$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: SUjUfv9xgJpWdmnGGpIu8TdU3DgsKpOXK61c1D2y910= Subject key identifier: 4F:DA:CF:7E:04:ED:23:54:E5:FD:CB:0C:A5:FE:0F:D6:B7:8C:01:E1 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 014C Signing time: Sun 19 Oct 2025 06:56:34 +0000 Manifest this update: Sun 19 Oct 2025 06:56:33 +0000 Manifest next update: Sun 26 Oct 2025 06:56:32 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: ZwQONtU0+0QRNZheaVxmAsaA0TzoFbxIbw/OOFQoh2Y=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Oct 19 06:56:33 2025 GMT Not After : Oct 26 06:56:32 2025 GMT Subject: CN=68f48ba1-a6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:9d:05:55:3c:7b:49:bc:ad:37:07:7a:76: 62:d0:fa:34:17:bd:93:21:34:4b:d3:5d:94:65:53: 0d:ef:3c:71:ec:7c:f9:e6:f3:94:1e:f7:2e:98:f4: 80:ac:26:48:67:dc:d1:13:95:04:4c:b7:79:03:81: b7:c5:d7:b2:26:62:69:20:03:ed:e1:27:8a:64:9f: de:49:61:6f:3d:40:e4:93:04:bf:3f:39:5c:e4:86: eb:6f:b5:40:8e:d0:77:e5:df:4a:52:91:62:e4:ee: 0f:ed:de:09:fe:33:4c:e7:61:e6:33:71:80:49:bd: f7:ff:da:e2:1f:bc:50:fa:04:51:cd:1c:b3:37:01: 11:5f:3a:6b:7b:4b:46:d4:7f:79:f7:08:90:6a:c0: 52:40:dd:a8:a3:28:b9:f7:b6:6c:16:24:61:a8:ab: 15:f6:26:6e:84:07:49:23:46:11:61:bb:e1:38:cd: 41:7e:78:49:c9:9b:ab:ae:ce:53:2d:bb:3d:22:af: 72:1e:cf:c6:95:ad:45:d7:e3:d2:0a:3e:06:6f:76: 3d:e8:5c:58:22:a0:2e:25:cc:bf:64:53:17:78:78: d2:b0:14:e4:04:b0:5f:da:3c:97:e8:2f:71:a0:ca: c7:fb:36:eb:40:29:98:7b:ce:f5:95:fd:40:29:0a: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:CF:7E:04:ED:23:54:E5:FD:CB:0C:A5:FE:0F:D6:B7:8C:01:E1 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2b:c7:f8:0a:c4:28:6b:9f:50:cf:62:72:cd:f2:ba:de:e9: 6b:c2:55:fd:0e:62:83:7f:3d:7d:05:b0:34:5f:e1:2b:51:cf: 4e:a7:ce:2c:98:c6:04:e1:45:e5:ca:c1:90:d1:b0:5a:dc:bc: d2:58:cc:57:07:27:d7:f2:56:c9:4a:cf:6e:b5:38:07:35:76: 3e:a9:0f:f0:0b:ad:d5:4f:db:d7:42:7a:01:23:12:ca:fc:00: 20:0d:df:8f:6b:61:14:ff:e0:38:e5:68:3c:d7:6a:fd:fb:73: fc:f4:37:08:7c:db:0c:2b:ea:8e:4c:5c:5d:a5:ad:f5:ec:3a: d2:4c:5e:d8:2a:e3:8b:a4:58:46:e7:73:11:63:bc:fa:9c:79: 74:2a:15:8e:c1:57:79:6b:81:e0:62:31:9d:ee:f5:02:ca:22: d9:84:d5:9e:f3:ad:a7:67:d4:f9:bb:fa:d6:a2:c4:41:ae:8a: da:67:d1:ae:40:ea:f9:43:de:e7:e2:98:4b:ba:81:cf:c1:07: 36:a8:90:09:c2:11:de:fe:44:0b:8e:b4:cc:67:26:43:9d:75: 5e:ae:49:84:db:94:51:fd:d5:97:13:19:80:41:b9:3c:f5:f4: 4a:fe:0b:02:2f:0d:99:4c:10:55:77:aa:8f:c3:c9:b8:3b:4f: 17:11:d9:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUxMDE5MDY1NjMzWhcNMjUxMDI2MDY1NjMyWjAYMRYwFAYD VQQDEw02OGY0OGJhMS1hNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd2dBVU8e0m8rTcHenZi0Po0F72TITRL012UZVMN7zxx7Hz55vOUHvcumPSA rCZIZ9zRE5UETLd5A4G3xdeyJmJpIAPt4SeKZJ/eSWFvPUDkkwS/Pzlc5Ibrb7VA jtB35d9KUpFi5O4P7d4J/jNM52HmM3GASb33/9riH7xQ+gRRzRyzNwERXzpre0tG 1H959wiQasBSQN2ooyi597ZsFiRhqKsV9iZuhAdJI0YRYbvhOM1BfnhJyZurrs5T Lbs9Iq9yHs/Gla1F1+PSCj4Gb3Y96FxYIqAuJcy/ZFMXeHjSsBTkBLBf2jyX6C9x oMrH+zbrQCmYe871lf1AKQpc2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/az34E 7SNU5f3LDKX+D9a3jAHhMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChK8f4CsQoa59Qz2JyzfK63ulrwlX9DmKDfz19BbA0X+ErUc9Op84s mMYE4UXlysGQ0bBa3LzSWMxXByfX8lbJSs9utTgHNXY+qQ/wC63VT9vXQnoBIxLK /AAgDd+Pa2EU/+A45Wg812r9+3P89DcIfNsMK+qOTFxdpa317DrSTF7YKuOLpFhG 53MRY7z6nHl0KhWOwVd5a4HgYjGd7vUCyiLZhNWe862nZ9T5u/rWosRBroraZ9Gu QOr5Q97n4phLuoHPwQc2qJAJwhHe/kQLjrTMZyZDnXVerkmE25RR/dWXExmAQbk8 9fRK/gsCLw2ZTBBVd6qPw8m4O08XEdkt -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:29 2025 by rpki-client