$ rpki-client -vvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft File: taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json) Hash identifier: kvwwyXNllfxB8+PHFs3Q8rWPrnyyjtTh/FgggLcnSG0= Subject key identifier: B1:04:38:CC:56:9F:0D:BC:C4:1D:90:49:49:44:55:F5:D8:D8:20:45 Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19 Certificate issuer: /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft Manifest number: 03 Signing time: Sun 19 Oct 2025 11:42:39 +0000 Manifest this update: Sun 19 Oct 2025 11:42:38 +0000 Manifest next update: Sun 26 Oct 2025 11:42:38 +0000 Files and hashes: 1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: TvJLWe39I64FYTurb6lZh0j4S8DtfRtiX13d9HYpIsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19 Validity Not Before: Oct 19 11:42:38 2025 GMT Not After : Oct 26 11:42:38 2025 GMT Subject: CN=68f4ceaf-d0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:af:ea:7b:b9:ad:be:b6:bb:c9:63:0a:3b: 25:85:6e:a1:72:ce:d4:81:8c:dc:87:85:64:f9:6f: 3a:c6:7a:71:81:85:13:cf:cb:b6:97:1b:fb:de:de: b0:2f:de:0c:da:48:db:dc:ef:37:d9:4e:ed:33:81: 00:3e:ad:e5:f7:10:22:c0:a3:52:ed:00:b1:99:76: 20:9b:62:42:87:83:f2:82:d3:a5:64:8f:e1:0e:8c: 82:21:17:84:32:21:35:a1:43:69:23:20:d6:8e:29: 87:0c:53:ba:dc:1d:ce:7e:5b:3c:2e:1e:d6:82:bb: aa:9c:17:37:87:0f:91:f5:d9:7e:55:4c:c4:6e:3c: c7:22:dd:07:71:bb:ed:52:93:4e:7e:97:be:63:a4: 57:1e:d6:7d:a1:6d:e2:37:67:d0:be:22:e2:69:77: 2e:2c:cb:94:93:d6:91:09:0e:7b:6d:1e:ba:a5:4c: f5:cb:c4:ef:1c:d7:7f:d2:aa:f0:93:d9:59:d7:1d: 14:9e:ff:ef:1b:c3:ba:17:cf:3b:99:c9:10:9e:1a: 87:ef:33:a3:da:06:4b:cb:ec:a9:5e:5c:1b:90:19: 89:11:13:5f:87:84:ec:43:26:27:fd:33:41:20:d8: af:25:49:a0:ca:54:35:9f:93:b5:f1:18:4b:42:c4: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:04:38:CC:56:9F:0D:BC:C4:1D:90:49:49:44:55:F5:D8:D8:20:45 X509v3 Authority Key Identifier: keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:49:fd:40:23:ad:fb:2e:d6:b3:d7:25:6c:d7:fb:99:22:2e: 09:49:f4:94:2d:3b:fc:b8:68:93:ea:10:3e:1d:bd:32:01:d6: 21:22:a4:54:a8:c3:18:5e:d9:27:8b:59:30:25:46:dd:31:60: a5:02:f7:a2:d4:54:57:fe:98:83:60:c8:c3:36:86:51:c2:ac: b8:2d:50:db:13:4f:5f:fe:0c:3b:e8:a4:44:30:da:fc:47:b7: bf:e1:e3:18:0d:d5:4a:44:f6:6b:37:b9:97:01:75:e7:70:08: 03:e0:b4:8c:60:f6:f4:19:0b:2c:22:45:48:36:39:8e:74:41: 47:2b:08:83:7a:10:e6:91:c3:45:5f:23:82:94:1e:29:df:51: 48:c9:35:c6:db:14:f9:5e:0f:65:4e:f0:68:66:40:09:bd:e9: db:84:58:17:6d:f6:e2:33:ac:0a:00:2e:bb:16:35:0f:ab:fe: 68:f2:4e:4a:9a:c1:7b:fc:35:b3:21:0e:af:a5:56:83:16:68: 71:a4:02:1e:0a:c8:5f:c2:85:fe:3d:0b:7c:d7:80:dc:7b:4d: 3c:62:1e:a2:f4:57:03:59:f7:32:5f:ba:96:d5:f5:be:53:40: 30:21:bb:51:bd:7e:ac:ec:de:b0:ab:d6:81:9e:45:71:63:53: 1a:1d:9c:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEFCODExMC8GA1UEBRMoQjVBQTA5MUQ0N0I5NkZGRkUyOTY0MzREMDFDNjQ1NEI0 RTFDOUUxOTAeFw0yNTEwMTkxMTQyMzhaFw0yNTEwMjYxMTQyMzhaMBgxFjAUBgNV BAMTDTY4ZjRjZWFmLWQwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1eK/qe7mtvra7yWMKOyWFbqFyztSBjNyHhWT5bzrGenGBhRPPy7aXG/ve3rAv 3gzaSNvc7zfZTu0zgQA+reX3ECLAo1LtALGZdiCbYkKHg/KC06Vkj+EOjIIhF4Qy ITWhQ2kjINaOKYcMU7rcHc5+WzwuHtaCu6qcFzeHD5H12X5VTMRuPMci3Qdxu+1S k05+l75jpFce1n2hbeI3Z9C+IuJpdy4sy5ST1pEJDnttHrqlTPXLxO8c13/SqvCT 2VnXHRSe/+8bw7oXzzuZyRCeGofvM6PaBkvL7KleXBuQGYkRE1+HhOxDJif9M0Eg 2K8lSaDKVDWfk7XxGEtCxBMzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsQQ4zFaf DbzEHZBJSURV9djYIEUwHwYDVR0jBBgwFoAUtaoJHUe5b//ilkNNAcZFS04cnhkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QUI4LzYzRDNCMzZFQUI3 MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9faWxrTk5BY1pGUzA0Y25o ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGFvSkhVZTViX19pbGtOTkFjWkZTMDRjbmhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QUI4LzYzRDNCMzZFQUI3MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9f aWxrTk5BY1pGUzA0Y25oay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhJ/UAjrfsu1rPXJWzX+5kiLglJ9JQtO/y4aJPqED4dvTIB1iEipFSo wxhe2SeLWTAlRt0xYKUC96LUVFf+mINgyMM2hlHCrLgtUNsTT1/+DDvopEQw2vxH t7/h4xgN1UpE9ms3uZcBdedwCAPgtIxg9vQZCywiRUg2OY50QUcrCIN6EOaRw0Vf I4KUHinfUUjJNcbbFPleD2VO8GhmQAm96duEWBdt9uIzrAoALrsWNQ+r/mjyTkqa wXv8NbMhDq+lVoMWaHGkAh4KyF/Chf49C3zXgNx7TTxiHqL0VwNZ9zJfupbV9b5T QDAhu1G9fqzs3rCr1oGeRXFjUxodnNE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:31 2025 by rpki-client