$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft File: tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json) Hash identifier: gyIS3KMjkcnS8IBPpIljirNNweglLLAOjDd4bQPWCb4= Subject key identifier: F1:12:57:E1:FB:6F:FA:5B:7C:97:8C:AA:47:72:0E:73:76:53:D1:BF Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F Certificate issuer: /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft Manifest number: 0B Signing time: Sun 19 Oct 2025 11:37:55 +0000 Manifest this update: Sun 19 Oct 2025 11:37:54 +0000 Manifest next update: Sun 26 Oct 2025 11:37:54 +0000 Files and hashes: 1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: 8dgKWDFLhG5p0Ekq5vkHQekLckea+AXY3t0pUaAztrc=) 2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: Hrz6E8zGVE7+V0nQ5qUnfosiDutsahGCdlw2tJNUEv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F Validity Not Before: Oct 19 11:37:54 2025 GMT Not After : Oct 26 11:37:54 2025 GMT Subject: CN=68f4cd92-a8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:2c:8a:80:3e:a3:03:51:cf:a5:5d:07:7c: be:fc:0d:db:f0:66:2f:98:3d:c9:4d:53:a1:b5:1b: 3d:4c:26:d0:30:66:58:59:76:7c:02:c8:c1:c0:1e: 43:e9:a2:a3:42:ea:14:3a:70:dc:81:e1:8e:7e:44: a6:e0:f5:11:f0:8d:01:53:6b:64:7c:03:4c:9e:a6: 12:d5:49:c7:2f:b0:6f:e4:41:85:4c:40:e9:05:71: 7e:10:32:7c:0b:f5:fd:af:57:55:1d:a8:9d:ac:5e: 54:21:70:0d:e0:4e:ae:26:3d:66:80:ab:43:97:04: c4:56:10:db:65:b1:79:28:22:7d:1f:bd:fb:76:da: 58:bd:59:ce:83:e9:12:10:bf:2a:b5:ac:12:7d:51: b7:f5:d5:a8:b9:cb:9b:0f:da:99:57:44:19:e9:7e: bb:e0:aa:2d:ca:21:a5:cb:4c:5f:82:09:1b:22:3c: 7e:2a:90:47:a1:ec:13:fd:40:66:22:47:0a:de:a8: dc:9e:aa:26:3d:7b:9c:fc:ac:cc:54:5e:6c:68:27: 15:8f:94:07:7f:95:36:ae:99:26:ea:ea:a4:3f:e7: 5d:b5:c6:7b:a3:98:c2:f3:a1:b1:73:76:7b:b8:d1: 09:d2:bd:0a:0a:42:56:04:a6:78:ee:3b:7f:89:b3: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:57:E1:FB:6F:FA:5B:7C:97:8C:AA:47:72:0E:73:76:53:D1:BF X509v3 Authority Key Identifier: keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0c:19:dc:bb:57:24:07:8e:70:e7:6d:f8:4c:85:c7:8c:cf: a9:54:73:59:e7:17:09:63:97:fc:f3:26:b1:2d:be:78:9d:d6: 8b:e7:af:df:f8:4c:b4:99:15:92:c2:0f:e6:a6:c8:6f:6f:74: 91:dd:cd:54:ba:a5:94:65:27:a4:33:7f:6d:cd:de:89:8e:dd: af:f3:b5:1b:ad:3c:2b:0f:92:f6:f1:7f:a3:f6:ef:48:20:25: 18:39:ad:ab:b5:c7:8e:78:8e:02:0c:db:d9:bc:87:12:7e:ad: 24:76:9b:40:a5:14:7b:81:81:ab:61:18:3e:63:96:2c:1b:f0: 27:4e:10:9c:ac:6b:fe:fd:3b:09:88:c8:ab:6d:bf:f6:55:da: cc:22:f0:10:5f:8a:0f:cf:45:88:b3:f0:d4:40:c8:d7:33:d8: ee:ce:53:a1:dd:a2:a6:89:50:3f:41:fe:1b:ec:9c:d2:5e:83: d5:c4:9e:9d:a4:6c:46:ce:27:78:f6:77:88:3d:ba:2b:d4:d9: ac:12:08:3b:71:5b:b7:eb:2a:87:50:c8:3e:ee:f4:99:46:39: b4:4d:a0:c9:ba:e9:12:84:21:82:65:82:82:a6:59:ca:7c:8d: b5:5b:2c:0a:b2:80:06:c1:99:83:1f:2d:64:f2:9a:54:90:8f: 8b:40:9e:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0Y0MjExMC8GA1UEBRMoQjQxRDM2MDBBRjI2MDk5MzBFODJGMDk2MDBDN0FGOThG MkRENkM5RjAeFw0yNTEwMTkxMTM3NTRaFw0yNTEwMjYxMTM3NTRaMBgxFjAUBgNV BAMTDTY4ZjRjZDkyLWE4YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7GyyKgD6jA1HPpV0HfL78DdvwZi+YPclNU6G1Gz1MJtAwZlhZdnwCyMHAHkPp oqNC6hQ6cNyB4Y5+RKbg9RHwjQFTa2R8A0yephLVSccvsG/kQYVMQOkFcX4QMnwL 9f2vV1UdqJ2sXlQhcA3gTq4mPWaAq0OXBMRWENtlsXkoIn0fvft22li9Wc6D6RIQ vyq1rBJ9Ubf11ai5y5sP2plXRBnpfrvgqi3KIaXLTF+CCRsiPH4qkEeh7BP9QGYi RwreqNyeqiY9e5z8rMxUXmxoJxWPlAd/lTaumSbq6qQ/5121xnujmMLzobFzdnu4 0QnSvQoKQlYEpnjuO3+JsxzLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8RJX4ftv +lt8l4yqR3IOc3ZT0b8wHwYDVR0jBBgwFoAUtB02AK8mCZMOgvCWAMevmPLdbJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRjQyLzgwMEVEOUNDQTJC MzExRjA5NDY2RTIzNUM0RjlBRTAyL3RCMDJBSzhtQ1pNT2d2Q1dBTWV2bVBMZGJK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEIwMkFLOG1DWk1PZ3ZDV0FNZXZtUExkYko4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RjQyLzgwMEVEOUNDQTJCMzExRjA5NDY2RTIzNUM0RjlBRTAyL3RCMDJBSzhtQ1pN T2d2Q1dBTWV2bVBMZGJKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALsMGdy7VyQHjnDnbfhMhceMz6lUc1nnFwljl/zzJrEtvnid1ovnr9/4 TLSZFZLCD+amyG9vdJHdzVS6pZRlJ6Qzf23N3omO3a/ztRutPCsPkvbxf6P270gg JRg5rau1x454jgIM29m8hxJ+rSR2m0ClFHuBgathGD5jliwb8CdOEJysa/79OwmI yKttv/ZV2swi8BBfig/PRYiz8NRAyNcz2O7OU6HdoqaJUD9B/hvsnNJeg9XEnp2k bEbOJ3j2d4g9uivU2awSCDtxW7frKodQyD7u9JlGObRNoMm66RKEIYJlgoKmWcp8 jbVbLAqygAbBmYMfLWTymlSQj4tAnhE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:22 2025 by rpki-client