$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json) Hash identifier: qJlhVfcwrBGAYb2qFlgV8pge94yduq8Qxl7otEldg2U= Subject key identifier: 25:5F:06:36:C1:8D:C1:DB:7D:2D:85:54:9B:32:92:AA:97:DD:24:D9 Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft Manifest number: 01B0 Signing time: Sun 19 Oct 2025 05:39:37 +0000 Manifest this update: Sun 19 Oct 2025 05:39:36 +0000 Manifest next update: Sun 26 Oct 2025 05:39:36 +0000 Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: 96AiiMw+T7tXuZ0CcRBwQf74DQmJlwyhJ43Q54vd7Aw=) 2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Validity Not Before: Oct 19 05:39:36 2025 GMT Not After : Oct 26 05:39:36 2025 GMT Subject: CN=68f47999-e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:4d:96:33:0d:48:58:f8:28:59:a8:c0:c1: f2:16:ec:26:1d:ea:02:2a:11:c7:25:a6:42:f4:b0: 94:d8:53:a4:e3:cd:0d:d3:36:6a:23:3e:e1:b2:f8: e9:35:b6:fd:a5:48:c1:4f:a7:8d:0e:5b:69:30:8a: d0:d8:f2:3f:2f:c0:ec:e9:6e:9d:be:f3:84:95:42: d5:95:92:e7:88:c3:2e:bf:9a:2e:1c:54:4c:4c:04: a6:5d:68:79:16:e2:01:1e:69:a1:10:87:b2:53:99: b9:c4:ce:af:55:06:72:1e:38:98:49:e9:68:69:83: eb:a4:8d:5f:f5:fa:22:5a:d3:21:89:04:3d:b4:b1: fd:ab:45:c6:61:5b:c4:a2:69:df:55:c0:75:89:43: fd:1c:b4:7c:42:7c:08:8f:0a:99:ae:94:d7:e3:5a: 6c:25:fc:39:4d:3d:56:99:0b:89:64:93:12:b3:59: 0b:77:70:e0:0f:18:c7:7a:01:4f:f8:9b:a8:a8:22: 01:81:d3:77:55:e6:d1:80:5d:dd:a5:64:ad:69:96: 13:84:5d:af:f4:61:c1:20:28:87:00:77:d4:5e:38: 4b:d8:87:5e:50:12:31:fc:45:c4:3a:a2:8f:87:70: d6:d9:58:b1:ae:f7:f3:59:34:d9:f4:2c:9d:99:8f: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5F:06:36:C1:8D:C1:DB:7D:2D:85:54:9B:32:92:AA:97:DD:24:D9 X509v3 Authority Key Identifier: keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:4f:b6:6c:09:3f:f8:64:4e:6b:7f:09:66:2c:ee:ab:98:d1: 4d:d1:6c:fc:ce:44:bc:37:2b:e2:64:73:7e:69:85:dd:40:8f: 0e:89:27:81:15:a7:bd:bc:f3:58:f3:88:ce:5b:d7:4b:c1:9d: 5a:c9:e7:a6:0b:e1:2a:a3:92:8d:a2:67:5d:02:c9:31:68:85: 82:02:e9:5b:3c:a6:c3:b0:d5:4a:67:07:96:c4:0e:ce:ae:d3: 11:80:5a:cb:e6:ac:24:d1:02:eb:3e:52:1a:a0:96:bb:fc:7f: 0a:24:03:c4:92:a3:58:e7:41:e3:dd:e2:70:b6:ab:2f:e0:89: 92:ad:05:40:bf:9b:a0:cd:81:5b:a6:3b:75:8b:6a:03:81:a0: 54:82:cf:db:68:19:d2:6e:a4:f6:e4:39:35:c0:08:84:04:b9: d2:d7:30:76:ff:e0:45:bc:93:8d:8d:2c:9c:fd:fe:d7:2f:71: 1e:66:3c:71:a9:06:5e:bd:ad:f0:af:99:07:49:23:a0:ac:34: 2a:27:8f:a1:2e:a3:63:bf:df:67:3d:62:95:3a:32:24:80:32: a0:7b:ea:24:79:b8:62:b4:9a:59:13:d4:8f:9d:aa:10:48:18: 2c:2d:ea:4f:25:2b:e6:91:f0:59:da:9e:e1:d8:f3:f2:14:f1: b5:e5:87:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3 MkZGRDE4NDkwHhcNMjUxMDE5MDUzOTM2WhcNMjUxMDI2MDUzOTM2WjAYMRYwFAYD VQQDEw02OGY0Nzk5OS1lNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4VNljMNSFj4KFmowMHyFuwmHeoCKhHHJaZC9LCU2FOk480N0zZqIz7hsvjp Nbb9pUjBT6eNDltpMIrQ2PI/L8Ds6W6dvvOElULVlZLniMMuv5ouHFRMTASmXWh5 FuIBHmmhEIeyU5m5xM6vVQZyHjiYSeloaYPrpI1f9foiWtMhiQQ9tLH9q0XGYVvE omnfVcB1iUP9HLR8QnwIjwqZrpTX41psJfw5TT1WmQuJZJMSs1kLd3DgDxjHegFP +JuoqCIBgdN3VebRgF3dpWStaZYThF2v9GHBICiHAHfUXjhL2IdeUBIx/EXEOqKP h3DW2VixrvfzWTTZ9CydmY80AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVfBjbB jcHbfS2FVJsykqqX3STZMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3 REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZT7ZsCT/4ZE5rfwlmLO6rmNFN0Wz8zkS8NyviZHN+aYXdQI8OiSeB Fae9vPNY84jOW9dLwZ1ayeemC+Eqo5KNomddAskxaIWCAulbPKbDsNVKZweWxA7O rtMRgFrL5qwk0QLrPlIaoJa7/H8KJAPEkqNY50Hj3eJwtqsv4ImSrQVAv5ugzYFb pjt1i2oDgaBUgs/baBnSbqT25Dk1wAiEBLnS1zB2/+BFvJONjSyc/f7XL3EeZjxx qQZeva3wr5kHSSOgrDQqJ4+hLqNjv99nPWKVOjIkgDKge+okebhitJpZE9SPnaoQ SBgsLepPJSvmkfBZ2p7h2PPyFPG15Yf1 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:25 2025 by rpki-client