$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json) Hash identifier: H4K+VKANQfCPeA+0Z0XuagsuUPl50Y07CpseeYVloFo= Subject key identifier: 1E:C9:0D:54:36:72:29:F5:9E:B8:06:8B:F4:1A:C6:4C:2C:E3:BB:B1 Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft Manifest number: 10 Signing time: Sun 19 Oct 2025 11:34:27 +0000 Manifest this update: Sun 19 Oct 2025 11:34:26 +0000 Manifest next update: Sun 26 Oct 2025 11:34:26 +0000 Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: Kbr7MewZ8EfIx68c2QFk70QEoJ5gF0Hr7UA1SM6eCKI=) 2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Validity Not Before: Oct 19 11:34:26 2025 GMT Not After : Oct 26 11:34:26 2025 GMT Subject: CN=68f4ccc2-1cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:13:43:f8:52:68:0d:b6:12:d2:e5:51:47:2e: e0:9e:fd:3a:a4:33:8e:4e:89:76:64:f4:b9:6d:53: 1e:2c:63:a4:f7:b6:3d:d1:99:65:09:85:5a:98:16: ad:49:d5:50:36:07:02:9d:8f:6d:5a:d7:75:82:e2: a4:75:e0:dc:99:9e:2a:36:84:9b:6d:e0:7e:69:72: c1:cb:f8:de:65:d3:78:2a:56:c4:57:05:47:df:33: b5:3b:7d:cc:15:08:64:64:eb:df:82:d0:5d:e5:eb: 01:f5:5a:fc:84:17:65:43:d5:c5:a3:94:e3:c9:6e: b1:84:20:5b:94:5c:03:82:a0:a4:3b:f7:a1:f4:07: 83:9e:d4:46:9d:a8:0a:1a:2a:16:44:fe:ab:fb:50: 2d:d0:b4:d2:b0:18:26:e6:09:a5:f2:3b:c3:8f:9b: 0e:30:d5:d3:8a:c4:58:3c:1c:35:28:53:85:d6:cc: fd:50:71:c0:21:9a:f2:8e:14:39:f8:e1:2f:47:4e: 58:11:b6:ea:69:43:56:0e:a0:a1:e6:f8:3b:a8:47: c1:0e:64:c1:0f:f3:ff:84:a1:cd:5d:11:f4:ed:49: d0:79:a4:66:2a:2e:00:5d:cf:0b:e8:8e:9e:fe:52: 50:13:8d:22:30:04:48:e3:cf:49:ba:d0:07:94:7a: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:0D:54:36:72:29:F5:9E:B8:06:8B:F4:1A:C6:4C:2C:E3:BB:B1 X509v3 Authority Key Identifier: keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9f:05:57:0c:59:df:71:6f:25:3b:eb:3f:46:68:8f:e3:22: 41:46:24:df:2e:ac:00:8e:ca:7e:43:1a:91:cb:0d:2f:85:98: 1e:59:a9:c9:fb:70:27:72:1d:dc:c7:aa:48:2a:d6:b9:9b:85: 6a:f0:81:19:60:3d:41:99:e9:d4:dc:f6:d3:78:3e:06:a0:24: e9:2f:e0:26:46:96:4e:46:3e:b8:09:6c:3e:bd:29:19:25:c0: 13:3d:39:b0:06:36:90:da:41:a5:88:79:3e:61:02:37:f3:38: 8d:fd:38:81:a4:2a:53:a2:67:9e:f1:e0:b1:5c:9c:92:e0:2e: 7d:96:16:75:74:4d:1f:24:c1:a5:c2:87:e9:a1:52:cf:8f:87: f7:22:cb:6f:46:f6:8b:c1:fb:44:e3:a6:97:8d:93:a6:e1:a5: f3:76:bb:a5:d9:74:84:97:eb:5f:8a:55:76:10:aa:3c:ad:fb: f4:a9:28:c2:24:b1:16:37:82:78:9c:0b:d5:03:2a:99:cd:48: f0:a3:81:eb:0c:78:69:dd:13:78:58:01:2a:08:48:32:d2:5d: da:5e:c5:61:7c:5b:14:07:87:ba:3c:09:34:45:b7:a5:f3:76: 53:ef:10:b1:78:a8:06:dd:81:d8:07:56:6d:7b:1f:5a:d7:b0: 7a:f3:85:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkMxRjExMC8GA1UEBRMoRDRBNEYwQjYwMDBERTAyMjQ4QzQ2NTdBRjlERDI2QjAy M0M1RjY3OTAeFw0yNTEwMTkxMTM0MjZaFw0yNTEwMjYxMTM0MjZaMBgxFjAUBgNV BAMTDTY4ZjRjY2MyLTFjYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuE0P4UmgNthLS5VFHLuCe/TqkM45OiXZk9LltUx4sY6T3tj3RmWUJhVqYFq1J 1VA2BwKdj21a13WC4qR14NyZnio2hJtt4H5pcsHL+N5l03gqVsRXBUffM7U7fcwV CGRk69+C0F3l6wH1WvyEF2VD1cWjlOPJbrGEIFuUXAOCoKQ796H0B4Oe1EadqAoa KhZE/qv7UC3QtNKwGCbmCaXyO8OPmw4w1dOKxFg8HDUoU4XWzP1QccAhmvKOFDn4 4S9HTlgRtuppQ1YOoKHm+DuoR8EOZMEP8/+Eoc1dEfTtSdB5pGYqLgBdzwvojp7+ UlATjSIwBEjjz0m60AeUeu21AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHskNVDZy KfWeuAaL9BrGTCzju7EwHwYDVR0jBBgwFoAU1KTwtgAN4CJIxGV6+d0msCPF9nkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QzFGL0U2QTdGNkI4OUE4 NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjlu ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUtUd3RnQU40Q0pJeEdWNi1kMG1zQ1BGOW5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QzFGL0U2QTdGNkI4OUE4NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENK SXhHVjYtZDBtc0NQRjluay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACifBVcMWd9xbyU76z9GaI/jIkFGJN8urACOyn5DGpHLDS+FmB5Zqcn7 cCdyHdzHqkgq1rmbhWrwgRlgPUGZ6dTc9tN4PgagJOkv4CZGlk5GPrgJbD69KRkl wBM9ObAGNpDaQaWIeT5hAjfzOI39OIGkKlOiZ57x4LFcnJLgLn2WFnV0TR8kwaXC h+mhUs+Ph/ciy29G9ovB+0TjppeNk6bhpfN2u6XZdISX61+KVXYQqjyt+/SpKMIk sRY3gnicC9UDKpnNSPCjgesMeGndE3hYASoISDLSXdpexWF8WxQHh7o8CTRFt6Xz dlPvELF4qAbdgdgHVm17H1rXsHrzhVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:58 2025 by rpki-client