$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: Ard4+Wn2eXQUktgHZFC9hMQLwVw13NPXkMfvVl6g1wk= Subject key identifier: 4B:58:84:FE:05:C1:0B:CB:A3:33:68:63:4E:23:83:15:34:8C:8E:7A Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 0602 Signing time: Sun 19 Oct 2025 00:30:55 +0000 Manifest this update: Sun 19 Oct 2025 00:30:54 +0000 Manifest next update: Sun 26 Oct 2025 00:30:54 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: f4Jukbb9sw/liEwFBWqwSgsGJjHom3QciU5g8DFRnHg=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Oct 19 00:30:54 2025 GMT Not After : Oct 26 00:30:54 2025 GMT Subject: CN=68f4313f-8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:e1:a8:9d:b2:6e:89:db:41:3f:58:b1:62: 13:4f:5b:55:de:4b:85:86:21:1d:fc:86:1f:73:c9: 14:6b:96:d9:a4:20:e6:48:14:60:74:6b:7b:37:c4: b5:08:6c:d8:db:45:3d:d9:99:7b:98:cf:43:97:e3: e8:11:cb:5f:b6:4f:b4:85:8f:5e:6c:4e:54:d1:44: 55:a2:d4:2e:a7:05:96:5a:23:7f:11:94:58:0d:28: a6:53:16:97:aa:36:77:ce:10:ac:fc:03:b0:ea:24: 18:68:c9:a3:26:e7:d0:45:bd:ae:95:1d:d9:c7:40: b1:12:1a:ab:bd:1f:ad:bb:c9:62:3c:14:4e:82:3e: b9:e8:72:35:91:12:ed:19:5a:2e:f1:4e:38:c0:b5: af:ad:7f:07:53:a9:0c:81:ea:bf:0c:ef:e8:23:66: 2e:de:d9:28:28:30:38:be:17:1b:a1:bd:3c:6a:cb: 19:fd:06:b6:80:1a:0a:65:c6:6f:77:ab:cc:33:37: 33:64:b3:ed:20:7d:f1:ce:1c:55:8d:8e:df:7e:cd: 2d:f6:9c:19:aa:fd:cb:34:a5:70:eb:f5:83:65:e8: e6:f1:ef:01:d6:d3:38:19:f7:74:e7:c0:cc:88:e6: a0:d7:b7:db:40:cc:a9:4d:d8:0e:85:56:6e:8b:16: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:84:FE:05:C1:0B:CB:A3:33:68:63:4E:23:83:15:34:8C:8E:7A X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:8f:60:d3:ea:20:7a:78:e3:31:6e:f2:d3:0f:a0:dd:aa:60: cf:69:11:08:e5:87:05:28:67:14:4d:29:c1:81:42:6d:12:6f: 89:31:00:c1:bf:2f:22:7b:93:db:15:5b:dd:9e:7e:47:49:87: c7:e9:96:74:7e:d7:22:8e:9b:49:e5:7e:01:9b:f3:2a:7e:ef: ca:3a:6d:c1:be:18:74:73:50:cb:a3:80:df:ba:b4:ae:14:80: 4a:7d:53:ff:e1:cd:5a:89:32:33:fb:07:c6:96:b8:c4:b2:e4: c9:d7:f1:b4:85:c1:a8:59:d1:6a:2a:9a:7e:dc:d1:19:48:1a: fe:8d:0e:6a:1f:61:82:ef:af:25:eb:c3:94:d9:dd:31:93:66: 87:9e:30:c8:1c:d9:f2:c9:bd:0c:73:bc:2e:db:19:59:8f:98: 40:04:44:83:18:d3:d6:94:d0:46:70:a6:76:c1:62:82:f2:2b: 15:28:1a:d6:ba:be:19:6d:98:7e:61:81:9a:50:10:8b:40:54: b6:48:88:be:df:dc:e6:0b:c4:cf:25:24:60:bc:c1:2b:c1:92: eb:85:84:72:d7:a5:b3:2b:f6:6b:81:04:94:96:5b:ea:3c:5e: d2:ea:9a:ba:e8:7a:e3:ea:37:82:6d:b9:65:8d:dc:c6:4f:1f: c7:8e:96:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUxMDE5MDAzMDU0WhcNMjUxMDI2MDAzMDU0WjAYMRYwFAYD VQQDEw02OGY0MzEzZi04ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gvhqJ2ybonbQT9YsWITT1tV3kuFhiEd/IYfc8kUa5bZpCDmSBRgdGt7N8S1 CGzY20U92Zl7mM9Dl+PoEctftk+0hY9ebE5U0URVotQupwWWWiN/EZRYDSimUxaX qjZ3zhCs/AOw6iQYaMmjJufQRb2ulR3Zx0CxEhqrvR+tu8liPBROgj656HI1kRLt GVou8U44wLWvrX8HU6kMgeq/DO/oI2Yu3tkoKDA4vhcbob08assZ/Qa2gBoKZcZv d6vMMzczZLPtIH3xzhxVjY7ffs0t9pwZqv3LNKVw6/WDZejm8e8B1tM4Gfd058DM iOag17fbQMypTdgOhVZuixZcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtYhP4F wQvLozNoY04jgxU0jI56MB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoj2DT6iB6eOMxbvLTD6DdqmDPaREI5YcFKGcUTSnBgUJtEm+JMQDB vy8ie5PbFVvdnn5HSYfH6ZZ0ftcijptJ5X4Bm/Mqfu/KOm3Bvhh0c1DLo4DfurSu FIBKfVP/4c1aiTIz+wfGlrjEsuTJ1/G0hcGoWdFqKpp+3NEZSBr+jQ5qH2GC768l 68OU2d0xk2aHnjDIHNnyyb0Mc7wu2xlZj5hABESDGNPWlNBGcKZ2wWKC8isVKBrW ur4ZbZh+YYGaUBCLQFS2SIi+39zmC8TPJSRgvMErwZLrhYRy16WzK/ZrgQSUllvq PF7S6pq66Hrj6jeCbblljdzGTx/HjpZ7 -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:52 2025 by rpki-client