$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: Thpuhs7Dg9+iaYLY1/aRLQ1QzFu1U4iwP1Zq/OOS7ZQ= Subject key identifier: 47:4D:5B:61:F0:4F:7B:66:19:DE:ED:BD:04:F3:18:13:51:67:20:85 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 34D4 Signing time: Mon 20 Oct 2025 15:13:40 +0000 Manifest this update: Mon 20 Oct 2025 15:13:39 +0000 Manifest next update: Mon 27 Oct 2025 15:13:39 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: 64tyoEokNxOGRVvzfe8PtwzYSTIdiQADxiSsyWRhHzc=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Oct 20 15:13:39 2025 GMT Not After : Oct 27 15:13:39 2025 GMT Subject: CN=68f651a4-63c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:52:a7:97:bb:ca:04:04:28:25:f0:e7:0e: 01:79:da:1a:97:4a:73:68:40:14:61:37:fa:63:5f: 99:ef:89:2a:fc:2b:83:6b:fa:08:9b:86:ea:1c:2f: d0:d5:73:d4:bb:25:4c:46:f4:40:16:0f:29:63:b5: 2e:a1:98:fd:e4:a6:ed:50:1b:a2:ad:18:8a:77:d2: 2f:64:7e:34:c8:92:b6:f9:c1:94:44:d3:0b:04:68: fd:22:a9:c7:7f:26:11:2b:75:4f:76:a8:a5:ce:01: 89:15:85:25:f3:72:b1:d3:40:0b:00:16:2f:8b:d1: 89:78:ef:5e:09:08:cb:b0:4f:eb:c2:cc:f9:e1:5c: f4:6b:c6:be:21:77:1f:92:fe:1e:13:6f:be:4c:ab: c3:d0:34:f6:c5:5b:e7:6e:da:f4:87:b0:73:5f:ec: 52:ef:b9:3d:9e:bf:cc:ad:d8:81:13:cc:40:10:a8: 1e:47:fd:50:c4:dd:e3:f2:18:96:57:ab:1c:da:c2: 74:21:45:29:af:3f:2e:f3:f9:13:cb:f3:91:53:2d: 04:35:7b:f4:64:8f:70:30:ea:18:03:a5:44:65:33: 31:9d:39:ad:f3:26:43:f5:8f:ea:65:a4:f9:ab:51: e2:88:b5:8c:42:98:52:fd:6c:1b:9f:bb:ab:be:9e: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:5B:61:F0:4F:7B:66:19:DE:ED:BD:04:F3:18:13:51:67:20:85 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:30:dc:6e:d2:25:0a:3f:0d:bf:57:fd:c5:de:61:e0:b8:d3: 1c:1d:49:a1:57:2e:a8:17:9b:13:a3:a7:1d:56:22:76:8a:73: 79:11:0a:4c:21:5a:28:a6:dc:71:4d:f5:5a:4a:56:ac:1d:ec: 04:75:8e:41:96:88:55:e5:da:a0:11:30:4a:9e:10:df:2c:33: 3c:cf:70:0a:bc:29:e2:32:d5:ba:40:58:72:0c:a8:17:55:f4: 90:06:09:c7:e4:8a:f0:34:44:0f:c0:12:f0:fb:94:05:0a:34: 96:83:2c:d6:73:3c:e9:d3:ef:10:cb:6b:58:b8:16:f8:b6:52: 48:1b:de:22:07:87:3a:ee:e7:13:bc:34:02:c0:0f:a3:05:44: 06:a0:8e:2c:e1:92:0c:e5:f2:98:94:47:17:98:c6:49:78:4d: 54:5e:e3:03:0b:3c:31:92:ab:7a:21:55:97:6a:f4:0d:86:f5: d1:42:7c:54:cb:78:48:9a:e3:7c:03:ab:3d:81:f3:6e:3d:c4: 7b:5d:03:02:90:12:18:33:0f:19:ce:28:71:78:0a:fd:9f:a2: 3e:10:5f:e8:35:74:ef:09:59:59:09:a8:fc:25:ac:f2:4c:3c: 5b:41:cc:36:1a:53:cd:64:f1:87:f6:30:59:5a:1e:a7:38:e1: 1e:3d:5b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUxMDIwMTUxMzM5WhcNMjUxMDI3MTUxMzM5WjAYMRYwFAYD VQQDEw02OGY2NTFhNC02M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u1Sp5e7ygQEKCXw5w4Bedoal0pzaEAUYTf6Y1+Z74kq/CuDa/oIm4bqHC/Q 1XPUuyVMRvRAFg8pY7UuoZj95KbtUBuirRiKd9IvZH40yJK2+cGURNMLBGj9IqnH fyYRK3VPdqilzgGJFYUl83Kx00ALABYvi9GJeO9eCQjLsE/rwsz54Vz0a8a+IXcf kv4eE2++TKvD0DT2xVvnbtr0h7BzX+xS77k9nr/MrdiBE8xAEKgeR/1QxN3j8hiW V6sc2sJ0IUUprz8u8/kTy/ORUy0ENXv0ZI9wMOoYA6VEZTMxnTmt8yZD9Y/qZaT5 q1HiiLWMQphS/Wwbn7urvp4R+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdNW2Hw T3tmGd7tvQTzGBNRZyCFMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFMNxu0iUKPw2/V/3F3mHguNMcHUmhVy6oF5sTo6cdViJ2inN5EQpM IVooptxxTfVaSlasHewEdY5BlohV5dqgETBKnhDfLDM8z3AKvCniMtW6QFhyDKgX VfSQBgnH5IrwNEQPwBLw+5QFCjSWgyzWczzp0+8Qy2tYuBb4tlJIG94iB4c67ucT vDQCwA+jBUQGoI4s4ZIM5fKYlEcXmMZJeE1UXuMDCzwxkqt6IVWXavQNhvXRQnxU y3hImuN8A6s9gfNuPcR7XQMCkBIYMw8ZzihxeAr9n6I+EF/oNXTvCVlZCaj8Jazy TDxbQcw2GlPNZPGH9jBZWh6nOOEePVsk -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:08 2025 by rpki-client