$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: 7Z7RvvOKovbehgoQjsOlR4U4VIysRJzgEqf4kdWVtCY= Subject key identifier: 98:9E:E7:13:31:AB:FA:E8:2F:07:C7:1B:20:C0:62:D1:08:AF:61:6E Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 6B Signing time: Sun 19 Oct 2025 10:20:37 +0000 Manifest this update: Sun 19 Oct 2025 10:20:36 +0000 Manifest next update: Sun 26 Oct 2025 10:20:35 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: W9BmqcairFgaCh+Z7qXLc0T5PYr7AjSnvXS4OUhYI6Q=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Oct 19 10:20:36 2025 GMT Not After : Oct 26 10:20:35 2025 GMT Subject: CN=68f4bb74-3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:16:b5:eb:d9:18:e9:39:87:57:54:cd:d4: 62:75:b9:f9:d3:6b:e0:cb:e1:48:5b:7c:7f:01:ab: 9a:b6:56:36:93:53:5e:79:ac:8f:66:86:26:d6:86: 12:06:d7:82:a1:09:d6:39:9e:16:04:1b:9d:c1:6a: 2a:59:aa:b1:c4:6a:6d:3f:76:b9:36:32:52:0a:a3: 09:62:ea:17:2e:67:94:f5:31:b1:ed:6f:5b:fa:ad: 91:91:51:61:a6:a4:e5:a8:de:02:2e:c2:a8:72:f6: 5b:54:df:3f:63:e9:b5:33:d4:d7:8c:98:d6:83:a1: d0:1d:d8:d0:a5:b4:f5:9f:7b:a1:14:66:f4:0d:70: 8f:17:03:23:f2:97:19:92:2d:bf:2d:1e:3d:13:7b: fa:42:ba:8f:0f:fe:54:40:d3:f8:d4:92:23:df:93: f1:ed:5d:68:cc:c9:35:3e:04:af:46:ae:c8:00:5b: 52:14:66:67:46:b6:5c:3f:8c:f6:c4:6e:42:f2:3e: a7:3e:dd:b5:55:5c:a5:ea:5e:41:da:68:73:c0:58: 9a:da:f9:9b:39:5e:43:8f:5f:2b:8f:5d:e5:e9:47: fd:54:be:5f:f2:33:9f:f3:7b:df:46:a2:2c:ec:94: 08:73:8c:ee:f1:2d:1b:e8:f0:93:a9:2d:c0:1d:d8: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9E:E7:13:31:AB:FA:E8:2F:07:C7:1B:20:C0:62:D1:08:AF:61:6E X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:78:81:76:2b:3d:eb:46:e7:d4:65:d2:86:cb:3d:9f:03: cd:3d:15:64:dd:08:ea:70:ec:80:e7:b1:6b:b2:c8:19:3d:dc: 92:c2:c2:28:49:1b:88:3b:e9:ce:cf:00:d6:34:0c:bb:eb:49: 70:12:f8:79:85:d4:e2:0c:3b:7f:2d:e3:20:f6:ca:38:7e:5e: 60:2c:d9:c7:a3:4d:f1:3e:c8:49:18:cb:7a:25:42:98:49:24: 9b:49:31:0d:0e:03:a5:8b:35:7c:c5:55:a4:40:ae:14:1f:7d: 39:4e:d9:9f:85:8e:98:d4:db:0e:98:89:48:2b:6f:06:29:30: 66:ce:9d:1b:81:ad:d8:6e:db:d5:29:56:3d:3e:f7:73:45:77: b4:61:6a:b4:4f:30:89:6a:40:2f:df:05:e8:d8:db:77:be:12: 6a:26:99:a6:28:21:32:ec:7e:63:7d:a4:cb:99:2c:78:af:4f: c2:5e:99:83:e8:8c:39:d4:e4:27:fa:e6:66:d8:2c:75:50:7c: 79:03:d8:93:52:09:d8:dc:c4:39:79:66:a9:54:97:57:eb:8a: 87:1c:42:7e:ea:5d:9e:8a:2f:2d:a3:04:78:0b:2e:42:a4:f7: b7:74:7c:2c:f5:d4:45:21:a1:3d:c2:02:0a:62:f6:5c:55:ba: 7e:33:2c:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTEwMTkxMDIwMzZaFw0yNTEwMjYxMDIwMzVaMBgxFjAUBgNV BAMTDTY4ZjRiYjc0LTMwNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBxxa169kY6TmHV1TN1GJ1ufnTa+DL4UhbfH8Bq5q2VjaTU155rI9mhibWhhIG 14KhCdY5nhYEG53BaipZqrHEam0/drk2MlIKowli6hcuZ5T1MbHtb1v6rZGRUWGm pOWo3gIuwqhy9ltU3z9j6bUz1NeMmNaDodAd2NCltPWfe6EUZvQNcI8XAyPylxmS Lb8tHj0Te/pCuo8P/lRA0/jUkiPfk/HtXWjMyTU+BK9GrsgAW1IUZmdGtlw/jPbE bkLyPqc+3bVVXKXqXkHaaHPAWJra+Zs5XkOPXyuPXeXpR/1Uvl/yM5/ze99Goizs lAhzjO7xLRvo8JOpLcAd2N3FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmJ7nEzGr +ugvB8cbIMBi0QivYW4wHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7beIF2Kz3rRufUZdKGyz2fA809FWTdCOpw7IDnsWuyyBk93JLCwihJ G4g76c7PANY0DLvrSXAS+HmF1OIMO38t4yD2yjh+XmAs2cejTfE+yEkYy3olQphJ JJtJMQ0OA6WLNXzFVaRArhQffTlO2Z+FjpjU2w6YiUgrbwYpMGbOnRuBrdhu29Up Vj0+93NFd7RharRPMIlqQC/fBejY23e+EmommaYoITLsfmN9pMuZLHivT8JemYPo jDnU5Cf65mbYLHVQfHkD2JNSCdjcxDl5ZqlUl1frioccQn7qXZ6KLy2jBHgLLkKk 97d0fCz11EUhoT3CAgpi9lxVun4zLOc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:45 2025 by rpki-client