$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: ArJ/1aY9Vbfl1Pmd32vyx8wUB3V7NPneOOrlPcJLJBo= Subject key identifier: 19:BD:FE:4C:02:E6:C4:3D:4E:0A:0F:60:BD:E7:EC:58:5D:ED:F1:30 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 19BA Signing time: Sat 18 Oct 2025 18:09:33 +0000 Manifest this update: Sat 18 Oct 2025 18:09:32 +0000 Manifest next update: Sat 25 Oct 2025 18:09:32 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: a5uCcXut7iMdozfw5esuGvxkeBcVRiHXW1O0rnbJRLw=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Oct 18 18:09:32 2025 GMT Not After : Oct 25 18:09:32 2025 GMT Subject: CN=68f3d7dc-f683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:de:a5:e7:7a:dd:d7:25:05:c0:3d:cd:a6: d7:29:65:90:c6:7f:71:04:58:ab:6c:23:31:66:a3: 60:39:cb:af:b5:09:0f:bf:78:e6:c9:36:a5:36:60: c8:ac:68:37:0b:1e:52:e3:e4:3b:c6:d7:46:c1:41: 50:4c:b1:a4:de:b9:6a:a3:99:fb:39:d5:70:51:ff: 74:59:50:81:4f:bc:2e:22:c1:4d:b4:69:ab:52:b0: 9c:95:c8:82:bf:97:cb:09:f9:33:1d:d0:18:c2:8f: 5c:96:bd:80:3c:91:75:37:cf:6b:90:b4:8b:60:d4: fe:e3:e5:b5:a1:ff:b9:2b:9d:ba:70:46:e0:f0:28: fa:1d:68:e3:01:f5:ee:83:7b:d0:ac:ce:9e:69:7d: 52:11:95:f6:96:f8:d7:b4:84:04:7a:12:3e:df:f8: de:f1:2e:90:07:f3:d3:70:b3:24:28:9c:30:f9:96: a9:bc:3f:ac:51:18:6e:ed:52:08:0e:7a:f8:e2:46: e6:d4:49:d6:f8:62:77:b6:e7:ea:e7:54:ae:4e:6b: 66:df:5c:84:3e:5d:f2:af:11:16:92:e2:50:fe:b8: 5d:70:39:bf:b4:e2:56:ee:40:c2:e2:4e:9a:9a:fb: 71:b5:61:57:17:3b:22:04:65:49:f8:58:eb:d4:d4: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:FE:4C:02:E6:C4:3D:4E:0A:0F:60:BD:E7:EC:58:5D:ED:F1:30 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:85:b4:52:60:fb:d8:95:63:76:3e:39:8a:7d:1b:0c:d0:f4: 27:be:62:eb:c1:95:45:39:d1:94:ac:ee:78:5b:67:db:42:50: 11:1a:ca:d2:4b:dc:8a:bf:f8:74:1a:56:96:41:e4:f4:a8:57: b0:da:20:c6:af:2a:cc:e1:32:6b:5e:c9:2e:e0:30:da:1b:8d: a6:e2:8c:96:38:e9:54:7b:1e:bf:e4:e3:56:d3:8b:6c:7d:42: 2a:0e:cc:0b:9e:b0:db:aa:6c:99:35:9b:f4:01:00:86:b7:5f: 3b:bb:52:83:c5:c1:54:08:1d:d1:6a:64:14:35:a2:67:84:12: 45:89:98:37:32:09:82:6a:23:c8:f5:f7:f9:a2:dd:d0:2d:f1: e6:a0:f7:32:21:bf:f1:b9:dc:10:82:1d:b8:be:b1:2b:2b:7b: ab:b1:27:ac:74:05:ad:c3:f0:d4:e3:af:d6:29:f6:00:b7:4f: 83:61:af:90:8e:c2:49:e3:1e:df:93:ee:96:8e:9f:00:02:1c: 29:88:7d:45:56:87:fb:d3:98:5d:d2:06:db:78:ad:7e:fc:84: 54:d8:71:9a:43:aa:99:de:bb:46:c0:7d:24:91:99:9a:7f:a3: ab:b1:b4:e2:9d:aa:ab:47:00:89:0b:e6:64:a8:98:12:93:f0: f1:61:35:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUxMDE4MTgwOTMyWhcNMjUxMDI1MTgwOTMyWjAYMRYwFAYD VQQDEw02OGYzZDdkYy1mNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4zeped63dclBcA9zabXKWWQxn9xBFirbCMxZqNgOcuvtQkPv3jmyTalNmDI rGg3Cx5S4+Q7xtdGwUFQTLGk3rlqo5n7OdVwUf90WVCBT7wuIsFNtGmrUrCclciC v5fLCfkzHdAYwo9clr2APJF1N89rkLSLYNT+4+W1of+5K526cEbg8Cj6HWjjAfXu g3vQrM6eaX1SEZX2lvjXtIQEehI+3/je8S6QB/PTcLMkKJww+ZapvD+sURhu7VII Dnr44kbm1EnW+GJ3tufq51SuTmtm31yEPl3yrxEWkuJQ/rhdcDm/tOJW7kDC4k6a mvtxtWFXFzsiBGVJ+Fjr1NS2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm9/kwC 5sQ9TgoPYL3n7Fhd7fEwMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAhbRSYPvYlWN2PjmKfRsM0PQnvmLrwZVFOdGUrO54W2fbQlARGsrS S9yKv/h0GlaWQeT0qFew2iDGryrM4TJrXsku4DDaG42m4oyWOOlUex6/5ONW04ts fUIqDswLnrDbqmyZNZv0AQCGt187u1KDxcFUCB3RamQUNaJnhBJFiZg3MgmCaiPI 9ff5ot3QLfHmoPcyIb/xudwQgh24vrErK3ursSesdAWtw/DU46/WKfYAt0+DYa+Q jsJJ4x7fk+6Wjp8AAhwpiH1FVof705hd0gbbeK1+/IRU2HGaQ6qZ3rtGwH0kkZma f6OrsbTinaqrRwCJC+ZkqJgSk/DxYTUk -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:51 2025 by rpki-client