$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: hQPKrqSzTTn3c/8lmqsNejjI/FO35R0vdy0DqQ/5MU8= Subject key identifier: 33:6F:D8:48:17:23:88:C2:12:B1:9D:35:AE:CC:B3:7D:9C:5C:F1:C4 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 062A Signing time: Sun 19 Oct 2025 00:21:18 +0000 Manifest this update: Sun 19 Oct 2025 00:21:17 +0000 Manifest next update: Sun 26 Oct 2025 00:21:17 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: Yh2LtJZ4ii8Zr7TI1C2n1lSBGk9utwdXwcnD5iVeIjI=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Oct 19 00:21:17 2025 GMT Not After : Oct 26 00:21:17 2025 GMT Subject: CN=68f42efe-4b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9a:fd:fc:c9:a3:ba:19:46:74:84:4f:3e:35: dd:09:e6:61:61:9f:66:0e:ed:3f:81:0f:e4:bb:b1: 3c:76:d9:7d:75:7a:0b:1d:68:a3:57:d2:f0:62:e5: 87:6e:1d:13:50:96:7a:a2:fe:96:41:e1:1c:98:3f: 43:1a:55:07:d6:f1:bd:fc:ba:16:91:be:f8:58:c9: 91:e7:35:39:97:64:3b:9c:4c:0e:85:87:ed:02:1b: ba:5d:0e:98:70:0d:cb:36:83:88:c4:80:20:c0:89: 83:5a:fb:c1:42:7d:63:d9:00:06:c8:75:91:81:f7: ed:bd:da:3b:62:95:49:16:4b:0d:01:be:b1:f9:90: 09:d8:de:80:2e:fe:3c:67:19:0a:86:c8:20:cb:ef: ac:5f:3e:3b:0f:44:6e:07:25:da:4e:03:ce:99:ec: 55:16:cb:c7:1d:27:e0:af:6b:c3:7e:8e:c9:b2:93: a9:4a:3b:cb:7f:f5:85:cb:c6:91:08:d1:84:3f:3a: 71:cf:fd:20:04:ee:64:46:23:f0:b3:ff:69:cf:ea: 1d:d9:aa:9d:26:30:74:04:49:2f:0a:7c:3c:dc:95: 58:5d:ab:06:17:df:40:b7:92:0f:74:36:4a:9b:62: c5:3b:53:49:50:b2:fc:99:3e:5f:25:81:bc:e0:c1: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:D8:48:17:23:88:C2:12:B1:9D:35:AE:CC:B3:7D:9C:5C:F1:C4 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a1:b4:68:62:b5:ee:8a:a8:ad:75:d8:c1:5c:1f:ae:ea:19: 7c:a6:c3:33:16:9c:3b:9b:7d:84:79:75:7b:d6:f7:b3:08:ba: 4b:d0:d8:2e:48:2c:37:d1:07:43:5b:9f:d8:bb:42:ca:54:e4: 9a:6c:a7:f2:4c:71:15:67:7f:87:a4:9c:78:fd:c4:94:50:4a: 88:6c:f4:10:dc:c5:e8:04:67:f3:39:55:48:93:32:d7:a1:08: 68:4a:c7:86:6b:76:f6:8e:9a:25:8b:23:58:be:72:90:85:b7: 9b:f6:0d:2b:e9:82:19:a0:7d:78:9d:0e:0d:60:9b:17:52:0e: f9:69:e4:a9:09:ee:5c:b8:f7:ae:c8:62:39:a0:4d:4e:d9:4a: 9a:e0:98:41:4e:fc:59:e8:37:b9:a1:2a:93:fe:90:1d:31:6f: 6a:d6:6c:78:4a:a4:86:0a:51:cf:24:c9:0f:58:b9:45:b2:d7: 03:ef:21:6b:78:1a:5a:52:38:6a:c5:15:fe:3c:ad:1a:a6:52: 0e:8b:d6:e9:a0:dd:b2:05:6b:0f:8d:ed:f0:fe:99:d5:e0:0e: 27:70:8e:32:68:72:a3:ad:b8:59:05:8a:e6:f1:c4:d6:60:90: fe:0d:af:f2:b8:9a:a6:3b:62:d3:7d:94:95:05:57:59:3d:4b: 63:9d:76:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUxMDE5MDAyMTE3WhcNMjUxMDI2MDAyMTE3WjAYMRYwFAYD VQQDEw02OGY0MmVmZS00Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75r9/MmjuhlGdIRPPjXdCeZhYZ9mDu0/gQ/ku7E8dtl9dXoLHWijV9LwYuWH bh0TUJZ6ov6WQeEcmD9DGlUH1vG9/LoWkb74WMmR5zU5l2Q7nEwOhYftAhu6XQ6Y cA3LNoOIxIAgwImDWvvBQn1j2QAGyHWRgfftvdo7YpVJFksNAb6x+ZAJ2N6ALv48 ZxkKhsggy++sXz47D0RuByXaTgPOmexVFsvHHSfgr2vDfo7JspOpSjvLf/WFy8aR CNGEPzpxz/0gBO5kRiPws/9pz+od2aqdJjB0BEkvCnw83JVYXasGF99At5IPdDZK m2LFO1NJULL8mT5fJYG84MHWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNv2EgX I4jCErGdNa7Ms32cXPHEMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxobRoYrXuiqitddjBXB+u6hl8psMzFpw7m32EeXV71vezCLpL0Ngu SCw30QdDW5/Yu0LKVOSabKfyTHEVZ3+HpJx4/cSUUEqIbPQQ3MXoBGfzOVVIkzLX oQhoSseGa3b2jpoliyNYvnKQhbeb9g0r6YIZoH14nQ4NYJsXUg75aeSpCe5cuPeu yGI5oE1O2Uqa4JhBTvxZ6De5oSqT/pAdMW9q1mx4SqSGClHPJMkPWLlFstcD7yFr eBpaUjhqxRX+PK0aplIOi9bpoN2yBWsPje3w/pnV4A4ncI4yaHKjrbhZBYrm8cTW YJD+Da/yuJqmO2LTfZSVBVdZPUtjnXZk -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:27 2025 by rpki-client