$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: FxnXxn2jDOVHph+JWaKALETDvtwUftvJy0OLekCpTDw= Subject key identifier: 00:F2:AA:B5:22:49:76:EA:33:4B:90:29:CB:28:33:D6:8C:11:79:D8 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 055D Signing time: Sun 19 Oct 2025 01:08:23 +0000 Manifest this update: Sun 19 Oct 2025 01:08:22 +0000 Manifest next update: Sun 26 Oct 2025 01:08:22 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: w94gSjQBnoVAWmFiG1AY++tLPRcAHkLscJNEx22d0Pk=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: xqj1Iz7t/A8a80aAwvGG6Txdmfyu0/4YD+uVRfrZJ7U=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: CF/ycti5B8sO9TQT4NkKOcvGvBc1ti1JSzdWtmNe964=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Oct 19 01:08:22 2025 GMT Not After : Oct 26 01:08:22 2025 GMT Subject: CN=68f43a07-5fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:eb:9b:d4:6f:21:42:b0:c1:5c:78:58:69: 44:5e:72:6a:78:b1:2a:33:09:e8:2c:40:b1:05:a3: 4d:06:66:23:0c:49:9c:b0:1d:5c:8c:84:f7:b5:52: 12:13:a0:ea:74:c1:f0:b3:fa:68:80:2f:2f:36:fa: dd:43:42:b7:6a:6e:6d:f5:7b:0b:cf:10:f6:8e:e4: e5:c3:1b:ce:3f:c8:a6:4c:4f:f5:3b:21:14:c8:89: 59:66:ce:3a:d2:b1:84:aa:64:a6:6d:8b:8c:dd:86: 4f:55:39:db:98:4e:20:48:b5:0f:eb:16:40:af:0b: 93:8a:00:ef:8d:be:76:b9:2a:06:c8:12:c9:ba:ff: cc:10:bc:0b:86:44:0c:2d:45:7e:4d:5f:b7:00:28: 9e:b6:c9:e8:84:66:3f:3f:97:28:4e:c5:76:64:b6: 5a:02:4d:b4:a1:4e:fb:ef:ee:e5:6d:bf:bb:24:55: 88:97:60:a8:74:51:0b:74:f0:1b:84:66:57:ae:e0: 76:cd:ce:af:56:cb:d5:63:d2:c3:8c:aa:2c:43:cc: 3b:c2:8d:3f:22:c4:86:27:6d:a9:4f:eb:b1:31:53: 2b:51:75:e2:99:d5:8b:e4:9a:6e:4d:5d:fb:b0:1d: d3:54:11:6f:c2:5e:26:70:3e:b8:2d:fe:25:31:ef: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F2:AA:B5:22:49:76:EA:33:4B:90:29:CB:28:33:D6:8C:11:79:D8 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d1:cb:2a:ce:6d:e7:53:4c:0d:e0:35:63:56:07:31:5c:96: aa:7b:c3:3c:3d:95:83:0b:08:b0:f4:7f:63:b6:19:ef:96:0f: 2a:d9:ae:85:dc:3f:6d:b1:b8:7b:5a:11:f2:b2:0e:c5:08:2d: 8e:fc:c1:8e:b5:52:df:89:76:fc:6b:d0:2b:3c:5d:0a:75:1a: 8c:86:22:06:77:b7:07:46:cf:f4:50:b1:8c:3a:09:7a:20:1e: 3f:37:cb:77:15:4d:98:e6:98:dc:25:2c:eb:1b:5b:fb:5e:e5: 8e:bc:fb:34:3a:4c:73:94:6b:b5:b9:76:55:9c:b8:ed:f1:f5: 95:65:c8:1e:43:9c:f5:79:d4:0d:a9:39:b8:8e:0d:d3:9f:53: 4c:61:10:0f:dd:1b:24:b3:c5:99:8d:00:97:c3:4c:5e:72:cf: 25:be:23:ed:fa:ac:fc:00:64:b7:0c:26:f1:ab:19:c4:d8:cc: 51:5d:69:09:b7:17:e5:70:2c:44:43:fb:a9:88:62:eb:47:c8: 66:3e:70:11:a7:30:ff:4a:74:75:40:a8:ca:ea:53:07:82:fd: e9:d9:d4:37:d3:51:e9:33:2a:03:da:4e:82:30:e4:a6:c1:bc: 0d:2f:6e:1e:6d:cb:43:ae:62:63:2d:3c:e9:c7:82:10:4c:34: 49:71:31:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUxMDE5MDEwODIyWhcNMjUxMDI2MDEwODIyWjAYMRYwFAYD VQQDEw02OGY0M2EwNy01ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD3rm9RvIUKwwVx4WGlEXnJqeLEqMwnoLECxBaNNBmYjDEmcsB1cjIT3tVIS E6DqdMHws/pogC8vNvrdQ0K3am5t9XsLzxD2juTlwxvOP8imTE/1OyEUyIlZZs46 0rGEqmSmbYuM3YZPVTnbmE4gSLUP6xZArwuTigDvjb52uSoGyBLJuv/MELwLhkQM LUV+TV+3ACietsnohGY/P5coTsV2ZLZaAk20oU777+7lbb+7JFWIl2CodFELdPAb hGZXruB2zc6vVsvVY9LDjKosQ8w7wo0/IsSGJ22pT+uxMVMrUXXimdWL5JpuTV37 sB3TVBFvwl4mcD64Lf4lMe/ulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADyqrUi SXbqM0uQKcsoM9aMEXnYMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm0csqzm3nU0wN4DVjVgcxXJaqe8M8PZWDCwiw9H9jthnvlg8q2a6F 3D9tsbh7WhHysg7FCC2O/MGOtVLfiXb8a9ArPF0KdRqMhiIGd7cHRs/0ULGMOgl6 IB4/N8t3FU2Y5pjcJSzrG1v7XuWOvPs0OkxzlGu1uXZVnLjt8fWVZcgeQ5z1edQN qTm4jg3Tn1NMYRAP3Rsks8WZjQCXw0xecs8lviPt+qz8AGS3DCbxqxnE2MxRXWkJ txflcCxEQ/upiGLrR8hmPnARpzD/SnR1QKjK6lMHgv3p2dQ301HpMyoD2k6CMOSm wbwNL24ebctDrmJjLTzpx4IQTDRJcTFk -----END CERTIFICATE-----Generated at Mon Oct 20 10:52:01 2025 by rpki-client