$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: w0HVn1RqJhNP8uswjmT9PcjrmF39L5LrWOBITKsHHc4= Subject key identifier: C8:A8:71:2C:E3:1B:B7:D3:D1:0B:A3:C6:B4:0A:4B:23:6E:1E:8C:DF Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 017C Signing time: Sun 19 Oct 2025 06:23:35 +0000 Manifest this update: Sun 19 Oct 2025 06:23:34 +0000 Manifest next update: Sun 26 Oct 2025 06:23:34 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: 1Rzh8VctX8RlQeRX/tiqmt/9p0mbiA+u06o06UdWCZc=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: Oct 19 06:23:34 2025 GMT Not After : Oct 26 06:23:34 2025 GMT Subject: CN=68f483e6-9377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:56:20:30:3f:79:41:ee:f2:22:46:97:e8: a3:89:c5:da:8a:7d:b4:7c:83:d4:e9:71:b3:7b:21: ea:6b:a9:1d:e9:04:da:8f:4f:f5:c8:42:23:4e:9d: 43:57:5b:f2:78:41:16:cc:72:09:31:6b:06:2b:6b: 39:77:38:43:ea:3b:18:7f:96:01:e4:a9:80:4d:13: 3e:e2:9d:c7:72:0a:4f:0c:68:e2:4a:06:e8:f0:61: 2e:ca:29:9c:4b:71:f8:c3:16:6c:ad:a6:7f:47:7e: f9:fe:be:a3:a9:3f:78:c6:df:67:a3:9f:0c:df:fa: 89:34:eb:71:34:d3:2f:1f:ca:34:81:73:0a:e7:69: 6c:42:de:78:bc:a5:dc:17:ec:ac:17:1b:31:9e:97: 76:5e:96:4a:f4:43:23:b7:28:7a:8d:ba:c1:f1:f1: 6d:06:f3:a6:0b:f7:7b:ea:1b:58:ed:62:0d:ef:22: 18:a9:34:da:89:2c:c6:dd:ec:50:21:9e:6c:06:5b: 0f:69:45:54:6a:6d:d6:47:69:ef:b2:20:05:f2:13: cc:a3:53:6f:e5:3b:25:1c:14:98:91:d2:7b:27:f0: 31:9c:4c:1c:3f:5d:64:bc:d6:f3:c7:8b:39:ea:b3: e0:15:23:8d:0d:f3:d8:68:1c:aa:4f:66:64:b2:45: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:71:2C:E3:1B:B7:D3:D1:0B:A3:C6:B4:0A:4B:23:6E:1E:8C:DF X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:da:86:1d:89:87:c8:ae:1c:2e:f0:d0:f3:29:57:75:1c:47: 0b:e4:b6:20:2a:43:2a:15:b6:48:48:f8:a2:37:db:ea:56:eb: 71:0e:41:5c:95:1c:a2:71:46:27:6a:54:f1:fb:30:ca:ea:9a: b4:b2:64:47:a9:cf:8f:5d:c4:dd:63:5d:cf:a7:59:b1:a1:c6: c1:3f:fd:32:d3:0d:94:75:ce:3e:b5:71:d2:0a:d2:1f:03:67: fe:54:a0:d7:8e:d5:ec:e4:85:58:56:6c:dc:25:5a:e5:f5:e0: ea:4f:53:72:0a:63:38:70:28:88:85:df:ab:77:a2:87:9e:f1: 5a:fc:70:87:54:09:2c:dc:80:9d:df:42:a9:48:da:ab:94:9b: e6:45:9c:f8:25:ab:9c:40:1f:24:67:6a:aa:ad:b1:8e:c1:37: e5:4d:3d:d2:59:00:db:0a:f2:72:6b:29:56:39:1b:cb:8c:a1: 26:d9:34:19:8c:6f:75:3c:5b:f6:76:4e:f9:f3:bd:c3:1f:dd: 76:56:76:f5:30:d4:30:7d:1b:3c:35:36:65:f7:a2:2a:ce:41: 9b:a8:52:0e:75:98:58:ee:15:e7:06:f9:d7:54:8f:a3:fd:fe: 71:6f:03:27:47:b9:cd:26:3b:4a:82:53:67:8b:66:bc:d8:74: 64:4d:b3:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUxMDE5MDYyMzM0WhcNMjUxMDI2MDYyMzM0WjAYMRYwFAYD VQQDEw02OGY0ODNlNi05Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFJWIDA/eUHu8iJGl+ijicXain20fIPU6XGzeyHqa6kd6QTaj0/1yEIjTp1D V1vyeEEWzHIJMWsGK2s5dzhD6jsYf5YB5KmATRM+4p3HcgpPDGjiSgbo8GEuyimc S3H4wxZsraZ/R375/r6jqT94xt9no58M3/qJNOtxNNMvH8o0gXMK52lsQt54vKXc F+ysFxsxnpd2XpZK9EMjtyh6jbrB8fFtBvOmC/d76htY7WIN7yIYqTTaiSzG3exQ IZ5sBlsPaUVUam3WR2nvsiAF8hPMo1Nv5TslHBSYkdJ7J/AxnEwcP11kvNbzx4s5 6rPgFSONDfPYaByqT2ZkskVKcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiocSzj G7fT0QujxrQKSyNuHozfMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62oYdiYfIrhwu8NDzKVd1HEcL5LYgKkMqFbZISPiiN9vqVutxDkFc lRyicUYnalTx+zDK6pq0smRHqc+PXcTdY13Pp1mxocbBP/0y0w2Udc4+tXHSCtIf A2f+VKDXjtXs5IVYVmzcJVrl9eDqT1NyCmM4cCiIhd+rd6KHnvFa/HCHVAks3ICd 30KpSNqrlJvmRZz4JaucQB8kZ2qqrbGOwTflTT3SWQDbCvJyaylWORvLjKEm2TQZ jG91PFv2dk75873DH912Vnb1MNQwfRs8NTZl96IqzkGbqFIOdZhY7hXnBvnXVI+j /f5xbwMnR7nNJjtKglNni2a82HRkTbOx -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:35 2025 by rpki-client