$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: NcX+Fu6YnGyFkRKGzKANdHnds950YLEVaiAOyMVn010= Subject key identifier: 22:3E:38:14:4A:5F:20:69:EE:09:7E:E8:32:13:F0:BB:BE:EA:17:B9 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 0314 Signing time: Sun 19 Oct 2025 03:14:18 +0000 Manifest this update: Sun 19 Oct 2025 03:14:17 +0000 Manifest next update: Sun 26 Oct 2025 03:14:17 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: wHN4Ghnr0QjWMBYZmC8ZeCXEWkDAjghaIQYklItjmb0=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Oct 19 03:14:17 2025 GMT Not After : Oct 26 03:14:17 2025 GMT Subject: CN=68f45789-3283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:12:9b:3b:8b:be:f5:ed:04:4c:e4:07:f5: ce:0b:c6:e4:ec:e1:95:ec:dc:fc:a2:1e:9a:39:b3: 0f:e0:8e:86:68:b5:f4:4a:d0:c2:0e:73:87:05:2f: 74:59:a5:63:4f:f8:a2:a5:e6:b4:f2:78:11:2b:ce: a8:2b:fe:46:8c:5d:19:b7:0f:65:4d:cc:d9:cf:82: 51:1d:a4:70:b3:0c:8d:5c:40:a7:cb:37:9a:86:53: 80:b1:e3:1f:c7:0b:8d:0a:24:c0:90:b7:47:80:48: 45:3a:4b:6a:bf:95:1f:3d:f0:0b:b9:f5:a3:d2:cb: 43:0e:f4:d1:ff:d8:6e:1d:a5:1e:83:e3:0a:cc:19: a5:7e:50:b1:91:97:16:c1:e5:ac:d9:bc:df:75:2c: ec:85:68:f0:05:4b:10:e8:76:87:8e:25:dc:1c:d1: 8b:99:88:d5:1e:5d:ac:39:29:e9:fc:21:ac:48:ab: 64:2f:01:a4:d5:1d:0a:af:74:0c:10:b4:83:27:15: 56:37:9e:f3:0e:33:3f:91:cf:0d:cc:99:81:ab:08: 0e:b9:dd:da:24:d4:78:ff:ab:19:c8:fa:5b:e9:bd: b0:d6:cc:fe:fe:9a:b1:79:c1:6f:76:b5:28:6f:12: 3c:2b:4a:1f:18:37:c4:76:1d:f1:53:26:0c:9f:54: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:38:14:4A:5F:20:69:EE:09:7E:E8:32:13:F0:BB:BE:EA:17:B9 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:78:6e:45:e1:b5:75:58:75:a7:2c:c6:f5:4b:9d:4d:3d:16: ba:0c:0f:24:e8:55:2c:0c:6e:ec:77:03:fd:71:35:48:8e:02: 42:f7:84:37:a5:df:96:8b:67:3e:20:d9:97:19:c4:bf:68:44: f5:d8:90:8e:d8:c1:77:ec:d0:12:d0:a2:c8:a4:49:97:e4:10: bd:51:5c:cc:73:d2:23:48:b4:38:60:13:0a:cc:24:0f:cc:76: 1d:8b:d3:92:fd:89:68:69:51:0a:7c:b0:b6:d7:9e:a3:56:7f: 46:b0:95:aa:32:85:d6:29:ca:7d:f6:46:75:d5:57:68:d4:e3: 92:54:d5:97:63:4b:ec:2f:e4:a5:f6:ad:eb:25:5d:6e:ef:4f: 05:e5:48:96:c4:b8:95:c0:0d:15:1a:e6:d5:23:73:92:8b:10: 50:a9:64:98:7d:27:44:e9:d2:a5:74:81:93:ca:fb:1b:9e:6a: be:16:a2:dc:a4:d8:a9:91:83:3b:91:d6:e1:cc:56:e5:c6:73: 63:9f:09:aa:f6:dd:11:47:26:d4:da:8a:ed:bc:e6:0d:b5:4b: 7c:db:11:0d:65:5a:b3:90:8f:44:76:27:9e:60:cc:26:f9:75: e0:ae:3d:6f:a8:d9:bd:30:54:ab:0d:98:98:35:b0:7f:78:3d: 2b:7e:1a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUxMDE5MDMxNDE3WhcNMjUxMDI2MDMxNDE3WjAYMRYwFAYD VQQDEw02OGY0NTc4OS0zMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHESmzuLvvXtBEzkB/XOC8bk7OGV7Nz8oh6aObMP4I6GaLX0StDCDnOHBS90 WaVjT/iipea08ngRK86oK/5GjF0Ztw9lTczZz4JRHaRwswyNXECnyzeahlOAseMf xwuNCiTAkLdHgEhFOktqv5UfPfALufWj0stDDvTR/9huHaUeg+MKzBmlflCxkZcW weWs2bzfdSzshWjwBUsQ6HaHjiXcHNGLmYjVHl2sOSnp/CGsSKtkLwGk1R0Kr3QM ELSDJxVWN57zDjM/kc8NzJmBqwgOud3aJNR4/6sZyPpb6b2w1sz+/pqxecFvdrUo bxI8K0ofGDfEdh3xUyYMn1RWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI+OBRK XyBp7gl+6DIT8Lu+6he5MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCneG5F4bV1WHWnLMb1S51NPRa6DA8k6FUsDG7sdwP9cTVIjgJC94Q3 pd+Wi2c+INmXGcS/aET12JCO2MF37NAS0KLIpEmX5BC9UVzMc9IjSLQ4YBMKzCQP zHYdi9OS/YloaVEKfLC2156jVn9GsJWqMoXWKcp99kZ11Vdo1OOSVNWXY0vsL+Sl 9q3rJV1u708F5UiWxLiVwA0VGubVI3OSixBQqWSYfSdE6dKldIGTyvsbnmq+FqLc pNipkYM7kdbhzFblxnNjnwmq9t0RRybU2ortvOYNtUt82xENZVqzkI9EdieeYMwm +XXgrj1vqNm9MFSrDZiYNbB/eD0rfhog -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:54 2025 by rpki-client