$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: KblCAI/coZf8FQU+3RwmSNG4tyxFTHFsgmtXJMQrLuw= Subject key identifier: E2:EF:33:E5:1C:27:A8:04:31:E2:76:46:53:AD:AD:3E:F9:E2:45:F1 Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 013B Signing time: Sun 19 Oct 2025 07:18:59 +0000 Manifest this update: Sun 19 Oct 2025 07:18:58 +0000 Manifest next update: Sun 26 Oct 2025 07:18:58 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: VfNAlv/9RW2Bbzi1rkA/eS36gnGVSAHAtQMS3fOHtPo=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Oct 19 07:18:58 2025 GMT Not After : Oct 26 07:18:58 2025 GMT Subject: CN=68f490e2-3f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:5c:7a:1a:95:20:bf:9c:86:6d:f7:d4:54: 86:3c:05:6c:c1:8e:c2:ee:66:2d:c2:90:56:16:c4: f2:d2:50:2f:9d:d3:06:31:29:8d:6b:fd:0a:7c:95: 03:e6:7b:65:ab:63:88:1f:5e:a3:a5:4e:0e:d2:7c: e2:6e:ba:33:88:8f:f8:1b:0b:a9:d2:a6:f4:28:d4: 16:59:0f:e3:99:f9:3e:98:23:16:4d:ff:60:89:bf: 2d:34:2b:a8:8c:90:9d:4b:0d:7a:e4:42:46:2a:09: b4:12:21:b4:ff:0e:39:23:f7:c4:59:d5:4d:a3:ae: ee:0e:9e:57:4c:6a:27:f2:a3:42:8d:03:62:02:a2: c1:c8:b0:fc:ef:15:fc:a2:43:8d:4b:20:c0:67:29: 91:77:32:4b:db:78:56:cd:ee:e9:37:f5:c1:4f:39: e6:28:14:3c:4a:0d:40:8b:da:60:1f:ef:99:65:89: 46:11:1a:78:41:ff:39:d0:84:28:b9:26:87:ad:79: ef:73:b4:01:16:1c:82:eb:fd:89:e3:f8:8f:73:79: a3:55:03:ba:f3:8f:b5:dc:9f:73:ff:89:79:69:5e: 6b:fd:b9:18:55:c0:b2:95:65:f5:1d:ce:c0:b7:22: f1:42:8d:9d:a0:13:d1:84:52:15:6b:19:b8:b1:0c: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EF:33:E5:1C:27:A8:04:31:E2:76:46:53:AD:AD:3E:F9:E2:45:F1 X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:36:f3:71:9d:6e:4f:61:9c:f8:df:63:56:c0:da:b1:e9:c3: 91:30:39:d9:d1:d8:17:6b:c9:2e:d7:52:8d:7b:bf:bb:7c:91: a7:73:6a:5e:bc:e3:8f:91:5d:a5:1f:8a:e5:27:54:b5:bf:18: 9c:d6:71:5d:c0:97:38:37:ce:32:ed:ee:2a:c5:6e:1b:dd:46: 8f:ed:25:0e:35:8e:7a:2b:e3:80:c2:18:aa:65:c6:c1:97:7c: 9d:7a:62:a4:3e:46:d8:7a:f4:73:39:ef:04:10:27:d3:3f:79: 26:7a:8f:26:05:2a:e4:73:a0:1d:73:9f:8d:99:bd:de:34:59: b5:64:96:14:e2:30:cc:d0:f5:cf:ce:a2:ea:2f:aa:ca:31:34: 5d:95:cc:c9:86:8b:3a:cf:9f:f5:3c:63:f8:4e:f3:1f:ec:ba: 8f:31:34:b6:a1:72:1b:9d:dc:25:0f:1d:4f:87:ec:43:8f:3d: 9d:61:b8:3b:41:bb:56:d4:20:52:6b:3b:22:f3:dd:8e:68:92: f6:d9:7b:5d:50:21:e3:dd:ae:e3:e8:0d:90:14:53:55:f6:a7: 45:b8:dc:01:ad:7f:a7:4f:92:39:fe:39:e8:51:1a:cf:24:a2: 74:4a:24:14:9f:a6:e1:bd:e9:80:5d:d7:8c:c7:99:3c:a1:29: 5b:44:c4:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjUxMDE5MDcxODU4WhcNMjUxMDI2MDcxODU4WjAYMRYwFAYD VQQDEw02OGY0OTBlMi0zZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx5cehqVIL+chm331FSGPAVswY7C7mYtwpBWFsTy0lAvndMGMSmNa/0KfJUD 5ntlq2OIH16jpU4O0nzibroziI/4Gwup0qb0KNQWWQ/jmfk+mCMWTf9gib8tNCuo jJCdSw165EJGKgm0EiG0/w45I/fEWdVNo67uDp5XTGon8qNCjQNiAqLByLD87xX8 okONSyDAZymRdzJL23hWze7pN/XBTznmKBQ8Sg1Ai9pgH++ZZYlGERp4Qf850IQo uSaHrXnvc7QBFhyC6/2J4/iPc3mjVQO684+13J9z/4l5aV5r/bkYVcCylWX1Hc7A tyLxQo2doBPRhFIVaxm4sQy1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLvM+Uc J6gEMeJ2RlOtrT754kXxMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMNvNxnW5PYZz432NWwNqx6cORMDnZ0dgXa8ku11KNe7+7fJGnc2pe vOOPkV2lH4rlJ1S1vxic1nFdwJc4N84y7e4qxW4b3UaP7SUONY56K+OAwhiqZcbB l3ydemKkPkbYevRzOe8EECfTP3kmeo8mBSrkc6Adc5+Nmb3eNFm1ZJYU4jDM0PXP zqLqL6rKMTRdlczJhos6z5/1PGP4TvMf7LqPMTS2oXIbndwlDx1Ph+xDjz2dYbg7 QbtW1CBSazsi892OaJL22XtdUCHj3a7j6A2QFFNV9qdFuNwBrX+nT5I5/jnoURrP JKJ0SiQUn6bhvemAXdeMx5k8oSlbRMT0 -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:26 2025 by rpki-client