$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: 2xMTl41bViyMgAfggPDnqHclC/06UF9dge/Ur2RGyhA= Subject key identifier: 4B:5E:9E:9F:34:39:F1:07:1E:C3:93:3E:0D:B0:60:CF:A8:D9:FE:CF Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 0712 Signing time: Sat 18 Oct 2025 23:18:36 +0000 Manifest this update: Sat 18 Oct 2025 23:18:35 +0000 Manifest next update: Sat 25 Oct 2025 23:18:35 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: vS48noy6GkRHm6q+/QVOACh3Rvq5yTNp0Hg9baYtNV8=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Oct 18 23:18:35 2025 GMT Not After : Oct 25 23:18:35 2025 GMT Subject: CN=68f4204c-abdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:6d:ab:bc:c7:43:e6:5b:83:4e:38:09:fb: 6f:e2:0e:ed:52:61:21:f4:db:77:73:3d:11:ab:d4: c4:2f:36:cc:e5:d2:50:e7:92:e8:26:26:e7:db:e2: d4:4c:0e:9a:7a:22:ca:17:d1:05:7f:30:8d:60:16: 9c:3a:bc:3a:aa:d0:0a:90:b9:48:fd:8d:24:80:3f: 94:2b:15:45:84:39:cb:30:b8:7e:e2:9f:79:74:84: ab:14:e5:7e:40:d3:fb:ed:8c:d4:2e:9d:ee:8c:fc: bd:98:08:f6:b1:ce:a9:fa:f1:60:02:2a:4a:02:8a: 7a:31:c1:df:d0:5e:fe:30:a0:fa:72:a1:23:26:32: 2f:04:db:a3:36:97:a6:da:60:26:7c:b7:c4:5f:65: 3d:94:0c:4d:5e:32:0d:c4:8f:95:55:f4:63:f0:5a: ab:11:6d:37:9f:91:db:50:49:48:ab:39:30:40:9e: ff:f7:3d:ca:0c:af:99:97:90:b0:03:df:c9:55:55: 4b:25:cc:b7:f8:be:92:ab:43:50:00:59:c4:9a:4a: e2:2a:f8:25:7a:d2:6d:89:f1:0a:6f:c3:72:2c:1a: 0b:b3:a8:ed:cb:31:b4:b5:45:fc:88:eb:2c:c8:2d: e7:17:e5:76:47:be:36:1b:f3:51:52:8b:b1:8b:63: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5E:9E:9F:34:39:F1:07:1E:C3:93:3E:0D:B0:60:CF:A8:D9:FE:CF X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bc:ff:dd:c4:88:5c:cd:7f:f7:21:8e:2d:b9:c9:d1:4d:b8: 9a:56:40:f8:16:4c:2b:ee:55:1d:c2:1f:ba:1b:1d:7e:bd:ed: 5c:e3:a0:bc:b0:a2:43:aa:44:4b:c0:84:32:ee:df:dc:ee:b6: 92:e0:a6:05:5a:21:a2:49:5d:95:f7:37:ea:5f:47:dd:8e:16: 6e:57:a3:e2:d3:fa:1f:d6:8d:ed:e7:7c:75:14:ca:92:3b:74: ba:53:bc:e7:a2:71:88:db:80:5d:e5:f8:21:1b:b4:53:6e:7c: 4a:bd:f2:42:4a:83:9a:db:bd:e6:6f:59:2b:17:c3:fd:54:ac: 51:45:57:0d:ca:8e:ee:c7:2f:d4:9f:ec:52:62:fe:42:ad:a7: a0:1a:46:58:8d:16:1d:ef:9b:77:21:e0:4c:4e:c2:d2:b3:98: 27:fe:05:a9:53:15:90:67:b8:6b:f4:3b:c4:31:ab:05:6d:9c: ca:94:d4:2e:8d:65:4c:71:9a:3a:96:7c:c7:b7:47:20:7c:7a: c8:77:9c:47:28:85:e4:6d:75:41:f9:e8:68:5d:04:47:9c:4d: 0c:45:10:6d:0e:73:05:a2:e7:9b:53:f6:0a:19:a6:8d:80:ee: 4f:ec:89:d4:5e:66:b6:be:df:62:24:5a:18:bc:fa:95:91:7d: b0:3f:d2:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUxMDE4MjMxODM1WhcNMjUxMDI1MjMxODM1WjAYMRYwFAYD VQQDEw02OGY0MjA0Yy1hYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Yttq7zHQ+Zbg044Cftv4g7tUmEh9Nt3cz0Rq9TELzbM5dJQ55LoJibn2+LU TA6aeiLKF9EFfzCNYBacOrw6qtAKkLlI/Y0kgD+UKxVFhDnLMLh+4p95dISrFOV+ QNP77YzULp3ujPy9mAj2sc6p+vFgAipKAop6McHf0F7+MKD6cqEjJjIvBNujNpem 2mAmfLfEX2U9lAxNXjINxI+VVfRj8FqrEW03n5HbUElIqzkwQJ7/9z3KDK+Zl5Cw A9/JVVVLJcy3+L6Sq0NQAFnEmkriKvgletJtifEKb8NyLBoLs6jtyzG0tUX8iOss yC3nF+V2R742G/NRUouxi2MrfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtenp80 OfEHHsOTPg2wYM+o2f7PMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSvP/dxIhczX/3IY4tucnRTbiaVkD4Fkwr7lUdwh+6Gx1+ve1c46C8 sKJDqkRLwIQy7t/c7raS4KYFWiGiSV2V9zfqX0fdjhZuV6Pi0/of1o3t53x1FMqS O3S6U7znonGI24Bd5fghG7RTbnxKvfJCSoOa273mb1krF8P9VKxRRVcNyo7uxy/U n+xSYv5CraegGkZYjRYd75t3IeBMTsLSs5gn/gWpUxWQZ7hr9DvEMasFbZzKlNQu jWVMcZo6lnzHt0cgfHrId5xHKIXkbXVB+ehoXQRHnE0MRRBtDnMFouebU/YKGaaN gO5P7InUXma2vt9iJFoYvPqVkX2wP9Jg -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:38 2025 by rpki-client