$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: VVoeDGWKU9A3f8nKUAE6C+a1eVtIqw1eSrO8k3ldecU= Subject key identifier: DE:2A:AD:AE:7F:CD:56:56:00:8C:92:5E:F9:BB:44:F2:A6:17:72:B4 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 068A Signing time: Sat 18 Oct 2025 23:40:42 +0000 Manifest this update: Sat 18 Oct 2025 23:40:42 +0000 Manifest next update: Sat 25 Oct 2025 23:40:42 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: mFBmCAweWMTWlJpv8pCQT880lWpzSY4Yu0QtQSF0xUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Oct 18 23:40:42 2025 GMT Not After : Oct 25 23:40:42 2025 GMT Subject: CN=68f4257a-c49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:01:92:01:30:99:0b:30:03:e5:20:0b:ee: e6:8e:63:c0:f4:41:3e:42:e9:0e:f8:17:d2:d2:1a: f0:9d:6a:93:30:32:16:9f:af:0b:c7:d2:2e:5a:d2: e2:35:65:44:2a:5f:46:0c:75:d7:52:81:2e:ea:85: e9:a6:ea:bb:51:2c:cf:81:7f:b2:44:2e:03:e5:35: fb:0d:2d:17:ec:9d:8d:de:65:46:8b:f7:2b:ea:d7: ce:90:16:f3:d4:16:82:05:09:38:c2:6b:23:f7:45: a3:3b:45:66:43:4f:83:d7:87:4b:c2:37:1d:78:c8: 51:6e:b1:48:49:9e:da:48:37:e8:f5:5a:14:07:a3: 3b:13:55:91:5a:0d:d1:88:4d:43:a7:1b:4d:de:80: 65:32:cd:23:73:ea:45:37:68:84:d1:22:89:56:7d: 50:79:c3:68:7d:4f:f2:d4:f4:20:ba:f1:50:b5:b9: b1:a1:cd:73:64:5a:94:42:2d:e2:4a:de:ba:22:8d: b3:22:84:4d:ef:1d:05:b6:3a:ec:4e:a3:da:fa:f8: 13:2b:1f:07:02:c5:ff:1c:aa:df:b4:fa:b8:3c:9a: 29:22:83:2e:68:37:33:87:c2:07:68:ef:e0:d5:76: 5c:25:31:17:a0:dd:96:dd:af:6d:ee:36:1b:8a:32: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2A:AD:AE:7F:CD:56:56:00:8C:92:5E:F9:BB:44:F2:A6:17:72:B4 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:43:9a:bc:a3:c2:08:0f:6f:9c:36:68:cf:6d:ff:8a:5a: bb:3e:5b:81:9d:a2:70:14:00:3c:fa:b2:ab:fe:ab:38:04:e9: ef:b1:8b:3b:74:9f:7d:c7:1f:3a:2c:00:d6:c1:d1:f9:71:06: e8:df:b8:76:bb:a2:b9:b8:69:7a:9c:9c:52:9b:af:86:79:5c: 3f:eb:8b:46:df:b0:3b:c7:f3:2c:4f:ca:11:43:e0:d3:e8:6c: 3f:c9:8b:db:4e:e3:27:37:9e:e1:bc:6d:68:4f:f0:1f:9e:7f: 1c:eb:27:bb:b2:21:3a:78:29:5d:05:08:14:88:e1:d2:55:64: 7c:18:bc:18:b6:e1:2f:c1:5d:a7:b9:a1:34:6e:dc:20:8f:6f: 2d:73:ba:ec:c8:fe:11:7b:9a:7f:0e:30:99:d2:b1:5c:d5:ca: b2:ea:eb:f5:5e:bd:7a:85:ba:02:f9:05:13:3b:05:39:b0:b1: dd:2a:dd:be:ec:a9:df:01:f7:1e:95:b1:58:40:1e:13:3d:be: 05:f8:03:fc:ec:e0:7c:d5:86:03:00:0d:ee:95:9c:a5:1c:2b: 05:a0:cb:50:91:d7:64:bb:df:37:d7:2e:37:33:43:04:19:df: af:17:44:0a:06:10:00:1e:77:c1:e4:9a:f2:2a:d1:69:9b:96: ca:e9:b5:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUxMDE4MjM0MDQyWhcNMjUxMDI1MjM0MDQyWjAYMRYwFAYD VQQDEw02OGY0MjU3YS1jNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu54BkgEwmQswA+UgC+7mjmPA9EE+QukO+BfS0hrwnWqTMDIWn68Lx9IuWtLi NWVEKl9GDHXXUoEu6oXppuq7USzPgX+yRC4D5TX7DS0X7J2N3mVGi/cr6tfOkBbz 1BaCBQk4wmsj90WjO0VmQ0+D14dLwjcdeMhRbrFISZ7aSDfo9VoUB6M7E1WRWg3R iE1DpxtN3oBlMs0jc+pFN2iE0SKJVn1QecNofU/y1PQguvFQtbmxoc1zZFqUQi3i St66Io2zIoRN7x0FtjrsTqPa+vgTKx8HAsX/HKrftPq4PJopIoMuaDczh8IHaO/g 1XZcJTEXoN2W3a9t7jYbijKRAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4qra5/ zVZWAIySXvm7RPKmF3K0MB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUkUOavKPCCA9vnDZoz23/ilq7PluBnaJwFAA8+rKr/qs4BOnvsYs7 dJ99xx86LADWwdH5cQbo37h2u6K5uGl6nJxSm6+GeVw/64tG37A7x/MsT8oRQ+DT 6Gw/yYvbTuMnN57hvG1oT/Afnn8c6ye7siE6eCldBQgUiOHSVWR8GLwYtuEvwV2n uaE0btwgj28tc7rsyP4Re5p/DjCZ0rFc1cqy6uv1Xr16hboC+QUTOwU5sLHdKt2+ 7KnfAfcelbFYQB4TPb4F+AP87OB81YYDAA3ulZylHCsFoMtQkddku9831y43M0ME Gd+vF0QKBhAAHnfB5JryKtFpm5bK6bVR -----END CERTIFICATE-----Generated at Tue Oct 21 10:28:14 2025 by rpki-client