$ rpki-client -vvf rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft File: TShKyE8O4JX9a-sO2MZfx15p__g.mft (raw, json) Hash identifier: SQQpaZdHNV8NHIugoSK2ptO4ZpCY6AwMzJNfPxyQQ14= Subject key identifier: C5:68:3B:D5:6A:C6:12:49:E3:72:8A:5D:8C:4F:7C:A4:B0:6A:F5:39 Authority key identifier: 4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8 Certificate issuer: /CN=A915542D/serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft Manifest number: 07A2 Signing time: Sat 18 Oct 2025 22:43:23 +0000 Manifest this update: Sat 18 Oct 2025 22:43:23 +0000 Manifest next update: Sat 25 Oct 2025 22:43:23 +0000 Files and hashes: 1: TShKyE8O4JX9a-sO2MZfx15p__g.crl (hash: IEtUzSR49U0kXE7K8U2Tezia0DI7HHXS9grDsna9Iu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915542D, serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8 Validity Not Before: Oct 18 22:43:23 2025 GMT Not After : Oct 25 22:43:23 2025 GMT Subject: CN=68f4180b-07c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:7a:0c:16:12:4d:0e:8f:65:4e:45:30:04: c3:65:c5:20:e5:1c:5e:e6:a7:af:01:63:ae:55:b2: 3b:c7:5f:14:54:0b:e1:49:b2:2c:d2:d6:da:18:79: 91:c3:5f:87:8b:ef:6c:66:0a:2e:1a:c6:7f:01:1a: f7:14:b4:84:53:1f:5b:19:dc:ca:e9:23:e0:33:5c: b9:36:66:49:25:d5:76:e8:88:b6:86:3c:c2:9a:f8: 1e:09:48:4b:42:4d:08:04:e0:ed:b5:79:ba:7d:60: 7d:d8:2b:09:eb:48:13:10:16:5f:d5:db:44:39:c4: cd:d3:c9:3c:68:19:c0:0a:48:99:da:05:5a:2d:d5: c9:df:88:8e:f5:33:18:8d:97:c7:ba:56:b8:9f:4b: 4a:c6:da:77:0d:fd:de:01:39:ec:ab:fd:49:a4:ff: b7:32:9f:a8:6d:57:41:67:35:6b:ab:54:0b:62:45: 60:c6:e6:7a:61:82:4c:e1:06:aa:cf:b9:ed:0b:fe: ae:c2:f2:1b:47:f4:9c:49:7a:58:e4:83:7d:2b:86: 7a:6e:57:8a:49:3b:7d:67:b6:ff:59:15:f5:32:2f: 47:19:03:e4:96:d9:59:3b:ea:c2:39:80:07:ec:cb: 8d:52:70:31:7a:27:fc:15:ec:d4:3d:12:1e:dc:39: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:3B:D5:6A:C6:12:49:E3:72:8A:5D:8C:4F:7C:A4:B0:6A:F5:39 X509v3 Authority Key Identifier: keyid:4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:60:7a:28:19:e8:4b:68:87:f0:5b:e0:d4:48:13:e0:33:43: 32:22:e0:b8:0d:63:20:70:c6:7e:f7:a3:d6:e5:a2:5b:f3:4d: 51:16:cf:95:91:65:93:c4:be:34:8d:b8:ea:c7:7e:6a:9c:83: cb:e7:a0:2a:e7:31:ac:4f:d6:f1:07:f3:23:ac:88:7e:93:4b: 4b:30:cd:4b:63:ff:bc:61:7e:f7:dd:f8:42:08:40:98:50:85: 15:1e:37:2c:9a:a7:29:7a:cc:8b:b4:6c:7d:21:04:f5:ad:5c: cb:8e:70:75:aa:10:8f:3b:31:05:2a:d3:60:50:b5:b5:39:a0: 3e:99:64:22:cc:0f:87:a3:4e:9e:7e:88:9e:8c:5c:e9:a4:38: f6:68:48:32:85:e6:8c:87:7c:a9:6a:ad:8c:22:05:92:33:5a: 57:09:a6:be:11:1a:f3:93:73:6e:c8:c8:47:fa:ec:6e:57:34: ad:a1:f7:04:dd:eb:5c:d6:0a:f3:36:37:6b:ae:c4:c9:27:32: 51:67:5e:cd:13:75:c3:4c:9c:56:54:e0:81:d6:b8:ad:11:ff: b1:01:25:a9:f4:bb:e4:2d:7d:67:3a:2c:37:c0:96:26:9e:b8: 82:e6:03:99:b8:9f:52:0e:9e:5a:0e:95:e9:47:6a:80:45:9a: f1:4e:6f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0MkQxMTAvBgNVBAUTKDREMjg0QUM4NEYwRUUwOTVGRDZCRUIwRUQ4QzY1RkM3 NUU2OUZGRjgwHhcNMjUxMDE4MjI0MzIzWhcNMjUxMDI1MjI0MzIzWjAYMRYwFAYD VQQDEw02OGY0MTgwYi0wN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcF6DBYSTQ6PZU5FMATDZcUg5Rxe5qevAWOuVbI7x18UVAvhSbIs0tbaGHmR w1+Hi+9sZgouGsZ/ARr3FLSEUx9bGdzK6SPgM1y5NmZJJdV26Ii2hjzCmvgeCUhL Qk0IBODttXm6fWB92CsJ60gTEBZf1dtEOcTN08k8aBnACkiZ2gVaLdXJ34iO9TMY jZfHula4n0tKxtp3Df3eATnsq/1JpP+3Mp+obVdBZzVrq1QLYkVgxuZ6YYJM4Qaq z7ntC/6uwvIbR/ScSXpY5IN9K4Z6bleKSTt9Z7b/WRX1Mi9HGQPkltlZO+rCOYAH 7MuNUnAxeif8FezUPRIe3Dn0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVoO9Vq xhJJ43KKXYxPfKSwavU5MB8GA1UdIwQYMBaAFE0oSshPDuCV/WvrDtjGX8deaf/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQyRC8wRDFFQzkyQzFG RTExMUVCOTlDMDFDNjBDNEY5QUUwMi9UU2hLeUU4TzRKWDlhLXNPMk1aZngxNXBf X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTaEt5RThPNEpYOWEtc08yTVpmeDE1cF9fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQyRC8wRDFFQzkyQzFGRTExMUVCOTlDMDFDNjBDNEY5QUUwMi9UU2hLeUU4TzRK WDlhLXNPMk1aZngxNXBfX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyYHooGehLaIfwW+DUSBPgM0MyIuC4DWMgcMZ+96PW5aJb801RFs+V kWWTxL40jbjqx35qnIPL56Aq5zGsT9bxB/MjrIh+k0tLMM1LY/+8YX733fhCCECY UIUVHjcsmqcpesyLtGx9IQT1rVzLjnB1qhCPOzEFKtNgULW1OaA+mWQizA+Ho06e foiejFzppDj2aEgyheaMh3ypaq2MIgWSM1pXCaa+ERrzk3NuyMhH+uxuVzStofcE 3etc1grzNjdrrsTJJzJRZ17NE3XDTJxWVOCB1ritEf+xASWp9LvkLX1nOiw3wJYm nriC5gOZuJ9SDp5aDpXpR2qARZrxTm9g -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:25 2025 by rpki-client