e:1e:33:2a:b1:fa:1d:7e:7c:94:ba:8a:8b: ad:48:31:93:61:43:4d:26:f2:14:73:08:86:2d:a8:33:d5:b2: 60:0c:d9:b4:43:6f:98:4e:45:df:8a:34:82:3d:fa:66:93:d8: 47:46:57:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwMzcxMTAvBgNVBAUTKENBOTU1OTE0Rjk4QjJGQzkxNkE0NTEyREE3MkFCNzVB MTFDNTJCRDAwHhcNMjUxMTA0MjAxNjQxWhcNMjUxMTExMjAxNjQxWjAYMRYwFAYD VQQDEw02OTBhNWYyYS05NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaDwJ1I5doxeR72lOUODU6Rw261BF91LZNVDrdu71x/gyZrfAb+74DsiZS9E zCLIzzP+orK99rS8CELjuT9ge3sJBw4m2yZKwckZ6XlWsWYTUHRwpUk1ubfOd4TB GCIDg5zhcShbU1JPHns4gXHuq1lxAPL+Gfeiab25iZs9TVb/tfj5RWww5xUCZA8d Dcy4MQOZRxPXsi8zWKd8fZeymd7AeHTvZKxCQOXLtq73wZD8zjqMAvbLtKktk79n 0jA91fFN0qmSVIMZtSqBYhyA6lvgB+grW7K39RVxA6Hy21iXwIZUZ/aNGKAgLqQt GHCaED3t/EjAslbTxFHw8svFAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmfRX/z RRWFQz2Kr8Tn9p7rbVfiMB8GA1UdIwQYMBaAFMqVWRT5iy/JFqRRLacqt1oRxSvQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzAzNy85NDBFNDZCNEFB QkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4a1dwRkV0cHlxM1doSEZL OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwVlpGUG1MTDhrV3BGRXRweXEzV2hIRks5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzAzNy85NDBFNDZCNEFBQkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4 a1dwRkV0cHlxM1doSEZLOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaiAe6iyICeKdVeQA4XL/8Tm0UDCgNluk6v+643HbBV0xzqGbrvmA2 W1KFqmvfB3Huy3R3tTJEHJRBBPHwGAT6+nU4ESkn29V66XUAg9JmDCysxBOnyx6S FhPDpK1r45yjC/+TI2HG0WrnjvOXDxdg81xOBqXNKHHuZJCJTrqaExOsFWUVQwe7 4i18+RPKCnB0rd9BF9LwG6crAEzWbB02tiXplhGDs+1apUXve6wfmZyyDxAdM5NZ Tst5lezLXPAKRFShyOSZgA8U2G4eMyqx+h1+fJS6ioutSDGTYUNNJvIUcwiGLagz 1bJgDNm0Q2+YTkXfijSCPfpmk9hHRldX -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:32 2025 by rpki-client