$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: xUq9/rYGGkQ00DJwQJYPHaQ3QnuEvYpuHnuiXW/wdNc= Subject key identifier: 22:4A:BC:4F:1F:41:DF:D5:72:23:8F:4E:BA:B8:0C:36:CB:0B:9C:54 Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 1952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 1945 Signing time: Sat 18 Oct 2025 16:48:01 +0000 Manifest this update: Sat 18 Oct 2025 16:48:00 +0000 Manifest next update: Sat 25 Oct 2025 16:48:00 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: aB8QAaK8wFN9e/YdGBkUF0Bev9xIM9/tVsaN7SpKh5o=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6482 (0x1952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Oct 18 16:48:00 2025 GMT Not After : Oct 25 16:48:00 2025 GMT Subject: CN=68f3c4c0-cef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:3f:56:f1:d1:00:f6:8f:d6:6a:3c:84:50: e3:d9:8a:1d:74:fc:3c:ec:51:9b:72:4d:99:ac:7b: bc:87:af:04:a2:03:ab:c7:32:36:3a:08:ec:6b:25: 4f:ef:e6:af:8e:33:5a:36:3b:2d:13:90:09:1c:35: 61:06:9e:59:65:a6:e0:18:12:16:20:17:a5:e7:7b: 3b:81:c6:0e:ad:78:ca:68:45:c2:2f:d4:fb:17:c1: 9f:f3:bb:44:86:d2:bb:c8:29:27:21:c2:34:60:26: df:ff:89:06:5c:13:18:98:62:1e:e5:10:05:6e:6a: 73:d8:ee:22:bb:b0:0e:a6:5a:f3:dd:07:42:22:1f: 79:ac:d0:38:6d:05:30:03:e1:b8:ff:58:23:d2:46: 06:3b:d3:4d:2c:80:5f:aa:0f:e0:66:73:eb:a3:66: e3:9a:33:a3:9e:00:ec:53:4d:18:f2:27:ab:06:33: 32:43:f3:63:63:ef:d7:b5:34:45:c9:2d:3c:91:83: 94:4a:4a:61:f6:f3:59:9a:0a:f5:50:94:5c:eb:61: 32:a3:7f:07:22:7f:35:81:1a:f8:33:c5:f7:c1:c4: 77:a1:7c:fd:7a:36:77:b8:b6:b5:b9:c3:4a:30:2e: 2b:7f:5e:b3:24:63:cf:20:56:19:30:ca:62:f3:53: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:BC:4F:1F:41:DF:D5:72:23:8F:4E:BA:B8:0C:36:CB:0B:9C:54 X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:97:7e:69:9d:ce:e7:d7:a8:b8:99:41:50:b0:72:c3:ed:2e: 20:7c:a4:5b:35:77:66:93:aa:66:ee:f0:3a:d4:eb:dc:77:cc: 67:a4:49:4f:47:d4:2b:ad:ba:1a:60:f1:3e:63:5b:99:c6:7f: 30:2a:5b:39:25:82:fc:de:0d:8c:5e:a6:1a:46:d8:f3:ed:22: e9:6d:aa:88:a0:ed:61:44:6b:76:f4:43:0c:7a:8f:08:39:24: 20:1a:86:81:ac:36:03:cc:17:3b:0d:0e:cf:3d:c8:5a:b3:85: 14:77:3d:b7:0d:14:31:e1:d4:ef:4b:81:8d:9a:56:0e:38:9d: b6:a3:47:90:8e:89:e3:15:6c:91:27:8a:a3:47:ac:c5:0b:71: b1:85:31:5c:25:d2:99:1a:90:07:d2:7a:fa:8a:fb:cb:58:30: a1:27:42:c2:93:52:a7:8d:71:d3:4d:31:db:f5:55:c9:e9:7a: 57:f1:b5:44:4c:68:12:e7:4a:67:85:eb:94:67:44:bb:9a:2b: 93:04:34:29:18:94:8a:fd:90:47:84:29:94:c9:35:2b:0d:11: 28:26:85:29:60:9a:d8:c7:af:6a:c0:a6:8a:de:7a:67:00:cd: ce:d1:6d:b7:83:b7:b3:b8:42:e0:68:f2:c9:30:13:56:5d:22: 9a:d4:f0:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjUxMDE4MTY0ODAwWhcNMjUxMDI1MTY0ODAwWjAYMRYwFAYD VQQDEw02OGYzYzRjMC1jZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKw/VvHRAPaP1mo8hFDj2YoddPw87FGbck2ZrHu8h68EogOrxzI2OgjsayVP 7+avjjNaNjstE5AJHDVhBp5ZZabgGBIWIBel53s7gcYOrXjKaEXCL9T7F8Gf87tE htK7yCknIcI0YCbf/4kGXBMYmGIe5RAFbmpz2O4iu7AOplrz3QdCIh95rNA4bQUw A+G4/1gj0kYGO9NNLIBfqg/gZnPro2bjmjOjngDsU00Y8ierBjMyQ/NjY+/XtTRF yS08kYOUSkph9vNZmgr1UJRc62Eyo38HIn81gRr4M8X3wcR3oXz9ejZ3uLa1ucNK MC4rf16zJGPPIFYZMMpi81PCZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJKvE8f Qd/VciOPTrq4DDbLC5xUMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDl35pnc7n16i4mUFQsHLD7S4gfKRbNXdmk6pm7vA61Ovcd8xnpElP R9QrrboaYPE+Y1uZxn8wKls5JYL83g2MXqYaRtjz7SLpbaqIoO1hRGt29EMMeo8I OSQgGoaBrDYDzBc7DQ7PPchas4UUdz23DRQx4dTvS4GNmlYOOJ22o0eQjonjFWyR J4qjR6zFC3GxhTFcJdKZGpAH0nr6ivvLWDChJ0LCk1KnjXHTTTHb9VXJ6XpX8bVE TGgS50pnheuUZ0S7miuTBDQpGJSK/ZBHhCmUyTUrDREoJoUpYJrYx69qwKaK3npn AM3O0W23g7ezuELgaPLJMBNWXSKa1PBT -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:12 2025 by rpki-client