$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json) Hash identifier: 7BaCaDkReAkjCG1aq1ZBcgJbqW5TVoYVoqe1icqmlqM= Subject key identifier: 6E:B3:FE:DF:A6:DC:AC:63:BD:22:99:73:C5:23:C5:30:60:D9:91:A1 Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft Manifest number: 15 Signing time: Sun 19 Oct 2025 11:30:22 +0000 Manifest this update: Sun 19 Oct 2025 11:30:21 +0000 Manifest next update: Sun 26 Oct 2025 11:30:21 +0000 Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: Kv8ToT7b379WodrAbWl934RoRDwOR8wPKJVYTdqnvIo=) 2: 134623AC931511F092E28818C4F9AE02.roa (hash: iROhbsxSxTl+6rqtSvLAjrMVa4sfvVVCQefqUmfddwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Validity Not Before: Oct 19 11:30:21 2025 GMT Not After : Oct 26 11:30:21 2025 GMT Subject: CN=68f4cbcd-3bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:55:01:f3:11:db:b8:77:6f:dd:4b:4c:d4: 9e:e1:bb:76:48:cc:69:ac:c1:67:a5:f8:97:50:44: a7:21:59:39:2b:e2:e8:cc:36:89:3d:8b:df:ab:06: dd:39:2f:93:93:31:f1:bb:11:54:eb:4a:d1:94:ac: bf:35:2e:ca:72:b5:b4:4e:0b:2f:e0:2a:a9:d1:fd: a1:da:9b:22:01:7c:b0:a2:a4:5b:5c:95:fc:dd:05: 1a:c2:fc:be:ce:3c:29:74:ce:3b:ee:c4:2d:4a:4b: c6:a0:db:e5:5a:22:62:85:03:ca:83:f2:18:48:ed: 42:e3:12:dc:d3:3c:e0:3d:99:de:c1:c9:35:6d:f4: 21:25:1b:61:56:d7:5d:d8:7d:2e:6f:43:75:1d:ca: 93:ac:b5:64:ec:55:29:a3:f9:19:53:3f:7d:03:d9: 96:01:c3:6a:30:28:e7:3c:e3:7f:2f:71:e3:e9:88: 44:fc:7d:3d:7c:d3:04:f8:68:f8:94:7d:ab:5c:ae: 98:6f:4f:02:f4:51:80:b3:c8:d7:bd:8b:42:2b:4c: 5e:57:69:05:09:2e:22:63:c6:3b:dc:19:f5:d8:ea: b8:03:a3:64:97:84:b2:f9:4b:5f:29:e0:53:d7:a4: a7:4b:c6:f2:b4:f9:f2:59:7f:0b:70:1f:38:76:15: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B3:FE:DF:A6:DC:AC:63:BD:22:99:73:C5:23:C5:30:60:D9:91:A1 X509v3 Authority Key Identifier: keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:69:1a:bf:b5:bc:76:34:86:8a:ae:66:1d:d0:df:f1:94: c5:00:3e:af:5d:0f:ec:87:22:62:34:82:98:07:d5:11:ec:4f: d0:6a:cc:70:77:f0:e9:8a:a9:84:95:04:0c:15:05:8b:c5:02: 1a:02:55:2b:e8:ad:4b:b7:32:57:9c:e6:7f:63:53:29:e7:6f: 3f:74:45:28:41:14:66:66:4d:61:a6:9c:38:8b:6d:b2:f1:29: 8d:0e:77:17:41:10:e1:fd:f2:ee:d5:00:5c:c0:f3:d7:a8:e8: 51:47:bc:b5:d9:ca:f1:22:3d:aa:f0:0f:5b:b0:11:bd:9c:7a: 7b:2e:59:38:f9:9f:77:db:d0:96:d4:ae:87:b7:c4:95:2c:8c: 6b:aa:c5:89:ce:1d:e0:32:8d:31:bf:72:5f:a0:f2:e7:37:17: 7b:92:60:b8:5e:d8:4a:85:79:ca:07:dc:70:77:dc:34:7a:a8: 99:6a:42:dd:e7:56:3a:d4:0b:d3:d6:21:a6:96:82:82:92:ed: c0:8f:07:46:7a:50:a1:7c:9b:9f:f7:59:4a:13:bc:65:cc:6c: 6b:0a:3c:00:c3:c6:51:67:dd:e5:5f:1d:e4:c0:cf:11:bb:09: 74:cd:70:4a:b2:bd:dc:ff:db:3c:4c:2f:f9:5a:e8:fe:38:75: b1:ed:8e:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTE1NTExMC8GA1UEBRMoQUQzRkE2QUY4MEUzNzMxMUQwQjNBRUM5NEE3NTdFNTQ0 NjNDNDlCNzAeFw0yNTEwMTkxMTMwMjFaFw0yNTEwMjYxMTMwMjFaMBgxFjAUBgNV BAMTDTY4ZjRjYmNkLTNiY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmVUB8xHbuHdv3UtM1J7hu3ZIzGmswWel+JdQRKchWTkr4ujMNok9i9+rBt05 L5OTMfG7EVTrStGUrL81LspytbROCy/gKqnR/aHamyIBfLCipFtclfzdBRrC/L7O PCl0zjvuxC1KS8ag2+VaImKFA8qD8hhI7ULjEtzTPOA9md7ByTVt9CElG2FW113Y fS5vQ3UdypOstWTsVSmj+RlTP30D2ZYBw2owKOc8438vcePpiET8fT180wT4aPiU fatcrphvTwL0UYCzyNe9i0IrTF5XaQUJLiJjxjvcGfXY6rgDo2SXhLL5S18p4FPX pKdLxvK0+fJZfwtwHzh2FWWpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbrP+36bc rGO9IplzxSPFMGDZkaEwHwYDVR0jBBgwFoAUrT+mr4DjcxHQs67JSnV+VEY8Sbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxMTU1LzA5RDM2QzkwOTMw NTExRjBCRUVBQzYxMUM0RjlBRTAyL3JULW1yNERqY3hIUXM2N0pTblYtVkVZOFNi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclQtbXI0RGpjeEhRczY3SlNuVi1WRVk4U2JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx MTU1LzA5RDM2QzkwOTMwNTExRjBCRUVBQzYxMUM0RjlBRTAyL3JULW1yNERqY3hI UXM2N0pTblYtVkVZOFNiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMHaRq/tbx2NIaKrmYd0N/xlMUAPq9dD+yHImI0gpgH1RHsT9BqzHB3 8OmKqYSVBAwVBYvFAhoCVSvorUu3Mlec5n9jUynnbz90RShBFGZmTWGmnDiLbbLx KY0OdxdBEOH98u7VAFzA89eo6FFHvLXZyvEiParwD1uwEb2censuWTj5n3fb0JbU roe3xJUsjGuqxYnOHeAyjTG/cl+g8uc3F3uSYLhe2EqFecoH3HB33DR6qJlqQt3n VjrUC9PWIaaWgoKS7cCPB0Z6UKF8m5/3WUoTvGXMbGsKPADDxlFn3eVfHeTAzxG7 CXTNcEqyvdz/2zxML/la6P44dbHtjio= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:41 2025 by rpki-client