$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: tJni8Hl+zCsCRNnn/6UxgBFrpsNcL4flXNECnELo9Lk= Subject key identifier: BD:1A:D6:50:8A:4D:1A:04:21:61:FF:A0:AF:06:5B:F2:0B:38:9A:A1 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 06B4 Signing time: Tue 04 Nov 2025 23:41:10 +0000 Manifest this update: Tue 04 Nov 2025 23:41:10 +0000 Manifest next update: Tue 11 Nov 2025 23:41:10 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: x5l9MRocai9vqzCKYaBl0FYilgLbNGjJ1XsqMYjrC/Q=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Nov 4 23:41:10 2025 GMT Not After : Nov 11 23:41:10 2025 GMT Subject: CN=690a8f16-0a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:f7:1f:39:1e:c3:a3:8b:d1:f2:e8:40:79: bb:f0:da:6e:b3:55:1c:6b:38:cb:72:96:80:9d:40: 68:34:4c:a2:ff:53:b7:fd:60:9b:fe:eb:17:fc:3a: 80:46:a6:16:2f:c9:3a:cf:70:74:4c:c5:0d:1b:bc: dc:32:9b:32:48:12:59:41:24:0c:c5:e2:a6:20:92: 57:b0:cd:ca:3f:f5:15:68:cd:5d:3d:45:27:e9:50: 85:1e:84:14:a1:c9:5e:03:b8:14:a2:76:87:aa:90: b9:ec:f1:36:05:79:51:4f:9f:1e:10:21:7d:48:67: 13:c0:9d:8d:78:f1:8d:4f:79:35:e8:de:04:2a:63: 84:6a:c9:bd:35:43:22:b1:63:4a:5e:95:b7:19:fa: 69:7c:6b:13:42:fb:49:7d:07:26:c8:a8:f1:52:01: 0b:9d:b5:33:3c:cf:cd:82:a9:de:d2:e9:5a:11:18: 15:22:7c:db:cd:02:34:cd:13:a3:e0:08:b8:0d:7c: a6:75:63:95:c6:cc:84:11:fe:eb:ca:88:c4:d3:aa: 2a:f4:6f:4b:3f:57:90:c8:a0:95:85:b9:9a:b9:a6: 90:e8:f0:30:d0:0c:2c:0b:0a:71:e8:0d:c7:bc:17: c0:f7:11:e1:83:cb:32:43:3c:14:f3:92:bb:5f:a4: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:D6:50:8A:4D:1A:04:21:61:FF:A0:AF:06:5B:F2:0B:38:9A:A1 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d6:31:cc:8d:1b:f2:f4:94:a5:31:da:92:7b:35:83:f7:66: 63:9f:bd:cc:14:16:9b:d9:76:2f:38:80:bd:f1:29:c2:69:aa: 42:07:c6:bc:e6:f4:18:44:b0:6f:b6:8b:ee:7e:4a:d7:3a:4e: 03:9e:f1:a3:e0:a0:c4:88:de:5c:7e:a1:95:50:9b:12:52:de: 36:10:d3:47:c4:41:03:ef:09:a3:f5:30:0d:61:04:5c:20:8a: a2:eb:2d:db:fa:58:66:79:91:68:0f:68:4e:37:e3:dd:ef:85: 84:8b:2c:21:5c:7c:72:7d:e5:6d:24:32:59:32:6a:5d:b2:38: 21:6c:4a:93:b8:c9:70:ee:d9:9b:02:e8:00:87:0f:7c:d5:72: e0:2a:a3:e7:08:ea:8e:05:dd:3c:be:e2:98:4f:4a:67:a8:7c: b1:64:56:85:d2:c2:5a:09:fc:2d:8d:ea:9e:40:14:89:33:ce: 3f:a1:60:f8:52:5b:57:4b:a5:3f:b9:7b:04:05:bf:95:bf:6e: fc:85:ea:6f:96:f4:17:61:96:0e:3d:ca:7b:51:4f:b4:3d:29: b3:c9:79:eb:86:7a:63:c1:1f:e5:06:8f:17:e3:3f:27:56:e6: 31:56:d1:59:80:c0:37:ca:c8:04:8b:64:f7:1c:e1:38:2f:a9: 30:fb:18:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUxMTA0MjM0MTEwWhcNMjUxMTExMjM0MTEwWjAYMRYwFAYD VQQDEw02OTBhOGYxNi0wYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRX3Hzkew6OL0fLoQHm78Npus1UcazjLcpaAnUBoNEyi/1O3/WCb/usX/DqA RqYWL8k6z3B0TMUNG7zcMpsySBJZQSQMxeKmIJJXsM3KP/UVaM1dPUUn6VCFHoQU ocleA7gUonaHqpC57PE2BXlRT58eECF9SGcTwJ2NePGNT3k16N4EKmOEasm9NUMi sWNKXpW3GfppfGsTQvtJfQcmyKjxUgELnbUzPM/Ngqne0ulaERgVInzbzQI0zROj 4Ai4DXymdWOVxsyEEf7ryojE06oq9G9LP1eQyKCVhbmauaaQ6PAw0AwsCwpx6A3H vBfA9xHhg8syQzwU85K7X6RWtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0a1lCK TRoEIWH/oK8GW/ILOJqhMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE1jHMjRvy9JSlMdqSezWD92Zjn73MFBab2XYvOIC98SnCaapCB8a8 5vQYRLBvtovufkrXOk4DnvGj4KDEiN5cfqGVUJsSUt42ENNHxEED7wmj9TANYQRc IIqi6y3b+lhmeZFoD2hON+Pd74WEiywhXHxyfeVtJDJZMmpdsjghbEqTuMlw7tmb AugAhw981XLgKqPnCOqOBd08vuKYT0pnqHyxZFaF0sJaCfwtjeqeQBSJM84/oWD4 UltXS6U/uXsEBb+Vv278hepvlvQXYZYOPcp7UU+0PSmzyXnrhnpjwR/lBo8X4z8n VuYxVtFZgMA3ysgEi2T3HOE4L6kw+xg7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:00 2025 by rpki-client