$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: QqgWhayI0+sc0RlkmPGMAloozfN1IVJ8qR1JiQdoQ68= Subject key identifier: 20:80:0B:AB:9C:1E:D9:69:4A:4A:C7:4A:01:5E:1E:6E:D8:50:74:5D Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 10:55:51 +0000 Manifest this update: Sun 19 Oct 2025 10:55:50 +0000 Manifest next update: Sun 26 Oct 2025 10:55:50 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: SkRgPhjv5hMYeXInJukFE83OridMcyoJHbcIKoUX9/Y=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Oct 19 10:55:50 2025 GMT Not After : Oct 26 10:55:50 2025 GMT Subject: CN=68f4c3b6-61f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:8a:08:4d:60:be:71:b6:01:08:29:2e:62: ee:8f:fd:6a:4b:b0:f0:b4:5f:cd:a3:3c:9c:17:a3: ef:81:ca:13:84:d6:8a:98:b2:3d:de:a7:52:21:f8: c9:15:21:c5:98:5a:a2:e0:c2:43:c2:c1:44:bc:cd: 06:f4:cd:9a:c3:30:e3:d0:d6:e6:55:e9:01:ee:51: 2e:d1:86:be:15:be:c8:83:22:f0:97:75:55:50:a1: 03:8f:99:17:6f:f7:ab:0d:6e:87:0c:47:67:89:7a: 74:ed:a1:48:ce:bd:79:cd:59:cb:17:50:31:8b:e2: c0:39:f8:41:5d:11:a6:72:d2:b9:aa:e1:a6:40:19: 12:2f:bf:d9:74:18:08:b6:c1:e7:15:0d:b9:36:a8: 63:f6:73:fc:1f:14:50:02:34:ac:88:11:b1:00:6d: 15:f6:f7:87:b1:de:40:ae:22:cc:7e:df:1a:0e:b2: 42:00:be:a4:9c:ca:36:7a:0f:3e:2e:3b:b5:26:fb: de:82:4e:59:ec:b0:34:e5:d7:fd:a7:a8:29:91:06: 99:7f:a9:4e:ba:ff:49:3a:90:ea:d1:6f:2e:26:b7: ce:6b:8c:a4:e1:ce:70:94:23:39:06:54:0f:8c:22: c0:40:ee:b0:eb:14:18:8a:9a:01:6b:7d:2b:c4:8c: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:0B:AB:9C:1E:D9:69:4A:4A:C7:4A:01:5E:1E:6E:D8:50:74:5D X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5c:72:54:39:5e:68:33:18:c7:a2:a2:00:6e:8d:88:33:5b: 44:b2:9b:d1:cd:74:47:75:3d:ae:16:71:99:7b:89:2b:16:38: 55:93:51:e1:ac:6b:80:dc:99:42:e5:cf:24:01:65:4f:9b:77: 4f:3f:30:96:68:f8:73:26:ca:f0:68:8f:8c:66:e6:aa:94:29: 77:a9:8f:6a:1b:45:81:38:3f:a2:c2:e6:b8:2d:25:81:2a:1a: e3:2d:4b:dc:9e:d9:d8:97:1f:f5:85:2c:98:37:ef:7f:50:77: 95:5d:39:14:ce:cc:fb:07:4c:42:e0:14:53:2d:b6:2d:11:9f: 41:88:10:ec:dc:7b:25:19:3e:1b:03:7a:f3:ae:9a:0b:de:0a: ac:4c:2b:b3:32:43:36:41:1d:bb:4e:35:2e:90:39:90:0d:b0: 52:89:c4:9f:d0:83:26:df:93:c9:88:71:5a:c9:65:8b:5d:39: 34:18:47:c5:e5:ac:e6:a0:b8:0b:78:6f:1d:6d:55:fe:51:dc: 15:8d:79:82:e6:2d:d3:0e:15:fa:51:86:58:4f:94:63:9b:6c: 2f:df:a2:b6:ed:1a:23:17:10:10:a3:1f:ab:ad:7d:d1:40:32: 1b:8e:36:fb:26:11:48:07:73:c0:2a:4b:51:a9:7e:1a:2e:38: 40:18:b9:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoQjQwMzhBQjY0MDM5RjMxNDU2MjJBMjBGRjcwRUQ3QkUx RDRFN0Y5MTAeFw0yNTEwMTkxMDU1NTBaFw0yNTEwMjYxMDU1NTBaMBgxFjAUBgNV BAMTDTY4ZjRjM2I2LTYxZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC9IoITWC+cbYBCCkuYu6P/WpLsPC0X82jPJwXo++ByhOE1oqYsj3ep1Ih+MkV IcWYWqLgwkPCwUS8zQb0zZrDMOPQ1uZV6QHuUS7Rhr4VvsiDIvCXdVVQoQOPmRdv 96sNbocMR2eJenTtoUjOvXnNWcsXUDGL4sA5+EFdEaZy0rmq4aZAGRIvv9l0GAi2 wecVDbk2qGP2c/wfFFACNKyIEbEAbRX294ex3kCuIsx+3xoOskIAvqScyjZ6Dz4u O7Um+96CTlnssDTl1/2nqCmRBpl/qU66/0k6kOrRby4mt85rjKThznCUIzkGVA+M IsBA7rDrFBiKmgFrfSvEjGv9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIIALq5we 2WlKSsdKAV4ebthQdF0wHwYDVR0jBBgwFoAUtAOKtkA58xRWIqIP9w7Xvh1Of5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzY0OUJDM0IyNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEFPS3RrQTU4eFJXSXFJUDl3N1h2aDFPZjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzY0OUJDM0IyNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhS V0lxSVA5dzdYdmgxT2Y1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1cclQ5XmgzGMeiogBujYgzW0Sym9HNdEd1Pa4WcZl7iSsWOFWTUeGs a4DcmULlzyQBZU+bd08/MJZo+HMmyvBoj4xm5qqUKXepj2obRYE4P6LC5rgtJYEq GuMtS9ye2diXH/WFLJg3739Qd5VdORTOzPsHTELgFFMtti0Rn0GIEOzceyUZPhsD evOumgveCqxMK7MyQzZBHbtONS6QOZANsFKJxJ/Qgybfk8mIcVrJZYtdOTQYR8Xl rOaguAt4bx1tVf5R3BWNeYLmLdMOFfpRhlhPlGObbC/forbtGiMXEBCjH6utfdFA MhuONvsmEUgHc8AqS1GpfhouOEAYucc= -----END CERTIFICATE-----Generated at Mon Oct 20 00:15:12 2025 by rpki-client