$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: WOa8bTDZ7nd2d3I/WMo87Ccny6dbJYg5Z2WT0Rd6VZQ= Subject key identifier: F9:C6:25:21:23:0F:3D:A0:24:94:E8:60:B7:DA:DF:79:EE:94:46:DD Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0CC8 Signing time: Sat 18 Oct 2025 18:52:34 +0000 Manifest this update: Sat 18 Oct 2025 18:52:33 +0000 Manifest next update: Sat 25 Oct 2025 18:52:33 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 7VUEjweFL66RXp81yviUwVCJGswbTKZy6WaK9SbcKuY=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Oct 18 18:52:33 2025 GMT Not After : Oct 25 18:52:33 2025 GMT Subject: CN=68f3e1f1-26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:67:94:84:9c:bd:cb:65:a0:7e:4a:df:38: ad:53:45:01:9a:8a:0e:d8:d1:57:0b:c0:23:d5:6c: db:44:b5:25:56:10:c4:8f:81:54:64:f3:a2:4c:a7: 6e:af:81:60:3b:57:a9:ca:02:6c:9d:53:27:c7:f2: ec:59:4e:68:ac:b0:cc:6f:be:53:45:b4:d8:29:a1: 4b:86:ba:6f:90:db:63:df:ab:51:82:bb:b3:5b:cb: 95:77:13:12:02:c7:91:bb:7a:da:00:dc:07:24:04: 93:67:68:ca:8d:17:44:5d:43:b0:5c:99:a4:b8:25: d9:f9:c4:51:61:1d:12:1e:d1:35:25:df:46:79:46: 9d:2f:5c:ab:06:b1:80:78:e1:03:f9:f4:90:7a:d2: 23:42:57:a8:48:cf:b9:54:47:1d:60:87:55:f4:b5: 36:80:8a:c4:75:5f:e4:85:4b:be:03:9e:c7:ef:fc: d3:c9:76:21:4b:88:91:f0:36:1d:93:77:8b:c6:8b: c2:80:ce:d9:d5:0e:60:10:81:79:d4:5f:f0:fc:a9: 06:b1:fc:72:4c:b7:ad:0f:00:b2:79:b6:e0:a7:7b: 49:ef:16:b7:41:b8:d5:1f:cc:46:69:42:68:09:c8: 14:30:b0:75:c3:6f:6a:fa:09:67:86:05:5a:aa:ad: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:25:21:23:0F:3D:A0:24:94:E8:60:B7:DA:DF:79:EE:94:46:DD X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:68:f6:dd:e8:8f:3d:ee:d6:a1:7c:14:5a:89:04:93:28:bc: d5:64:6c:2d:d4:6e:03:9b:17:c5:20:15:83:5c:51:05:45:65: d0:f2:18:8e:fb:cf:65:ac:c5:63:0b:6d:34:19:3d:a4:c9:8c: 1a:da:27:9d:4b:c3:a7:08:af:e6:85:13:2e:77:ea:5b:73:37: f3:f1:c1:99:21:83:51:4c:0a:2b:96:8c:73:24:fb:1d:db:0d: 44:a1:10:6d:f5:a3:22:bb:4d:27:cc:16:aa:17:42:c5:b4:d7: 57:ff:76:7b:9c:cb:d8:f0:af:95:f2:ed:c2:74:2a:c1:30:12: a8:d9:5d:ba:cd:be:4a:e0:72:43:07:37:a0:da:1b:4f:9e:a5: 1a:1e:16:ae:bf:e7:ad:dc:63:74:48:36:5b:b2:65:f8:d4:0a: 8e:54:9e:89:4a:81:d6:5b:f2:42:db:f3:2e:d5:ff:9b:cf:2e: b3:db:9c:25:72:c3:45:17:25:37:0e:2d:f4:16:59:41:2b:4b: 98:47:20:f3:55:2f:50:6b:1a:9f:93:fa:78:0f:27:3a:5d:c4: 89:e0:31:98:a1:7b:ea:ff:23:a7:1c:22:25:58:de:a5:6d:44: 25:d7:6d:2b:b8:49:48:b7:08:32:8f:44:02:40:df:ee:bb:0e: 82:dd:85:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUxMDE4MTg1MjMzWhcNMjUxMDI1MTg1MjMzWjAYMRYwFAYD VQQDEw02OGYzZTFmMS0yNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJhnlIScvctloH5K3zitU0UBmooO2NFXC8Aj1WzbRLUlVhDEj4FUZPOiTKdu r4FgO1epygJsnVMnx/LsWU5orLDMb75TRbTYKaFLhrpvkNtj36tRgruzW8uVdxMS AseRu3raANwHJASTZ2jKjRdEXUOwXJmkuCXZ+cRRYR0SHtE1Jd9GeUadL1yrBrGA eOED+fSQetIjQleoSM+5VEcdYIdV9LU2gIrEdV/khUu+A57H7/zTyXYhS4iR8DYd k3eLxovCgM7Z1Q5gEIF51F/w/KkGsfxyTLetDwCyebbgp3tJ7xa3QbjVH8xGaUJo CcgUMLB1w29q+glnhgVaqq1j9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnGJSEj Dz2gJJToYLfa33nulEbdMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwaPbd6I897tahfBRaiQSTKLzVZGwt1G4DmxfFIBWDXFEFRWXQ8hiO +89lrMVjC200GT2kyYwa2iedS8OnCK/mhRMud+pbczfz8cGZIYNRTAorloxzJPsd 2w1EoRBt9aMiu00nzBaqF0LFtNdX/3Z7nMvY8K+V8u3CdCrBMBKo2V26zb5K4HJD Bzeg2htPnqUaHhauv+et3GN0SDZbsmX41AqOVJ6JSoHWW/JC2/Mu1f+bzy6z25wl csNFFyU3Di30FllBK0uYRyDzVS9Qaxqfk/p4Dyc6XcSJ4DGYoXvq/yOnHCIlWN6l bUQl120ruElItwgyj0QCQN/uuw6C3YXT -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:45 2025 by rpki-client