$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: ew54HIue9vNYg+BgEoQnLj0GOqmeOqBDiu1NV05uz4E= Subject key identifier: 4A:B1:E0:0F:5A:7F:06:55:59:A8:39:3F:07:C7:92:85:9D:1E:E3:55 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0CE1 Signing time: Sat 18 Oct 2025 18:48:25 +0000 Manifest this update: Sat 18 Oct 2025 18:48:25 +0000 Manifest next update: Sat 25 Oct 2025 18:48:25 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: gNmnb+RFL8O3sSTabsx1z8NIwsMp8J5NsTkV/pAyF5k=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Oct 18 18:48:25 2025 GMT Not After : Oct 25 18:48:25 2025 GMT Subject: CN=68f3e0f9-86c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:d1:80:59:1d:d5:1c:bc:52:2c:89:dc:9b: 60:c2:a3:07:5e:13:2b:7d:54:d0:0f:38:d5:7f:b2: 08:a0:82:3c:22:42:85:f0:93:75:8f:e2:f7:45:82: 84:a5:15:88:67:51:02:9d:da:bc:bd:58:6b:91:85: 3b:ea:48:b4:8c:ce:e2:9a:c1:23:c5:16:70:87:25: 3c:9f:04:18:b1:ae:0b:c3:0d:14:35:9a:d4:e6:48: 0a:44:3d:3a:2e:11:fb:60:66:3f:80:db:c0:58:94: 5d:23:9f:e1:f8:5f:71:fa:57:cd:fa:db:96:b5:02: 82:25:d9:89:7d:a3:ee:03:59:fb:61:9e:5c:a6:e0: 65:ae:79:fd:06:d3:0d:f8:8c:45:6d:52:7c:f2:f9: 08:e3:9b:38:02:48:f9:09:69:83:1e:15:34:7d:58: 55:ec:31:f1:0b:8d:14:9f:b7:cc:8f:66:08:cf:93: d6:7f:2c:b3:4f:44:7b:11:9d:80:f9:12:06:97:8d: 07:31:af:7e:d3:a5:b2:e7:e4:4d:c8:38:f2:17:93: 47:e8:03:29:1d:f0:c1:57:df:11:21:34:e8:53:c4: 0b:ac:dc:b2:7a:e3:8f:59:fe:1b:77:7d:95:6e:b2: 8d:05:8c:f8:c8:09:19:1e:29:e1:01:6b:5a:c9:54: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:E0:0F:5A:7F:06:55:59:A8:39:3F:07:C7:92:85:9D:1E:E3:55 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a9:55:57:82:a4:64:aa:ac:55:c9:f1:cf:b7:d5:f7:95:18: d7:04:54:97:c7:ef:ae:76:70:79:b2:9e:26:2a:0a:d0:d8:d3: 8a:29:65:e9:38:1d:82:a0:a8:16:7a:37:c5:5e:e4:6f:b1:6a: b0:a8:f9:21:86:78:c4:81:2d:ef:1e:55:95:f2:b0:5e:34:fa: 1c:6a:95:e4:b8:29:24:9e:bb:f1:4b:57:ae:4e:3b:7b:5b:b0: bd:48:fe:3b:e3:62:bc:a0:75:14:12:23:b0:74:bd:b1:4b:51: 53:d4:49:0f:92:97:69:54:84:6a:76:00:a4:64:cf:4f:1a:f9: a7:52:de:f2:1e:d1:ea:95:51:ff:eb:39:62:5f:42:ba:28:58: 34:58:3f:7a:87:e2:db:3f:a3:fa:4c:9d:40:be:b0:2b:b1:4d: 09:78:92:ca:66:bd:7e:1d:25:89:93:c9:8d:8f:97:1b:1f:82: ea:d0:49:ea:8b:80:4a:8a:cf:c3:6b:80:fd:39:97:28:a5:e6: 93:aa:ee:10:25:05:5b:4f:3d:32:05:3c:61:13:7e:72:4f:52: 54:bd:92:a9:d3:67:c8:bf:48:8c:00:2f:11:31:24:3b:5b:de: a3:f0:8e:7e:40:cf:1b:d7:66:b3:f3:1b:11:97:23:5a:32:09: 67:57:a7:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUxMDE4MTg0ODI1WhcNMjUxMDI1MTg0ODI1WjAYMRYwFAYD VQQDEw02OGYzZTBmOS04NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrDRgFkd1Ry8UiyJ3JtgwqMHXhMrfVTQDzjVf7IIoII8IkKF8JN1j+L3RYKE pRWIZ1ECndq8vVhrkYU76ki0jM7imsEjxRZwhyU8nwQYsa4Lww0UNZrU5kgKRD06 LhH7YGY/gNvAWJRdI5/h+F9x+lfN+tuWtQKCJdmJfaPuA1n7YZ5cpuBlrnn9BtMN +IxFbVJ88vkI45s4Akj5CWmDHhU0fVhV7DHxC40Un7fMj2YIz5PWfyyzT0R7EZ2A +RIGl40HMa9+06Wy5+RNyDjyF5NH6AMpHfDBV98RITToU8QLrNyyeuOPWf4bd32V brKNBYz4yAkZHinhAWtayVSUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqx4A9a fwZVWag5PwfHkoWdHuNVMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDqVVXgqRkqqxVyfHPt9X3lRjXBFSXx++udnB5sp4mKgrQ2NOKKWXp OB2CoKgWejfFXuRvsWqwqPkhhnjEgS3vHlWV8rBeNPocapXkuCkknrvxS1euTjt7 W7C9SP4742K8oHUUEiOwdL2xS1FT1EkPkpdpVIRqdgCkZM9PGvmnUt7yHtHqlVH/ 6zliX0K6KFg0WD96h+LbP6P6TJ1AvrArsU0JeJLKZr1+HSWJk8mNj5cbH4Lq0Enq i4BKis/Da4D9OZcopeaTqu4QJQVbTz0yBTxhE35yT1JUvZKp02fIv0iMAC8RMSQ7 W96j8I5+QM8b12az8xsRlyNaMglnV6fA -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:25 2025 by rpki-client