$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: /pBsZj1TYBbnq24GxQ9Kjp3Gw8GPBrQyOnJXR8C5IZQ= Subject key identifier: B9:80:1F:B4:3C:93:9C:A0:8B:2C:F9:B3:B4:06:15:BA:6F:57:B7:F3 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C26 Signing time: Sat 18 Oct 2025 19:34:27 +0000 Manifest this update: Sat 18 Oct 2025 19:34:26 +0000 Manifest next update: Sat 25 Oct 2025 19:34:26 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: Ko4ybizVzPw9dfGUGvUyrUvpK00Ac4sQGTOxyVa1xis=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Oct 18 19:34:26 2025 GMT Not After : Oct 25 19:34:26 2025 GMT Subject: CN=68f3ebc2-46e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:60:b4:63:69:36:68:e6:b2:f4:cd:c3:c1: e6:94:48:85:dc:c1:2a:7e:6e:40:f6:ea:de:d8:25: 73:69:58:f9:21:e7:8d:cf:e9:6f:c5:db:49:77:53: 89:20:57:21:d5:d4:7f:d1:35:2c:23:22:78:b7:0a: 28:7f:d2:72:de:58:ca:ff:7c:56:61:83:2e:67:79: 2c:12:2c:b3:57:be:22:d4:1e:41:4e:91:63:03:21: a5:68:34:2d:51:07:a8:4e:12:52:dd:18:9c:84:46: 70:bf:1a:ad:fe:03:a4:ce:97:da:85:4a:6d:27:c6: 35:17:3c:65:bf:bc:ec:a3:79:64:d6:c5:f8:c3:07: e3:a6:f5:a1:e2:73:0d:d8:98:3d:e3:c1:c9:ea:99: 4a:2f:aa:fb:35:59:1b:fb:f7:f4:04:4a:ea:4f:a0: f6:59:1e:5c:f5:5f:34:30:f8:2f:f2:3b:33:1c:fd: 27:c9:ba:eb:3f:bf:3b:dc:4c:5f:4f:e4:2d:29:e3: 13:24:e6:6b:00:0e:b2:59:9b:d9:ec:92:f5:d9:40: 0b:13:e7:c1:29:bd:4c:8b:3e:d5:82:88:31:4e:a8: 72:b5:97:5f:a3:5e:e0:12:22:af:b8:54:d8:61:6b: f1:82:09:56:87:8f:43:d4:70:c3:b7:de:80:7f:3e: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:1F:B4:3C:93:9C:A0:8B:2C:F9:B3:B4:06:15:BA:6F:57:B7:F3 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3a:9e:a7:e6:53:ff:20:df:55:c4:13:f9:0e:b7:0d:e9:3a: b3:5a:3a:43:4a:0c:17:f8:b4:f8:3c:d7:9d:2c:27:f4:c1:fe: b1:94:6e:92:6d:60:51:1f:52:a9:8d:b8:1e:e5:3c:18:69:77: 7c:a1:5a:41:15:09:8a:e4:e7:91:8c:85:a3:39:06:40:93:24: 90:e1:68:df:1b:72:96:f0:51:19:06:19:69:5e:3c:45:fc:26: e1:e6:68:df:a9:68:72:ad:ed:13:fc:3e:0b:5c:23:bd:09:27: 51:6a:7d:b2:64:0f:71:5c:c8:d2:92:2d:c9:97:9e:22:41:d8: a8:8b:e1:dd:6c:63:3b:e8:ff:25:24:94:c5:d3:79:b9:b8:3a: a3:86:28:d7:cc:e9:34:75:68:c8:db:85:ad:a8:b9:ca:83:fa: 4a:0b:5a:2e:ee:94:ae:cb:bb:2e:3a:2c:d4:ef:c0:19:46:66: 1f:f4:88:5e:e0:c1:fd:09:f1:66:fb:f4:02:f0:08:70:72:33: 0f:eb:c2:cb:5a:54:69:b5:91:a7:bb:5e:cc:b2:ad:eb:a5:21: ab:98:70:91:1d:b4:7b:f3:d8:13:34:c2:33:06:5f:7d:04:58: 09:61:15:13:53:b1:cc:68:bb:7c:14:f3:99:99:d2:ff:88:c7: 63:e9:3b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUxMDE4MTkzNDI2WhcNMjUxMDI1MTkzNDI2WjAYMRYwFAYD VQQDEw02OGYzZWJjMi00NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqShgtGNpNmjmsvTNw8HmlEiF3MEqfm5A9ure2CVzaVj5IeeNz+lvxdtJd1OJ IFch1dR/0TUsIyJ4twoof9Jy3ljK/3xWYYMuZ3ksEiyzV74i1B5BTpFjAyGlaDQt UQeoThJS3RichEZwvxqt/gOkzpfahUptJ8Y1Fzxlv7zso3lk1sX4wwfjpvWh4nMN 2Jg948HJ6plKL6r7NVkb+/f0BErqT6D2WR5c9V80MPgv8jszHP0nybrrP7873Exf T+QtKeMTJOZrAA6yWZvZ7JL12UALE+fBKb1Miz7VgogxTqhytZdfo17gEiKvuFTY YWvxgglWh49D1HDDt96Afz5Q8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmAH7Q8 k5ygiyz5s7QGFbpvV7fzMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSOp6n5lP/IN9VxBP5DrcN6TqzWjpDSgwX+LT4PNedLCf0wf6xlG6S bWBRH1Kpjbge5TwYaXd8oVpBFQmK5OeRjIWjOQZAkySQ4WjfG3KW8FEZBhlpXjxF /Cbh5mjfqWhyre0T/D4LXCO9CSdRan2yZA9xXMjSki3Jl54iQdioi+HdbGM76P8l JJTF03m5uDqjhijXzOk0dWjI24WtqLnKg/pKC1ou7pSuy7suOizU78AZRmYf9Ihe 4MH9CfFm+/QC8AhwcjMP68LLWlRptZGnu17Msq3rpSGrmHCRHbR789gTNMIzBl99 BFgJYRUTU7HMaLt8FPOZmdL/iMdj6TvA -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:30 2025 by rpki-client