$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: lbyFPaeLEcl9zZn9jKV6kVfzYkbYlen5F45JZ5GGPjg= Subject key identifier: 1B:B3:70:33:82:D5:A6:69:AE:56:1A:51:7A:A1:40:4B:29:03:B1:B8 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 0195 Signing time: Sun 19 Oct 2025 06:01:22 +0000 Manifest this update: Sun 19 Oct 2025 06:01:21 +0000 Manifest next update: Sun 26 Oct 2025 06:01:21 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: 1HE/lMxJvrzCU+Q4zI036DlO9ztR4agWJBS7669qee8=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: Oct 19 06:01:21 2025 GMT Not After : Oct 26 06:01:21 2025 GMT Subject: CN=68f47eb2-5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:82:a5:19:56:b3:1f:30:64:08:5b:b5:a8: ba:09:ac:27:b3:35:70:8a:bc:df:20:1e:46:7f:4e: ba:7f:60:30:78:1b:45:d5:33:8c:c5:94:4f:ca:5f: ea:fd:c8:96:fb:f5:1b:b8:9e:7f:1f:2e:01:5e:b1: 43:27:23:3d:0e:62:3b:1d:73:f9:cb:70:79:8c:16: 04:bd:34:63:7d:50:d3:83:c4:2b:05:f7:ce:3c:77: fa:8c:10:79:7e:8d:dc:00:c5:07:4d:2d:49:09:ca: d0:24:f3:38:0f:da:c5:28:be:e3:18:e4:1b:c5:26: aa:d7:9c:45:68:94:c5:44:f0:8b:18:91:5b:84:f0: 7c:20:ee:ea:52:42:87:1b:fa:31:07:eb:db:b2:d4: 37:64:96:9e:ef:22:cc:e7:19:ad:8d:a8:e6:7e:4d: 86:a6:be:82:9f:1c:31:45:0a:a9:45:74:08:94:90: bd:a1:85:7e:13:a1:cd:a5:8d:2a:b6:d9:35:48:c7: cb:97:52:6a:53:bb:08:4d:3d:7e:aa:9c:64:53:9d: 74:bd:20:44:a6:9b:39:d7:8f:e8:5e:88:3d:d4:d9: da:63:31:1b:28:37:a8:98:31:18:80:ef:9c:cf:8f: 46:75:e8:61:99:df:cb:eb:1b:de:a3:7b:4e:50:fe: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:70:33:82:D5:A6:69:AE:56:1A:51:7A:A1:40:4B:29:03:B1:B8 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e1:7e:3e:06:ef:10:cd:05:fd:d7:f5:93:45:94:56:0c:46: d3:16:f9:0b:29:db:1d:6a:20:73:f9:65:42:9e:d3:8c:66:c2: d2:ea:b3:7e:89:48:fc:ba:ef:d4:e5:38:1d:ad:7d:6e:9a:4d: 9e:04:14:c9:ef:49:92:2c:5d:f6:54:92:f5:44:c1:64:49:a8: c6:89:5c:ee:57:8f:ff:37:12:09:b5:cd:ab:3e:b9:e4:3a:67: 1e:46:57:db:c1:c5:d1:78:a5:54:e3:da:bc:55:b7:8c:ae:5c: 0d:a6:82:02:f7:e4:95:f8:91:cd:74:7a:74:6b:c6:11:1d:18: 25:c3:39:04:70:b9:ca:eb:e0:77:d1:aa:a1:bd:b4:98:2c:6f: 84:9e:b5:81:6e:8b:6d:70:0d:31:6c:b2:51:51:72:6f:3f:82: 56:f6:c3:da:4b:5c:61:cc:45:76:76:52:23:8f:f8:9b:0d:44: 29:b7:89:32:a6:5e:f3:22:41:3c:8a:0a:59:9d:9c:96:78:d5: b0:96:03:1c:17:c7:db:87:1f:d8:ce:bb:b3:f5:57:cc:ad:e5: 3d:e2:36:78:03:29:3f:c2:19:19:ea:7a:f8:78:f3:4d:04:78: 5c:06:33:fd:2d:47:c8:f5:a2:1b:31:58:20:20:ba:f9:18:ee: 64:4d:dc:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUxMDE5MDYwMTIxWhcNMjUxMDI2MDYwMTIxWjAYMRYwFAYD VQQDEw02OGY0N2ViMi01NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEyCpRlWsx8wZAhbtai6CawnszVwirzfIB5Gf066f2AweBtF1TOMxZRPyl/q /ciW+/UbuJ5/Hy4BXrFDJyM9DmI7HXP5y3B5jBYEvTRjfVDTg8QrBffOPHf6jBB5 fo3cAMUHTS1JCcrQJPM4D9rFKL7jGOQbxSaq15xFaJTFRPCLGJFbhPB8IO7qUkKH G/oxB+vbstQ3ZJae7yLM5xmtjajmfk2Gpr6CnxwxRQqpRXQIlJC9oYV+E6HNpY0q ttk1SMfLl1JqU7sITT1+qpxkU510vSBEpps514/oXog91NnaYzEbKDeomDEYgO+c z49Gdehhmd/L6xveo3tOUP5aNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuzcDOC 1aZprlYaUXqhQEspA7G4MB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc4X4+Bu8QzQX91/WTRZRWDEbTFvkLKdsdaiBz+WVCntOMZsLS6rN+ iUj8uu/U5TgdrX1umk2eBBTJ70mSLF32VJL1RMFkSajGiVzuV4//NxIJtc2rPrnk OmceRlfbwcXReKVU49q8VbeMrlwNpoIC9+SV+JHNdHp0a8YRHRglwzkEcLnK6+B3 0aqhvbSYLG+EnrWBbottcA0xbLJRUXJvP4JW9sPaS1xhzEV2dlIjj/ibDUQpt4ky pl7zIkE8igpZnZyWeNWwlgMcF8fbhx/Yzruz9VfMreU94jZ4Ayk/whkZ6nr4ePNN BHhcBjP9LUfI9aIbMVggILr5GO5kTdy4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:12 2025 by rpki-client