$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: a30PJKZLJMDocTYsVcPA7ba2Yu+vceBcDHLdZXs0kF4= Subject key identifier: 66:28:DC:A5:3B:A7:7D:4A:34:8C:E7:53:55:9F:51:E2:7B:82:AB:31 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 350F Signing time: Sat 18 Oct 2025 14:17:18 +0000 Manifest this update: Sat 18 Oct 2025 14:17:17 +0000 Manifest next update: Sat 25 Oct 2025 14:17:17 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: n8zq5qtCSz/ytN2G6FpA0kalFLr0OhVu4seifTFCFTM=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Oct 18 14:17:17 2025 GMT Not After : Oct 25 14:17:17 2025 GMT Subject: CN=68f3a16d-5f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:24:dd:18:b4:40:83:7b:e3:70:ad:ba:94: be:7c:75:95:ad:5c:ff:25:d6:86:41:17:7b:a0:f7: a5:64:70:3e:13:38:55:91:b9:e0:40:9c:57:ef:36: 0d:39:a5:a1:a4:5b:95:6a:5c:16:a0:c5:8e:96:9f: bc:59:dc:c5:74:8c:11:23:b6:57:b7:6a:25:d1:21: 17:cb:24:f2:d5:6e:38:4d:20:70:50:9f:79:55:51: db:e3:0f:13:3c:56:dd:75:0e:df:44:8a:37:5f:32: e0:7c:78:ff:34:a8:f6:a0:9d:34:27:9a:f6:9a:fc: 7d:0d:f7:dd:ee:e3:a8:b7:6f:ab:2c:00:88:38:36: 81:44:94:2e:3b:92:eb:ad:4c:f5:9b:35:de:1d:ad: 58:e2:51:4e:8b:42:f4:df:6f:33:0d:5e:60:75:85: be:32:96:8c:30:ca:0c:b5:b2:b9:59:21:e0:71:3d: 5c:c4:c8:e4:72:65:6a:3d:71:5d:ce:48:e8:fb:c0: 85:a2:92:36:f0:35:f2:b2:97:c4:2c:b7:d7:43:0e: cb:0a:1f:02:01:0f:08:67:fa:bc:b7:30:1e:b6:54: 51:75:d3:12:89:c8:80:6a:b3:a1:9e:6d:27:d5:06: 0d:81:a6:b8:ba:7e:36:24:f3:69:aa:a9:da:97:c9: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:DC:A5:3B:A7:7D:4A:34:8C:E7:53:55:9F:51:E2:7B:82:AB:31 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:aa:59:43:53:52:31:d0:6d:8f:b7:51:e5:b5:06:3e:1f:13: e1:08:2c:34:43:87:50:ad:8e:48:f4:90:12:23:f3:f4:43:32: 1e:c8:37:70:40:71:79:ae:fd:3a:6d:1e:d8:6c:8b:08:62:a6: 46:9b:3b:ec:51:16:19:0d:26:af:8e:73:13:e4:03:3e:58:1c: 71:9c:ef:33:4c:23:7c:e7:8a:db:04:cf:5e:3e:a6:0f:d5:5e: 73:b1:c6:eb:cc:38:6e:96:b7:75:c1:76:b8:6f:b2:86:8b:10: b0:32:6f:d1:57:1e:dc:d7:85:70:89:d8:37:ce:2c:db:1b:d6: 17:a9:f3:09:82:ef:da:55:83:dc:3b:d1:e7:c8:c8:e3:9d:22: c2:85:6e:0b:c8:d7:96:38:01:65:5a:6d:06:3e:13:2a:ae:55: a0:84:8b:7b:35:70:4a:49:2a:9d:26:59:ea:3d:ea:13:1e:fd: cb:a5:76:c2:c6:9c:46:8b:28:80:8a:29:38:f1:10:c8:33:21: f2:e7:8c:21:60:50:5c:fc:85:96:bf:1a:91:a0:ce:66:b4:9f: c5:c2:b7:e2:2a:98:fa:5b:14:55:21:c9:95:b0:de:68:4e:0c: 6e:b8:9c:d8:58:b3:7e:b3:92:8b:ec:33:ee:bf:8f:ef:ab:c1: 24:b0:61:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjUxMDE4MTQxNzE3WhcNMjUxMDI1MTQxNzE3WjAYMRYwFAYD VQQDEw02OGYzYTE2ZC01ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0A4k3Ri0QIN743CtupS+fHWVrVz/JdaGQRd7oPelZHA+EzhVkbngQJxX7zYN OaWhpFuValwWoMWOlp+8WdzFdIwRI7ZXt2ol0SEXyyTy1W44TSBwUJ95VVHb4w8T PFbddQ7fRIo3XzLgfHj/NKj2oJ00J5r2mvx9Dffd7uOot2+rLACIODaBRJQuO5Lr rUz1mzXeHa1Y4lFOi0L0328zDV5gdYW+MpaMMMoMtbK5WSHgcT1cxMjkcmVqPXFd zkjo+8CFopI28DXyspfELLfXQw7LCh8CAQ8IZ/q8tzAetlRRddMSiciAarOhnm0n 1QYNgaa4un42JPNpqqnal8kRmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYo3KU7 p31KNIznU1WfUeJ7gqsxMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHqllDU1Ix0G2Pt1HltQY+HxPhCCw0Q4dQrY5I9JASI/P0QzIeyDdw QHF5rv06bR7YbIsIYqZGmzvsURYZDSavjnMT5AM+WBxxnO8zTCN854rbBM9ePqYP 1V5zscbrzDhulrd1wXa4b7KGixCwMm/RVx7c14Vwidg3zizbG9YXqfMJgu/aVYPc O9HnyMjjnSLChW4LyNeWOAFlWm0GPhMqrlWghIt7NXBKSSqdJlnqPeoTHv3LpXbC xpxGiyiAiik48RDIMyHy54whYFBc/IWWvxqRoM5mtJ/FwrfiKpj6WxRVIcmVsN5o TgxuuJzYWLN+s5KL7DPuv4/vq8EksGEK -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:17 2025 by rpki-client