$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft File: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json) Hash identifier: Zzpv/XVxvrJ34MWRaDaa28qJfjgWMx1c5Y41mdy6+YA= Subject key identifier: 14:8E:9B:DA:2B:38:65:66:B9:CF:EA:80:D9:C5:FA:F7:04:0B:85:51 Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 Certificate issuer: /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 07:33:33 +0000 Manifest this update: Sun 19 Oct 2025 07:33:32 +0000 Manifest next update: Sun 26 Oct 2025 07:33:32 +0000 Files and hashes: 1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: 6K2t/CzRtsSoRM5Ehq0XsJp5P7LjR+6nfLCwBipAvwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Validity Not Before: Oct 19 07:33:32 2025 GMT Not After : Oct 26 07:33:32 2025 GMT Subject: CN=68f4944d-3aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:6c:71:a1:49:b6:e9:03:13:22:9a:46:a7: ee:d4:5d:db:8f:15:5f:1f:91:07:ea:42:e9:42:5f: 14:8e:0c:a0:0e:a5:16:b1:49:97:17:a8:eb:60:da: 93:b6:c9:a8:ee:1e:63:5c:9c:75:ba:23:c2:7c:63: e6:cf:a9:c9:33:c2:c3:04:6c:e8:de:61:92:75:69: e2:81:44:43:5a:ad:a4:8e:64:09:d5:c5:56:4a:7c: 43:a3:ac:99:57:39:00:1a:b0:19:62:30:27:0b:42: 25:41:cd:f6:fc:40:41:b5:6d:e3:15:76:04:04:50: 53:66:26:2c:cd:bd:a4:90:59:1c:bd:b4:01:22:a7: 9f:4f:be:5e:e6:2e:d4:15:e5:52:10:1a:de:42:61: e7:95:62:b4:b1:59:b1:11:ba:7a:a7:28:c5:2e:7c: ca:39:9f:bf:46:45:69:89:45:91:fa:75:5c:b3:51: 2a:87:a0:20:55:15:ae:32:dc:59:62:b6:4c:0b:0c: 2f:fc:0b:30:b8:4f:f3:23:8e:04:19:58:a3:64:8c: 5b:0e:e2:71:70:5b:99:41:20:5b:f7:45:43:16:2c: b8:d4:ae:63:a2:aa:4f:be:0e:0e:6b:93:fd:c1:84: 21:63:fc:c5:6e:45:ba:73:d5:e8:22:a7:10:e1:55: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:9B:DA:2B:38:65:66:B9:CF:EA:80:D9:C5:FA:F7:04:0B:85:51 X509v3 Authority Key Identifier: keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6d:bf:2a:37:28:c8:e5:33:6f:ed:7c:1d:2a:db:3e:c6:53: 90:28:1d:26:0c:e8:6f:cf:54:47:19:d2:55:43:ba:bb:0f:52: 95:01:77:70:f5:b9:d3:2d:c1:0a:bb:52:52:41:d0:f5:25:bc: e1:52:af:78:48:a1:58:86:d6:61:e6:1a:ea:d8:fa:b1:e3:df: 28:a7:79:4f:6c:47:a8:73:e9:43:f7:ad:59:40:61:4c:09:a2: e9:1c:a6:13:e2:10:3f:14:13:68:43:43:61:06:e1:ce:17:0b: 5b:91:d5:7b:95:58:4e:f3:80:6d:46:08:8b:7b:98:18:57:72: 3e:f7:4e:b8:c9:eb:58:4e:c6:7b:d2:5f:a3:12:53:83:aa:28: 8d:3e:4d:9d:51:46:d7:20:a8:77:40:3f:70:73:be:41:d5:d3: a9:5c:47:40:83:84:66:0d:ad:7c:2e:16:ba:fe:e3:ca:14:fe: 27:99:aa:21:06:cc:0d:dd:80:17:fb:01:cd:ce:2b:27:7a:ab: 5f:4e:1a:2a:c7:36:61:34:60:88:9e:d5:f5:c0:b3:d6:ea:9d: ea:76:50:98:13:e4:ea:01:43:31:92:3d:4d:d1:47:d1:46:d1: d4:48:59:72:ad:ae:d8:45:8f:ba:ea:7e:cb:36:7a:69:74:92: ab:70:f6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKEI1M0JDRTE2MUFDRjYzMDVFQzA1NUM1OUE4OTFFODIy QTExRUY4MDQwHhcNMjUxMDE5MDczMzMyWhcNMjUxMDI2MDczMzMyWjAYMRYwFAYD VQQDEw02OGY0OTQ0ZC0zYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5khscaFJtukDEyKaRqfu1F3bjxVfH5EH6kLpQl8UjgygDqUWsUmXF6jrYNqT tsmo7h5jXJx1uiPCfGPmz6nJM8LDBGzo3mGSdWnigURDWq2kjmQJ1cVWSnxDo6yZ VzkAGrAZYjAnC0IlQc32/EBBtW3jFXYEBFBTZiYszb2kkFkcvbQBIqefT75e5i7U FeVSEBreQmHnlWK0sVmxEbp6pyjFLnzKOZ+/RkVpiUWR+nVcs1Eqh6AgVRWuMtxZ YrZMCwwv/AswuE/zI44EGVijZIxbDuJxcFuZQSBb90VDFiy41K5joqpPvg4Oa5P9 wYQhY/zFbkW6c9XoIqcQ4VVx+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSOm9or OGVmuc/qgNnF+vcEC4VRMB8GA1UdIwQYMBaAFLU7zhYaz2MF7AVcWaiR6CKhHvgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS82NTlFOTAxMEVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3WHNCVnhacUpIb0lxRWUt QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUdk9GaHJQWXdYc0JWeFpxSkhvSXFFZS1BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg1RS82NTlFOTAxMEVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3 WHNCVnhacUpIb0lxRWUtQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBbb8qNyjI5TNv7XwdKts+xlOQKB0mDOhvz1RHGdJVQ7q7D1KVAXdw 9bnTLcEKu1JSQdD1JbzhUq94SKFYhtZh5hrq2Pqx498op3lPbEeoc+lD961ZQGFM CaLpHKYT4hA/FBNoQ0NhBuHOFwtbkdV7lVhO84BtRgiLe5gYV3I+9064yetYTsZ7 0l+jElODqiiNPk2dUUbXIKh3QD9wc75B1dOpXEdAg4RmDa18Lha6/uPKFP4nmaoh BswN3YAX+wHNzisneqtfThoqxzZhNGCIntX1wLPW6p3qdlCYE+TqAUMxkj1N0UfR RtHUSFlyra7YRY+66n7LNnppdJKrcPYm -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:07 2025 by rpki-client