$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json) Hash identifier: HqEUtmuXNt9UmpPuo+gS2cZ2dzsE0qGuHNXM0ft96fI= Subject key identifier: 81:21:D4:0C:4B:4C:02:AA:16:33:BA:1F:03:3A:5C:76:94:A2:15:09 Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 0346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft Manifest number: 0335 Signing time: Sun 19 Oct 2025 03:09:38 +0000 Manifest this update: Sun 19 Oct 2025 03:09:38 +0000 Manifest next update: Sun 26 Oct 2025 03:09:38 +0000 Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: K5IVOk4eF6tmgvnAP3HvyQf5hr8vahGxb7V2ym4GTtk=) 2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: utZX5ySaw+fRg+Lh06bBkb/YXcN+yf0Mo1jgBt8t3jI=) 3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: AGoeYBgdKLfYPPhkahztTiG7JYdEMPn9wa46SQhvMmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Oct 19 03:09:38 2025 GMT Not After : Oct 26 03:09:38 2025 GMT Subject: CN=68f45672-4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:14:2c:65:9f:c6:66:aa:55:fe:6c:df:eb: 0d:32:3c:c3:0b:dc:8f:95:49:22:cd:e6:94:bd:dd: af:5a:d0:19:6a:b3:05:2f:6e:99:a2:41:7f:ec:de: 15:fe:4e:64:34:71:f3:9f:c9:67:cc:f4:c8:88:67: a1:4b:54:c6:bd:dc:05:ca:34:01:84:28:bb:22:6a: e5:c1:42:5c:0c:14:54:4b:18:ad:3e:4f:93:0d:92: f3:c5:f6:be:34:8f:4d:37:de:8e:f8:3b:07:f1:1f: d7:7d:3f:0b:ca:5b:d8:a4:06:d1:cb:12:78:ce:3e: 74:f9:41:77:72:56:af:75:5e:59:e2:b9:0f:1a:1d: 18:f6:7a:3f:2f:44:20:47:74:98:6f:df:2b:64:63: 3b:b0:aa:0d:14:f7:63:53:32:a1:25:48:df:2d:08: fb:8e:be:50:b7:16:7e:61:a7:ee:31:18:98:64:67: f0:75:0e:74:34:f2:4b:b6:1e:b8:2f:9c:96:58:bb: 28:a9:ce:f7:1c:12:a0:3b:70:ff:00:45:83:db:c7: bd:77:a4:88:0d:a4:48:25:90:44:d3:74:7c:e5:cd: b3:7f:8f:40:15:7f:91:21:3b:f6:33:27:bc:81:9e: 9f:07:9b:ce:c0:23:92:32:1b:03:86:ed:1b:74:61: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:D4:0C:4B:4C:02:AA:16:33:BA:1F:03:3A:5C:76:94:A2:15:09 X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5e:30:fc:c4:62:e4:59:f4:71:51:c9:f3:bc:46:aa:d3:a7: c3:bb:39:a2:f7:5d:06:68:a5:c6:22:c5:d2:04:a8:23:d1:fa: fb:e8:e5:0e:aa:4b:85:9f:fa:53:d4:94:a6:4d:c5:18:7d:07: 87:91:22:cc:99:a7:05:af:13:89:a7:c4:b0:f1:62:75:1b:7a: 75:b2:29:8d:1d:1f:5a:4e:a2:be:b6:11:57:c4:89:62:8c:a2: d8:41:57:05:04:52:c0:bb:e1:e7:9c:b1:c9:de:cd:84:6b:09: 6b:bb:e7:64:52:97:34:82:b3:54:1d:d0:72:8a:e7:4b:4a:c7: 56:d4:63:05:e8:56:35:c5:92:82:75:06:a7:b4:2f:a1:e3:6a: cd:a7:82:11:e0:75:3f:e4:99:93:b3:75:40:21:12:e9:78:7f: 06:f5:3f:6f:d3:66:70:39:4d:50:7d:11:ad:0d:ae:0c:9a:7e: 65:46:4d:ea:b1:7b:5f:f5:36:ca:e6:33:31:6a:8e:c5:16:aa: 98:45:49:ee:61:95:32:18:fe:99:57:7f:7b:02:88:a9:cc:94: 58:28:73:1d:22:96:04:b3:47:68:82:f0:8f:6c:08:e7:04:db: 2e:68:39:41:5a:0f:20:1a:21:fa:77:23:66:fd:86:17:6f:f4: 1d:f4:20:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUxMDE5MDMwOTM4WhcNMjUxMDI2MDMwOTM4WjAYMRYwFAYD VQQDEw02OGY0NTY3Mi00ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0MULGWfxmaqVf5s3+sNMjzDC9yPlUkizeaUvd2vWtAZarMFL26ZokF/7N4V /k5kNHHzn8lnzPTIiGehS1TGvdwFyjQBhCi7ImrlwUJcDBRUSxitPk+TDZLzxfa+ NI9NN96O+DsH8R/XfT8LylvYpAbRyxJ4zj50+UF3clavdV5Z4rkPGh0Y9no/L0Qg R3SYb98rZGM7sKoNFPdjUzKhJUjfLQj7jr5QtxZ+YafuMRiYZGfwdQ50NPJLth64 L5yWWLsoqc73HBKgO3D/AEWD28e9d6SIDaRIJZBE03R85c2zf49AFX+RITv2Mye8 gZ6fB5vOwCOSMhsDhu0bdGFNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEh1AxL TAKqFjO6HwM6XHaUohUJMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYXjD8xGLkWfRxUcnzvEaq06fDuzmi910GaKXGIsXSBKgj0fr76OUO qkuFn/pT1JSmTcUYfQeHkSLMmacFrxOJp8Sw8WJ1G3p1simNHR9aTqK+thFXxIli jKLYQVcFBFLAu+HnnLHJ3s2Eawlru+dkUpc0grNUHdByiudLSsdW1GMF6FY1xZKC dQantC+h42rNp4IR4HU/5JmTs3VAIRLpeH8G9T9v02ZwOU1QfRGtDa4Mmn5lRk3q sXtf9TbK5jMxao7FFqqYRUnuYZUyGP6ZV397AoipzJRYKHMdIpYEs0dogvCPbAjn BNsuaDlBWg8gGiH6dyNm/YYXb/Qd9CBc -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:50 2025 by rpki-client