$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: +ln4367g8bmK3gHsZv2tlaZkguTCVYm2iF8iI1dThVw= Subject key identifier: AE:40:A5:10:09:EB:7E:AD:AC:FC:C0:BD:15:42:AC:E4:90:44:40:89 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 350E Signing time: Sat 18 Oct 2025 14:18:14 +0000 Manifest this update: Sat 18 Oct 2025 14:18:13 +0000 Manifest next update: Sat 25 Oct 2025 14:18:13 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: EeisStJziAIug6o1S1q2tD65wnNS+f6DcMzEVGp98sc=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13633 (0x3541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Oct 18 14:18:13 2025 GMT Not After : Oct 25 14:18:13 2025 GMT Subject: CN=68f3a1a5-fe8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0a:ff:04:c4:af:f9:31:7a:da:8b:44:44:14: 74:2d:24:89:f1:7c:69:a2:f4:23:3c:ef:24:23:28: 42:12:4f:5a:6d:81:ff:bd:09:3b:78:fc:87:69:59: 53:fc:02:f0:3a:ee:13:bd:76:01:36:e3:55:87:0e: d6:58:7e:99:8e:3c:28:ec:18:7c:57:0a:61:6b:f3: b8:cb:d9:66:74:d3:db:c1:81:aa:a7:50:b7:00:a9: 0e:ee:fb:34:5b:c7:56:63:7d:3f:ba:46:0a:97:7c: 5b:b2:8d:62:85:93:c6:b2:cc:9b:07:c7:8c:35:ed: 5c:fa:6f:4c:89:0d:bc:ce:65:36:cf:de:52:46:11: 09:a4:61:50:64:b5:f8:03:98:61:80:7b:23:ce:25: 01:d8:aa:a8:86:f9:56:f3:83:bb:a0:6f:19:1e:0f: 71:cd:2c:b8:e2:8e:d8:bf:33:1e:e7:c1:bb:aa:9f: 20:2d:9c:34:93:c6:38:63:9d:a2:31:cc:8d:e9:44: 41:0f:cf:64:e7:42:e3:75:3e:6f:5a:c9:13:94:60: 90:af:86:ff:bb:60:38:e2:78:69:62:cf:fa:2c:3c: 3f:5f:a0:d9:60:99:80:af:7f:51:39:f8:94:a7:ab: be:0a:2d:b9:41:7c:d1:da:2b:d1:f5:8c:3c:5e:86: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:40:A5:10:09:EB:7E:AD:AC:FC:C0:BD:15:42:AC:E4:90:44:40:89 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a6:23:88:f2:00:ef:27:5b:58:cc:b3:b4:cb:f1:fb:6e:f3: 04:73:fb:c6:27:e4:ce:4c:5b:e5:70:d1:fd:d3:36:1a:e3:c3: e4:e7:72:af:66:a7:27:0d:9e:87:49:69:ed:b8:0b:ec:39:ab: 08:f3:b2:5b:aa:8c:a8:a0:75:5d:fd:40:7c:57:cf:25:6c:a4: 06:94:30:4d:2f:3d:2f:dc:00:6b:99:a9:58:e5:1b:70:a4:b3: c0:a8:f6:9b:2b:89:f6:2f:49:3e:f6:44:37:3b:2a:c9:24:e8: 8d:17:8f:8b:73:79:fe:55:e8:03:4a:f1:bc:d6:31:af:07:a7: 6e:a0:c0:c2:0e:72:b8:37:a3:3e:6a:20:4e:21:1e:22:29:2e: 30:48:ce:34:e6:7e:4a:05:d8:d2:8a:b9:75:38:00:e1:46:ea: 1a:66:db:82:02:37:9a:07:96:6f:f1:e3:a3:60:4e:86:eb:0f: af:19:a6:7e:24:f1:25:70:2d:12:7a:e2:40:0a:26:f1:55:53: a6:ef:2d:44:20:b8:5c:f6:ce:27:b6:3f:41:f7:1e:ce:56:42: b5:6d:cb:15:0a:ea:19:73:59:9e:01:03:d5:9c:91:ac:9f:48: 19:6b:77:d5:54:31:70:cc:01:37:ad:83:31:c0:8d:da:40:c0: d7:2f:96:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUxMDE4MTQxODEzWhcNMjUxMDI1MTQxODEzWjAYMRYwFAYD VQQDEw02OGYzYTFhNS1mZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Qr/BMSv+TF62otERBR0LSSJ8XxpovQjPO8kIyhCEk9abYH/vQk7ePyHaVlT /ALwOu4TvXYBNuNVhw7WWH6Zjjwo7Bh8Vwpha/O4y9lmdNPbwYGqp1C3AKkO7vs0 W8dWY30/ukYKl3xbso1ihZPGssybB8eMNe1c+m9MiQ28zmU2z95SRhEJpGFQZLX4 A5hhgHsjziUB2KqohvlW84O7oG8ZHg9xzSy44o7YvzMe58G7qp8gLZw0k8Y4Y52i McyN6URBD89k50LjdT5vWskTlGCQr4b/u2A44nhpYs/6LDw/X6DZYJmAr39ROfiU p6u+Ci25QXzR2ivR9Yw8XoaCuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5ApRAJ 636trPzAvRVCrOSQRECJMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMpiOI8gDvJ1tYzLO0y/H7bvMEc/vGJ+TOTFvlcNH90zYa48Pk53Kv ZqcnDZ6HSWntuAvsOasI87JbqoyooHVd/UB8V88lbKQGlDBNLz0v3ABrmalY5Rtw pLPAqPabK4n2L0k+9kQ3OyrJJOiNF4+Lc3n+VegDSvG81jGvB6duoMDCDnK4N6M+ aiBOIR4iKS4wSM405n5KBdjSirl1OADhRuoaZtuCAjeaB5Zv8eOjYE6G6w+vGaZ+ JPElcC0SeuJACibxVVOm7y1EILhc9s4ntj9B9x7OVkK1bcsVCuoZc1meAQPVnJGs n0gZa3fVVDFwzAE3rYMxwI3aQMDXL5ZD -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:43 2025 by rpki-client