$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json) Hash identifier: BWNPgTts6POixdP02epKcF12bJx/NSAcdA+RoUPx/fg= Subject key identifier: B3:68:1F:AD:9E:93:92:EA:6F:0F:D0:16:67:6F:EF:BD:30:0D:8B:31 Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft Manifest number: 01B5 Signing time: Sun 19 Oct 2025 05:37:09 +0000 Manifest this update: Sun 19 Oct 2025 05:37:08 +0000 Manifest next update: Sun 26 Oct 2025 05:37:08 +0000 Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: wn/Ws/uuYx1g5wjTF7tyOaJaCYbSsWgI13aNsEg5vOQ=) 2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Validity Not Before: Oct 19 05:37:08 2025 GMT Not After : Oct 26 05:37:08 2025 GMT Subject: CN=68f47905-4563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:a9:3c:83:68:3d:3c:09:8c:7d:6d:0b:36: 4b:de:09:be:bc:08:d5:5d:cb:9c:0f:af:bb:2d:3d: 30:f7:cc:96:01:6a:a4:ea:bd:52:3b:f6:c8:63:02: db:ee:3a:99:79:2e:5a:98:11:1b:4f:c5:d7:49:d2: b9:9a:1e:65:71:1b:40:ee:20:7e:71:24:7d:ae:af: 91:c2:6f:5f:e6:31:8e:ca:50:ff:b3:77:91:0c:e0: a3:f1:75:23:2e:c4:d7:88:1a:cc:39:1a:77:7d:97: 62:fa:bc:f7:2d:e8:e1:3b:2f:9d:cd:78:f3:bc:ad: 54:f1:ee:85:df:e2:65:01:16:38:dc:f2:0b:ca:0a: e0:11:8a:bf:dd:66:7d:0b:85:f5:7d:30:9b:29:45: ed:42:2b:00:4c:27:68:9f:aa:d4:07:20:e5:db:7f: d6:c1:85:aa:4f:81:df:72:4b:12:ee:02:f9:56:85: 21:8d:fb:b9:6d:87:3d:fa:c5:35:0b:fd:68:e9:e5: 04:61:2d:8a:ce:11:58:99:72:59:4a:ca:4f:5d:55: ce:eb:e0:6d:ea:96:55:63:83:77:dd:e4:70:76:8f: 1b:7d:43:75:a9:a9:fe:04:bf:a2:f0:a1:14:09:19: 3b:ea:85:e8:b8:33:9d:e4:88:dc:b9:45:3e:e6:6c: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:68:1F:AD:9E:93:92:EA:6F:0F:D0:16:67:6F:EF:BD:30:0D:8B:31 X509v3 Authority Key Identifier: keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:54:cb:5d:03:17:90:54:a1:06:63:d1:d2:3d:da:b9:c8: 9a:14:6e:f1:2f:ce:98:3c:02:7b:91:95:f4:84:f8:06:61:9a: a3:92:dd:cf:33:dd:26:8c:27:73:22:f2:c3:e3:32:fb:4d:e8: 7a:50:76:f6:21:3e:89:83:19:f1:64:3a:8d:d9:6b:77:cd:9a: d2:a1:a4:df:13:fd:cd:1c:19:12:25:41:7e:88:dc:d3:64:55: be:1b:d1:3c:d2:43:6f:18:5e:c4:d2:a5:af:f5:58:45:86:0a: 94:3b:05:c4:4f:1e:c3:da:be:2d:b7:78:8c:a2:cc:1a:82:c9: c7:5b:83:de:40:59:9e:74:23:c9:3a:f9:3b:07:0b:17:88:17: 95:09:71:d9:64:d2:56:96:3d:80:49:10:a1:90:f1:26:23:1a: 34:64:b4:74:d4:95:07:85:18:04:01:6c:3c:bc:ca:b0:3c:52: e5:44:9f:84:4f:17:ac:f5:58:a7:fb:71:9c:8d:5c:fd:fc:2a: 9e:ca:da:21:1d:81:2f:af:a5:52:9f:7c:6e:a2:5c:bf:01:57: e6:08:de:f6:ca:72:ec:12:5d:5c:4c:66:b6:93:e6:8e:98:92: 2e:7d:98:10:5d:13:dd:86:cd:06:2c:94:a4:cc:6d:35:dd:ce: c5:01:53:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNzExMTAvBgNVBAUTKDRDRUVFRTZEMzY2M0MxM0ZEODJFOTMxREFDNjlGMTcw NDZGQzk5QjMwHhcNMjUxMDE5MDUzNzA4WhcNMjUxMDI2MDUzNzA4WjAYMRYwFAYD VQQDEw02OGY0NzkwNS00NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IWpPINoPTwJjH1tCzZL3gm+vAjVXcucD6+7LT0w98yWAWqk6r1SO/bIYwLb 7jqZeS5amBEbT8XXSdK5mh5lcRtA7iB+cSR9rq+Rwm9f5jGOylD/s3eRDOCj8XUj LsTXiBrMORp3fZdi+rz3LejhOy+dzXjzvK1U8e6F3+JlARY43PILygrgEYq/3WZ9 C4X1fTCbKUXtQisATCdon6rUByDl23/WwYWqT4HfcksS7gL5VoUhjfu5bYc9+sU1 C/1o6eUEYS2KzhFYmXJZSspPXVXO6+Bt6pZVY4N33eRwdo8bfUN1qan+BL+i8KEU CRk76oXouDOd5IjcuUU+5mwD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNoH62e k5Lqbw/QFmdv770wDYsxMB8GA1UdIwQYMBaAFEzu7m02Y8E/2C6THaxp8XBG/Jmz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI3MS8yODE0RjBERTEx QjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandUX1lMcE1kckdueGNFYjht Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RPN3ViVFpqd1RfWUxwTWRyR254Y0ViOG1iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI3MS8yODE0RjBERTExQjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandU X1lMcE1kckdueGNFYjhtYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU9VTLXQMXkFShBmPR0j3auciaFG7xL86YPAJ7kZX0hPgGYZqjkt3P M90mjCdzIvLD4zL7Teh6UHb2IT6JgxnxZDqN2Wt3zZrSoaTfE/3NHBkSJUF+iNzT ZFW+G9E80kNvGF7E0qWv9VhFhgqUOwXETx7D2r4tt3iMoswagsnHW4PeQFmedCPJ Ovk7BwsXiBeVCXHZZNJWlj2ASRChkPEmIxo0ZLR01JUHhRgEAWw8vMqwPFLlRJ+E Txes9Vin+3GcjVz9/CqeytohHYEvr6VSn3xuoly/AVfmCN72ynLsEl1cTGa2k+aO mJIufZgQXRPdhs0GLJSkzG013c7FAVP/ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:10 2025 by rpki-client