$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft File: tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json) Hash identifier: vNUTa7Y+TxRBELeht1t2z9wyKJEyD76pBkt1+x3C02s= Subject key identifier: 6C:02:C5:A3:DE:D9:58:4D:D5:08:73:4B:A8:09:80:07:CB:F8:17:BA Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft Manifest number: 07AE Signing time: Sat 18 Oct 2025 22:39:41 +0000 Manifest this update: Sat 18 Oct 2025 22:39:41 +0000 Manifest next update: Sat 25 Oct 2025 22:39:41 +0000 Files and hashes: 1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: SOj/daoElzc4Iqb+32TvAj7KrVFGvf7BhyhYPegtRsA=) 2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: 3c9SajVW3rwhjEgpsfXUDuJrEWYZ09Q/Vkb+t9fja5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB Validity Not Before: Oct 18 22:39:41 2025 GMT Not After : Oct 25 22:39:41 2025 GMT Subject: CN=68f4172d-d258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:83:fd:00:34:98:1d:ae:4c:13:e5:d8:58: 4c:84:40:d0:c9:fb:0b:a6:1a:4b:bd:04:df:3a:4b: d4:7b:af:0d:27:0b:a3:1e:e0:dc:5a:52:6d:56:b2: 12:22:57:3d:1c:56:99:5b:0a:ab:e8:ee:eb:d0:c0: d1:54:94:a0:de:c2:9d:dc:a1:c5:85:f6:ea:50:5e: 72:d7:82:2f:96:d1:6e:ca:cd:24:62:90:83:50:92: a0:54:5b:46:b5:8f:60:ba:b7:a8:76:04:2c:20:58: 3e:e2:ed:5c:3e:1c:8c:d7:88:48:75:d7:7b:66:47: 57:e6:94:b1:84:26:4c:06:23:5e:d8:60:f1:4f:cb: b4:34:53:dc:b8:4d:28:10:17:0f:37:28:70:5c:49: da:6f:76:2f:b7:ac:18:98:0a:c9:86:66:49:cb:e3: 3c:76:6d:6f:c0:49:48:19:1c:ea:4f:bd:8f:d1:d6: bd:50:9f:75:9d:53:a3:65:e5:d0:a7:42:cd:3a:d5: 39:74:19:2b:e6:9f:1b:15:70:a6:d1:c2:aa:86:a5: 52:c0:88:24:bc:04:0a:3c:62:20:4d:c4:e6:3e:21: c8:5c:e4:fa:c1:72:d8:53:8c:cb:b7:c3:c7:e6:d0: db:60:d6:02:d4:e1:1a:ad:16:e3:4f:3f:f7:67:22: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:C5:A3:DE:D9:58:4D:D5:08:73:4B:A8:09:80:07:CB:F8:17:BA X509v3 Authority Key Identifier: keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c0:35:06:c3:85:c5:ef:f8:2f:2e:44:1d:9e:1d:ad:87:2e: eb:ac:98:4f:c4:22:b8:e7:23:a9:3d:16:5a:8b:88:7e:22:ad: 7f:d4:fe:a4:ec:46:15:36:f2:94:a1:45:a2:dc:b8:96:d1:0d: c3:72:f1:cb:6e:4c:3e:dd:85:38:fa:27:eb:14:9f:92:09:bc: 9f:a7:30:8e:ee:6c:f7:1c:51:a5:93:89:86:47:be:12:aa:9d: 9e:0b:e3:50:38:48:8a:0c:6a:eb:01:3b:2d:c2:48:3f:0b:a4: 3d:c1:6c:bb:71:08:a0:ca:43:90:b4:d0:b7:57:ff:ae:ea:4c: d8:57:0e:68:24:d0:bf:f0:6d:fa:88:e3:8f:72:43:b4:8b:fe: 1f:10:04:67:11:54:1e:f7:3f:f6:09:b9:be:8a:3c:97:eb:7e: 47:35:6e:1b:c6:af:59:ad:9e:c7:ff:9d:c4:5c:72:15:ce:3c: 4f:62:73:b5:d6:ad:8b:e4:bb:2d:9a:00:b2:52:11:b6:10:ea: 92:91:9e:32:d2:dd:e1:69:41:59:78:73:ee:b0:fb:7e:81:01: 10:d9:40:2e:1b:59:ee:e8:57:99:3a:35:97:b5:39:6d:c6:8c: 04:6c:d8:70:7b:96:a7:60:85:94:2f:96:2a:35:9a:af:eb:9b: 05:18:b6:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzMkExMTAvBgNVBAUTKEI0RDQxNTg5MzI1NjcxNjY0QjJDNjA0RjEyREUwNDc1 N0UyRUNDREIwHhcNMjUxMDE4MjIzOTQxWhcNMjUxMDI1MjIzOTQxWjAYMRYwFAYD VQQDEw02OGY0MTcyZC1kMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV6D/QA0mB2uTBPl2FhMhEDQyfsLphpLvQTfOkvUe68NJwujHuDcWlJtVrIS Ilc9HFaZWwqr6O7r0MDRVJSg3sKd3KHFhfbqUF5y14IvltFuys0kYpCDUJKgVFtG tY9gureodgQsIFg+4u1cPhyM14hIddd7ZkdX5pSxhCZMBiNe2GDxT8u0NFPcuE0o EBcPNyhwXEnab3Yvt6wYmArJhmZJy+M8dm1vwElIGRzqT72P0da9UJ91nVOjZeXQ p0LNOtU5dBkr5p8bFXCm0cKqhqVSwIgkvAQKPGIgTcTmPiHIXOT6wXLYU4zLt8PH 5tDbYNYC1OEarRbjTz/3ZyKrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwCxaPe 2VhN1QhzS6gJgAfL+Be6MB8GA1UdIwQYMBaAFLTUFYkyVnFmSyxgTxLeBHV+Lszb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDMyQS9BNjEzRjU1QTFC NzUxMUVCOTgyNTQwMDlDNEY5QUUwMi90TlFWaVRKV2NXWkxMR0JQRXQ0RWRYNHV6 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROUVZpVEpXY1daTExHQlBFdDRFZFg0dXpOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDMyQS9BNjEzRjU1QTFCNzUxMUVCOTgyNTQwMDlDNEY5QUUwMi90TlFWaVRKV2NX WkxMR0JQRXQ0RWRYNHV6TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiwDUGw4XF7/gvLkQdnh2thy7rrJhPxCK45yOpPRZai4h+Iq1/1P6k 7EYVNvKUoUWi3LiW0Q3DcvHLbkw+3YU4+ifrFJ+SCbyfpzCO7mz3HFGlk4mGR74S qp2eC+NQOEiKDGrrATstwkg/C6Q9wWy7cQigykOQtNC3V/+u6kzYVw5oJNC/8G36 iOOPckO0i/4fEARnEVQe9z/2Cbm+ijyX635HNW4bxq9ZrZ7H/53EXHIVzjxPYnO1 1q2L5LstmgCyUhG2EOqSkZ4y0t3haUFZeHPusPt+gQEQ2UAuG1nu6FeZOjWXtTlt xowEbNhwe5anYIWUL5YqNZqv65sFGLbp -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:44 2025 by rpki-client