$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: TuqnCZ/MDFfSsQl+0gQHDIl1rjqc7v6IY3+2G3AGkh8= Subject key identifier: 77:C7:60:FD:86:3A:CC:93:52:13:65:B7:F6:70:25:73:B4:64:26:99 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0792 Signing time: Sat 18 Oct 2025 22:49:00 +0000 Manifest this update: Sat 18 Oct 2025 22:49:00 +0000 Manifest next update: Sat 25 Oct 2025 22:49:00 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: vcmURVCFGAEpAcwN9V2s/tzAUyBdINR1xklHHZ39BWI=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: 23TiuLPxAaSrXTY2xFHwDsaNfyE9NetpuIlQb209liA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Oct 18 22:49:00 2025 GMT Not After : Oct 25 22:49:00 2025 GMT Subject: CN=68f4195c-99e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:59:05:dd:60:ee:81:27:7c:df:ff:12:97: 25:15:c4:ca:2c:e2:82:4d:38:03:54:02:cc:29:9d: 80:67:c3:a9:92:3a:02:20:c2:c3:49:3e:b7:a1:57: b9:3d:2a:aa:a7:5b:9c:30:3c:ef:90:52:d5:d3:46: 33:c7:58:b4:54:ce:ca:79:a4:64:80:26:e2:41:4b: 5d:2f:7c:b2:d6:25:f6:5f:02:bb:f4:d5:24:b9:dc: 44:f8:3f:3f:24:ff:1b:a0:75:3f:25:10:83:a6:03: 6c:76:41:ae:cc:73:c1:7e:0d:e5:ae:67:af:c6:75: 7a:a7:17:89:21:fd:3c:03:e5:49:46:88:08:e6:e8: 9f:1e:e7:e1:f8:be:b3:f1:85:c1:2e:e8:3a:c9:25: b9:2b:0b:b2:f6:7d:f5:13:1a:cb:73:6e:a1:88:d1: 00:da:e4:8b:cf:34:aa:e0:72:b9:58:88:11:79:d6: 1f:60:00:3c:37:e6:0b:2b:44:04:bb:99:e4:d1:26: b1:50:91:6d:ef:98:bd:9a:e6:4a:07:7f:c8:5b:a6: 1b:64:64:fb:cc:2e:67:dd:f2:aa:49:2e:c5:d7:0b: c9:e9:fd:20:dc:8e:06:b4:d9:8d:b0:c9:14:9b:38: 32:b4:8a:98:ec:ac:e1:3f:05:ca:54:2f:98:2d:fa: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C7:60:FD:86:3A:CC:93:52:13:65:B7:F6:70:25:73:B4:64:26:99 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:48:2a:f2:a1:f7:f9:91:bd:00:b9:40:26:2e:9f:f4:45:3a: f4:76:64:e9:ca:07:f3:a1:59:f8:05:03:b7:a7:d1:b0:8f:c7: cf:36:db:fb:24:10:11:9c:98:1c:9a:2f:0f:2b:03:45:0b:e4: 1c:dd:73:43:aa:b1:d0:00:98:22:17:cf:59:0f:ef:81:ca:b6: 28:b9:74:69:00:bb:b6:87:05:da:56:60:a6:97:a9:8d:c4:34: 06:10:ea:6d:26:65:ec:cd:75:81:7a:2f:08:fb:6a:98:9c:14: 4a:cf:d4:27:ed:7e:0e:07:17:81:e0:f3:70:99:b7:92:83:05: 44:1b:df:07:f9:e0:10:aa:21:32:d8:06:cc:c6:5e:65:8f:0e: 7e:50:2d:bb:77:fd:b8:b8:61:a4:d5:44:5b:30:30:e0:87:0a: 48:4f:45:4b:d4:58:1b:49:da:a3:5b:d3:42:88:7e:82:71:d9: fe:96:05:5a:a7:9d:ea:75:49:0f:db:a4:82:02:51:b2:4a:e0: f1:56:92:ec:61:5a:46:f0:6e:cd:d3:c0:c5:71:0f:fd:94:2f: 24:23:ec:93:f6:c0:29:38:8e:7a:e0:71:77:3c:b0:ce:dc:15: 8f:5d:9e:3f:10:e3:33:50:0d:95:b6:15:7b:3b:e5:7e:ed:da: 25:ba:34:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUxMDE4MjI0OTAwWhcNMjUxMDI1MjI0OTAwWjAYMRYwFAYD VQQDEw02OGY0MTk1Yy05OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NVZBd1g7oEnfN//EpclFcTKLOKCTTgDVALMKZ2AZ8OpkjoCIMLDST63oVe5 PSqqp1ucMDzvkFLV00Yzx1i0VM7KeaRkgCbiQUtdL3yy1iX2XwK79NUkudxE+D8/ JP8boHU/JRCDpgNsdkGuzHPBfg3lrmevxnV6pxeJIf08A+VJRogI5uifHufh+L6z 8YXBLug6ySW5Kwuy9n31ExrLc26hiNEA2uSLzzSq4HK5WIgRedYfYAA8N+YLK0QE u5nk0SaxUJFt75i9muZKB3/IW6YbZGT7zC5n3fKqSS7F1wvJ6f0g3I4GtNmNsMkU mzgytIqY7KzhPwXKVC+YLfqqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfHYP2G OsyTUhNlt/ZwJXO0ZCaZMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGSCryoff5kb0AuUAmLp/0RTr0dmTpygfzoVn4BQO3p9Gwj8fPNtv7 JBARnJgcmi8PKwNFC+Qc3XNDqrHQAJgiF89ZD++ByrYouXRpALu2hwXaVmCml6mN xDQGEOptJmXszXWBei8I+2qYnBRKz9Qn7X4OBxeB4PNwmbeSgwVEG98H+eAQqiEy 2AbMxl5ljw5+UC27d/24uGGk1URbMDDghwpIT0VL1FgbSdqjW9NCiH6Ccdn+lgVa p53qdUkP26SCAlGySuDxVpLsYVpG8G7N08DFcQ/9lC8kI+yT9sApOI564HF3PLDO 3BWPXZ4/EOMzUA2VthV7O+V+7dolujRB -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:48 2025 by rpki-client