$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft File: aTyLTLomsG0s-roPm-TTffDd_z0.mft (raw, json) Hash identifier: /tyfTWW6XQQExLMsvnjf8FE1e3z/DIrZc4RnXX6iPZI= Subject key identifier: 81:E4:B8:F9:18:0B:15:7C:69:C1:AA:64:A4:E8:7A:85:38:11:C4:BB Authority key identifier: 69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D Certificate issuer: /CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft Manifest number: 18F5 Signing time: Sat 18 Oct 2025 18:09:59 +0000 Manifest this update: Sat 18 Oct 2025 18:09:58 +0000 Manifest next update: Sat 25 Oct 2025 18:09:58 +0000 Files and hashes: 1: aTyLTLomsG0s-roPm-TTffDd_z0.crl (hash: wdSWAIdQlkzkQTYC7a0O7LbYTWZEfspKPoustOQxFo0=) 2: A5A4E4866D3611F08FF30A86C4F9AE02.roa (hash: 9IEVEed/qQg7h6mrT8ekMyn0JnXizeeUHJOjRag0rxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Validity Not Before: Oct 18 18:09:58 2025 GMT Not After : Oct 25 18:09:58 2025 GMT Subject: CN=68f3d7f6-3630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:22:f0:d1:1f:de:9b:22:d1:e6:77:d4:cc: 25:84:de:1d:31:7d:9d:c6:66:0c:26:cd:24:44:68: 47:77:f2:bd:63:07:ab:38:d4:ac:07:96:7b:96:02: 5b:a6:2a:07:57:94:49:90:03:d0:e4:ca:24:80:84: 0a:57:8c:b9:a8:c7:66:a6:ed:08:eb:d9:9f:c9:6d: 4b:bc:1f:0a:73:a5:63:8f:cd:f8:1f:87:5a:be:67: bd:8f:0a:6d:b0:c1:fd:1b:bd:ad:e0:95:ae:bb:b6: 76:53:9c:93:9d:08:61:8c:f8:77:e2:b7:91:a8:65: 80:8d:74:f7:f9:ee:80:c5:28:4f:d6:e3:82:3b:a5: 0b:32:6a:11:64:e9:7a:92:1d:99:9e:94:10:2d:69: 6f:7f:85:b7:90:51:51:7e:9e:4b:40:be:0b:ee:8d: d8:4d:68:19:f6:22:09:87:b9:a9:94:d9:cb:bc:61: e0:b0:27:a0:5c:73:c6:74:39:34:0e:ae:4d:ad:b0: 7c:0c:9c:2c:80:7d:b8:81:fe:cf:f9:b4:5b:05:08: 6d:06:4a:20:52:dd:9b:4c:9f:73:bf:ca:5d:ec:cf: b5:ec:0d:7d:ae:4b:4b:f9:37:80:8c:c4:53:08:44: 8c:b7:c4:ee:a1:fe:40:62:fe:9a:dd:c2:0e:27:e6: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E4:B8:F9:18:0B:15:7C:69:C1:AA:64:A4:E8:7A:85:38:11:C4:BB X509v3 Authority Key Identifier: keyid:69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:71:e6:81:99:8e:ca:e9:ff:ff:fb:e5:70:cd:0e:1c:0f:ca: a1:2d:c6:04:22:75:1f:13:f7:13:65:a0:5a:35:a6:92:db:13: 51:82:86:f2:09:1e:aa:c7:57:d0:d3:1a:f7:3f:60:a5:4c:ee: 63:42:e7:0e:2c:8e:ca:15:0d:55:81:89:74:f9:6a:4c:ac:89: d4:38:bf:b1:6b:d9:92:49:4e:c9:32:69:01:36:26:ba:88:2d: 5f:f6:e8:8a:36:73:2d:a4:26:fb:29:5d:25:eb:dd:b8:01:0f: 9b:5d:f1:91:cb:d2:ca:be:59:15:4c:63:2d:dc:43:11:b0:3d: f7:4e:da:8a:da:dc:be:d8:70:f6:d9:c0:d5:fc:da:71:e8:76: e4:a7:f5:e7:1f:0c:62:05:1a:c3:01:b3:35:eb:db:f7:ef:08: 29:bf:49:02:d5:31:3a:98:54:e2:45:13:21:97:a3:ee:c0:ea: c1:23:9d:30:32:f6:00:2c:cf:0b:c5:27:9b:50:8a:54:72:27: ea:05:51:20:10:3b:df:8e:8d:57:c4:d8:54:53:f1:ad:d8:94: cd:47:15:db:2b:20:c2:b0:d2:5a:42:a8:13:b7:a0:74:c2:73: 3f:9c:e2:17:2e:0b:26:1b:c0:68:b1:ef:3b:4a:a3:b7:2d:32: 0a:4b:a8:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDY5M0M4QjRDQkEyNkIwNkQyQ0ZBQkEwRjlCRTREMzdE RjBEREZGM0QwHhcNMjUxMDE4MTgwOTU4WhcNMjUxMDI1MTgwOTU4WjAYMRYwFAYD VQQDEw02OGYzZDdmNi0zNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15Mi8NEf3psi0eZ31MwlhN4dMX2dxmYMJs0kRGhHd/K9YwerONSsB5Z7lgJb pioHV5RJkAPQ5MokgIQKV4y5qMdmpu0I69mfyW1LvB8Kc6Vjj834H4davme9jwpt sMH9G72t4JWuu7Z2U5yTnQhhjPh34reRqGWAjXT3+e6AxShP1uOCO6ULMmoRZOl6 kh2ZnpQQLWlvf4W3kFFRfp5LQL4L7o3YTWgZ9iIJh7mplNnLvGHgsCegXHPGdDk0 Dq5NrbB8DJwsgH24gf7P+bRbBQhtBkogUt2bTJ9zv8pd7M+17A19rktL+TeAjMRT CESMt8Tuof5AYv6a3cIOJ+Z5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHkuPkY CxV8acGqZKToeoU4EcS7MB8GA1UdIwQYMBaAFGk8i0y6JrBtLPq6D5vk033w3f89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9hVHlMVExvbXNHMHMtcm9QbS1UVGZmRGRf ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUeUxUTG9tc0cwcy1yb1BtLVRUZmZEZF96MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9hVHlMVExvbXNH MHMtcm9QbS1UVGZmRGRfejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ceaBmY7K6f//++VwzQ4cD8qhLcYEInUfE/cTZaBaNaaS2xNRgoby CR6qx1fQ0xr3P2ClTO5jQucOLI7KFQ1VgYl0+WpMrInUOL+xa9mSSU7JMmkBNia6 iC1f9uiKNnMtpCb7KV0l6924AQ+bXfGRy9LKvlkVTGMt3EMRsD33TtqK2ty+2HD2 2cDV/Npx6Hbkp/XnHwxiBRrDAbM169v37wgpv0kC1TE6mFTiRRMhl6PuwOrBI50w MvYALM8LxSebUIpUcifqBVEgEDvfjo1XxNhUU/Gt2JTNRxXbKyDCsNJaQqgTt6B0 wnM/nOIXLgsmG8Bose87SqO3LTIKS6hg -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:01 2025 by rpki-client