$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: BY8HAsWehhbKEL2Zi5RHHYkpTEmbmla3UP3qtfzTiLQ= Subject key identifier: F9:72:9E:DA:D0:7F:18:A4:BE:B1:CA:82:3E:BE:80:E9:32:8B:19:33 Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 3B Signing time: Sun 19 Oct 2025 11:00:41 +0000 Manifest this update: Sun 19 Oct 2025 11:00:40 +0000 Manifest next update: Sun 26 Oct 2025 11:00:40 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: /1K64KJdCOTflAKZfGOKTM2lO6KeZQB98gbbZrtbbjk=) 2: C6047A6481A111F08CBC9741C4F9AE02.roa (hash: bgbW7xHV4YTAXMUDumTfB3UuK2rCir4YSQMN24IIGfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Oct 19 11:00:40 2025 GMT Not After : Oct 26 11:00:40 2025 GMT Subject: CN=68f4c4d9-9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:05:3d:cb:91:b6:c3:e7:d5:dd:31:74:49: 35:6a:20:19:85:8c:fb:22:ff:c7:58:cd:4d:b2:da: 75:93:88:17:e0:1a:be:5b:3b:2b:d2:9f:6e:c3:c2: 15:97:19:65:23:5d:5b:23:bc:08:af:2a:b4:99:83: 2a:33:1b:d4:c1:4c:5b:63:36:dd:a1:33:bb:11:ed: 00:0b:4e:23:30:f8:5a:8c:9e:fa:73:a1:7c:5a:9a: 52:c5:58:4d:2b:3a:46:73:69:57:bd:65:4d:2f:62: 4f:15:9d:04:c4:05:2c:82:15:e6:4f:03:ec:b9:b5: b5:36:a0:39:5a:66:81:94:63:9c:d3:29:10:26:58: 29:fc:f9:78:d9:31:f2:d1:b2:86:da:fa:93:67:a5: 4c:a9:07:96:0e:37:91:84:54:31:09:7d:52:5b:1c: 42:4f:9b:6c:5b:fe:cd:3a:99:f7:21:fb:32:6a:01: 79:fc:22:85:92:39:00:64:43:5f:90:a3:0d:6d:80: 89:ea:a9:59:1a:9e:21:52:09:bd:ef:da:e3:d4:e7: aa:cf:22:c8:1a:11:89:ac:6a:30:c9:a1:84:5f:ca: e7:8d:79:c6:98:6d:bb:36:4d:ba:ac:11:f8:41:3f: 22:27:23:4f:91:06:67:d9:46:ae:5d:fb:89:bd:87: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:72:9E:DA:D0:7F:18:A4:BE:B1:CA:82:3E:BE:80:E9:32:8B:19:33 X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ae:70:48:3e:b3:09:a2:39:79:21:4c:64:45:7c:74:1e:bc: b2:a6:0d:0d:92:a4:e4:5c:72:02:38:95:7b:51:7b:6b:69:f5: b0:e2:19:b5:1d:dd:64:a1:81:0e:7d:56:3a:12:e2:fb:97:c7: ed:5c:81:54:f9:fb:b9:86:dd:24:fc:cc:ae:cc:23:1f:d6:fd: 40:11:53:5b:7f:13:e9:7d:43:1c:f1:47:75:0b:11:1a:23:3e: 7a:b1:f3:eb:33:2e:91:67:44:0f:41:6d:5d:08:86:8e:f2:d1: bf:17:16:cb:ed:32:37:b4:1e:22:3b:a2:fb:4d:8f:5e:9c:e2: 44:26:8e:9f:c6:2d:c2:76:a4:68:33:22:85:64:68:8c:c7:99: 68:40:2d:3d:6c:b1:6a:61:44:8e:48:30:7a:4d:3e:5d:08:a7: f0:d2:7a:1f:09:a1:f1:f7:b4:c7:19:57:39:7d:01:8f:ae:85: e0:40:10:5a:ac:70:4a:4e:52:74:37:a5:22:38:f3:d1:fa:d9: a6:31:ad:92:a9:c1:75:52:40:b6:72:06:81:1a:30:1d:02:d4: 81:66:fe:1b:8a:f3:b9:ad:2d:f3:66:b1:42:28:60:9d:0c:d6: 9a:1d:89:d6:ae:53:31:9c:fe:d5:7f:e9:9c:ce:eb:48:09:05: 9c:ca:7e:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTEwMTkxMTAwNDBaFw0yNTEwMjYxMTAwNDBaMBgxFjAUBgNV BAMTDTY4ZjRjNGQ5LTljZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+0QU9y5G2w+fV3TF0STVqIBmFjPsi/8dYzU2y2nWTiBfgGr5bOyvSn27DwhWX GWUjXVsjvAivKrSZgyozG9TBTFtjNt2hM7sR7QALTiMw+FqMnvpzoXxamlLFWE0r OkZzaVe9ZU0vYk8VnQTEBSyCFeZPA+y5tbU2oDlaZoGUY5zTKRAmWCn8+XjZMfLR soba+pNnpUypB5YON5GEVDEJfVJbHEJPm2xb/s06mfch+zJqAXn8IoWSOQBkQ1+Q ow1tgInqqVkaniFSCb3v2uPU56rPIsgaEYmsajDJoYRfyueNecaYbbs2TbqsEfhB PyInI0+RBmfZRq5d+4m9h2+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+XKe2tB/ GKS+scqCPr6A6TKLGTMwHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJyucEg+swmiOXkhTGRFfHQevLKmDQ2SpORccgI4lXtRe2tp9bDiGbUd 3WShgQ59VjoS4vuXx+1cgVT5+7mG3ST8zK7MIx/W/UARU1t/E+l9QxzxR3ULERoj Pnqx8+szLpFnRA9BbV0Iho7y0b8XFsvtMje0HiI7ovtNj16c4kQmjp/GLcJ2pGgz IoVkaIzHmWhALT1ssWphRI5IMHpNPl0Ip/DSeh8JofH3tMcZVzl9AY+uheBAEFqs cEpOUnQ3pSI489H62aYxrZKpwXVSQLZyBoEaMB0C1IFm/huK87mtLfNmsUIoYJ0M 1podidauUzGc/tV/6ZzO60gJBZzKfsA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:46 2025 by rpki-client