$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: 8OFL0GNiEfOIFdPpkN3nZHD9bGa0fP997cSJc5PfXXc= Subject key identifier: 9E:3A:CF:8F:EE:5B:AB:3C:A4:30:60:65:AD:DE:35:A1:96:A2:A4:11 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 01CA Signing time: Sun 19 Oct 2025 05:30:32 +0000 Manifest this update: Sun 19 Oct 2025 05:30:32 +0000 Manifest next update: Sun 26 Oct 2025 05:30:32 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: JBclWuSRTGgC5ds6XXGuS/gFm45TWmA+v2YuvcNKY4Y=) 2: 8A795CC866E711F0985D0751C4F9AE02.roa (hash: g1KuNxkFHwwpiwP+Lzl39JbGpSxNeMuhi4yzpFrKJZU=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Oct 19 05:30:32 2025 GMT Not After : Oct 26 05:30:32 2025 GMT Subject: CN=68f47778-3c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:e3:19:35:c9:ea:26:26:4b:9b:69:ee:6f: 37:c4:d8:86:f1:98:6e:35:de:89:80:10:8a:7a:63: 67:f7:95:74:b2:2b:7e:8e:ca:f1:a2:8a:c4:20:29: 29:3c:af:31:1b:2e:00:26:6f:12:d2:60:8d:ad:c5: a3:fe:61:e1:8d:fb:d6:e6:e0:1a:8a:67:4b:9a:a6: 41:04:d4:d0:96:b8:3f:94:c2:27:f8:1c:f1:ae:62: e0:b7:70:cc:be:50:4f:a5:95:dd:8f:85:58:82:14: e9:14:21:05:c6:ac:8e:ba:5e:04:d3:0a:b5:53:41: 6e:7f:1a:47:5e:e8:04:1d:e1:29:b3:42:d1:46:d6: 56:ba:15:9d:6e:f4:d6:e6:05:ad:32:ee:82:eb:d4: 15:59:95:2e:d0:e1:71:3b:64:1d:02:b3:2d:3c:be: f8:0f:d8:85:9a:ec:e0:cf:21:03:51:87:02:77:53: 9e:01:f7:7d:1b:a8:f8:3f:ed:9f:89:7b:cc:70:93: f1:f3:63:92:fc:6c:6c:20:4e:a3:0d:f4:b9:c1:0f: c3:3d:19:25:11:63:f8:60:1e:14:e7:04:79:08:a1: 2b:ee:d9:03:01:89:5a:8e:eb:f7:97:89:4d:f8:f4: b9:b7:af:c0:0d:47:95:00:fe:b6:e2:e4:eb:37:55: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3A:CF:8F:EE:5B:AB:3C:A4:30:60:65:AD:DE:35:A1:96:A2:A4:11 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:71:44:3a:bb:79:50:3d:c8:8b:3a:fb:33:2c:5f:1f:cd:de: 4f:d4:88:99:76:72:08:3b:d3:d4:b1:d5:e1:70:dd:93:4c:f9: fc:81:7b:86:66:99:fd:a2:ff:51:ea:35:eb:d2:b3:89:79:c9: 48:85:ad:1d:5d:99:de:99:c4:50:c1:1a:d4:17:74:5b:92:68: 25:5f:41:07:5a:7f:8f:54:ad:20:e0:a5:68:cc:9a:68:a8:b0: 1d:9d:5b:0e:51:92:31:f5:59:90:01:30:b0:b5:cd:14:b3:e3: 8c:5f:4d:0c:dd:48:f2:9e:08:29:30:cd:6d:93:24:af:96:50: ef:52:7d:be:fe:4c:75:22:d3:25:60:14:77:f9:7f:4c:25:f1: 72:06:4a:5e:af:16:ad:b9:34:a3:e8:30:c8:c1:0c:2e:5c:76: 6b:6c:32:82:88:6f:06:29:07:14:93:99:57:0b:82:60:8d:86: 5e:70:c6:92:0a:4c:24:bf:85:ad:3b:a9:3f:e1:b0:e5:47:f9: da:5c:77:62:4f:85:97:69:df:88:87:80:a3:3a:8c:0e:d9:a3: 43:d0:da:d5:fb:21:cc:b1:dd:27:1d:86:3f:51:2c:14:10:25: d7:83:ef:21:b8:a1:3f:bb:51:17:6d:1d:eb:bb:7c:da:02:a1: d8:ae:82:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUxMDE5MDUzMDMyWhcNMjUxMDI2MDUzMDMyWjAYMRYwFAYD VQQDEw02OGY0Nzc3OC0zYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfvjGTXJ6iYmS5tp7m83xNiG8ZhuNd6JgBCKemNn95V0sit+jsrxoorEICkp PK8xGy4AJm8S0mCNrcWj/mHhjfvW5uAaimdLmqZBBNTQlrg/lMIn+BzxrmLgt3DM vlBPpZXdj4VYghTpFCEFxqyOul4E0wq1U0FufxpHXugEHeEps0LRRtZWuhWdbvTW 5gWtMu6C69QVWZUu0OFxO2QdArMtPL74D9iFmuzgzyEDUYcCd1OeAfd9G6j4P+2f iXvMcJPx82OS/GxsIE6jDfS5wQ/DPRklEWP4YB4U5wR5CKEr7tkDAYlajuv3l4lN +PS5t6/ADUeVAP624uTrN1UvCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ46z4/u W6s8pDBgZa3eNaGWoqQRMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbcUQ6u3lQPciLOvszLF8fzd5P1IiZdnIIO9PUsdXhcN2TTPn8gXuG Zpn9ov9R6jXr0rOJeclIha0dXZnemcRQwRrUF3RbkmglX0EHWn+PVK0g4KVozJpo qLAdnVsOUZIx9VmQATCwtc0Us+OMX00M3UjynggpMM1tkySvllDvUn2+/kx1ItMl YBR3+X9MJfFyBkperxatuTSj6DDIwQwuXHZrbDKCiG8GKQcUk5lXC4JgjYZecMaS Ckwkv4WtO6k/4bDlR/naXHdiT4WXad+Ih4CjOowO2aND0NrV+yHMsd0nHYY/USwU ECXXg+8huKE/u1EXbR3ru3zaAqHYroJP -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:26 2025 by rpki-client