$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: fnufiuBv8CH3zzvu+My3KCGScg9i6bJoq5T1ksvq6uA= Subject key identifier: 0F:BF:A0:E2:7F:8D:3A:05:C5:AB:78:F3:C7:3B:79:4D:83:7C:ED:38 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 01CC Signing time: Sat 18 Oct 2025 19:38:34 +0000 Manifest this update: Sat 18 Oct 2025 19:38:33 +0000 Manifest next update: Sat 25 Oct 2025 19:38:33 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: vEkPeOzKKijbn0HEwJG/5obguMvJq3xlFLMFGZ5QW6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Oct 18 19:38:33 2025 GMT Not After : Oct 25 19:38:33 2025 GMT Subject: CN=68f3ecb9-2adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:cf:3a:b9:68:2a:1d:18:77:a6:1d:5e:c4: 31:c0:18:8b:65:89:a4:a8:0f:cc:45:77:80:a4:ea: 01:0b:bd:92:c4:31:23:ec:97:4e:fb:e4:ff:9d:09: f9:e6:dd:5e:2a:41:12:4b:f0:a1:f1:be:c3:ad:ae: 2f:70:2a:e6:3d:6d:24:f9:bd:7c:ef:58:ba:50:2e: 6a:64:21:f5:a4:3c:b6:4e:d9:48:29:16:40:d2:1f: cf:51:8a:2b:e9:db:31:c5:ba:7d:6f:52:86:00:8e: 97:5d:fc:f8:70:ff:30:1a:c0:57:fc:5f:58:2b:b9: 82:36:6e:62:de:3a:83:f3:46:dd:e3:dd:33:3b:e0: 72:b8:b2:9e:0f:b9:b7:a3:20:54:d4:55:6e:18:b9: ec:f3:eb:14:44:bb:67:d8:ed:3c:ef:81:df:27:ac: 99:8f:9e:16:61:72:fb:05:fd:08:b3:a3:65:de:45: f4:67:ab:2a:24:d0:3e:39:99:9a:26:c6:85:cb:44: 29:e5:99:5b:a2:35:b6:cb:72:2a:5f:68:a2:9b:81: 31:ab:d3:f1:e3:08:9e:13:db:8c:79:3c:34:da:9b: c7:39:92:dd:ce:ea:b4:de:d9:f9:8e:7b:bf:1c:88: f4:38:b5:1d:dd:b6:3b:52:2d:97:e1:20:d8:0a:a2: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:A0:E2:7F:8D:3A:05:C5:AB:78:F3:C7:3B:79:4D:83:7C:ED:38 X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2f:1e:65:69:99:55:ed:d4:d3:61:0c:90:a4:12:58:77:d3: 1e:96:3e:03:dc:9a:12:3d:dc:05:cb:30:dc:91:ad:1c:32:f9: 94:0f:0f:f0:59:00:3f:cc:b3:ff:66:e1:14:27:6b:44:53:ba: 81:27:fe:48:77:39:fe:4b:ab:c8:72:96:fb:29:d3:2a:1f:bb: e8:1d:18:a4:3b:4d:f1:fb:9a:cb:db:94:35:b9:60:39:fa:81: dc:58:e6:9f:a7:bc:86:af:fc:71:e9:02:e2:5f:5a:cf:18:84: 37:e9:f4:a3:00:f8:fe:a1:e5:0f:7d:49:3c:67:ac:b5:3f:04: b1:02:e4:3f:17:88:5f:25:50:97:7f:0b:5c:98:e0:4d:86:8f: be:7d:00:41:dc:ef:5f:d3:d7:f1:f9:28:78:fd:79:95:54:64: 13:1e:60:aa:bc:84:e3:b0:0f:01:d5:6f:7a:8c:e6:66:cd:6b: 5d:f2:7d:c5:42:3a:79:37:cb:a0:37:da:60:b9:dc:a1:36:4d: 7d:38:31:65:6c:17:43:bf:8f:ed:5f:82:56:05:84:34:eb:a4: 61:bf:77:3d:47:b0:04:7d:d8:c8:1d:6b:ca:4e:fc:db:a4:f2: 5e:87:40:86:27:07:f0:58:c8:7d:ff:e8:e0:4b:02:54:44:05: 5a:db:eb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUxMDE4MTkzODMzWhcNMjUxMDI1MTkzODMzWjAYMRYwFAYD VQQDEw02OGYzZWNiOS0yYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZPPOrloKh0Yd6YdXsQxwBiLZYmkqA/MRXeApOoBC72SxDEj7JdO++T/nQn5 5t1eKkESS/Ch8b7Dra4vcCrmPW0k+b1871i6UC5qZCH1pDy2TtlIKRZA0h/PUYor 6dsxxbp9b1KGAI6XXfz4cP8wGsBX/F9YK7mCNm5i3jqD80bd490zO+ByuLKeD7m3 oyBU1FVuGLns8+sURLtn2O0874HfJ6yZj54WYXL7Bf0Is6Nl3kX0Z6sqJNA+OZma JsaFy0Qp5ZlbojW2y3IqX2iim4Exq9Px4wieE9uMeTw02pvHOZLdzuq03tn5jnu/ HIj0OLUd3bY7Ui2X4SDYCqIHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+/oOJ/ jToFxat488c7eU2DfO04MB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPLx5laZlV7dTTYQyQpBJYd9Melj4D3JoSPdwFyzDcka0cMvmUDw/w WQA/zLP/ZuEUJ2tEU7qBJ/5Idzn+S6vIcpb7KdMqH7voHRikO03x+5rL25Q1uWA5 +oHcWOafp7yGr/xx6QLiX1rPGIQ36fSjAPj+oeUPfUk8Z6y1PwSxAuQ/F4hfJVCX fwtcmOBNho++fQBB3O9f09fx+Sh4/XmVVGQTHmCqvITjsA8B1W96jOZmzWtd8n3F Qjp5N8ugN9pgudyhNk19ODFlbBdDv4/tX4JWBYQ066Rhv3c9R7AEfdjIHWvKTvzb pPJeh0CGJwfwWMh9/+jgSwJURAVa2+sB -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:17 2025 by rpki-client