$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: +ec8RQ7RRJesCIPy2jhwrIPwtDFJgJWQ+BVK4k+gCK4= Subject key identifier: 47:03:3E:B6:32:72:6B:3C:12:A9:A0:BA:C7:7A:66:62:60:5D:D3:FE Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0178 Signing time: Sun 19 Oct 2025 06:24:00 +0000 Manifest this update: Sun 19 Oct 2025 06:23:59 +0000 Manifest next update: Sun 26 Oct 2025 06:23:59 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: XA7b1WsBocn0S6vO21ICDwyFTbwlBws3sSXph+7f5q0=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: 7rc08NoUx6luLOLc4SLZl6pXq3BAAEvf8G5/Y6oZSx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Oct 19 06:23:59 2025 GMT Not After : Oct 26 06:23:59 2025 GMT Subject: CN=68f483ff-567a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:ed:11:e9:07:6c:e9:0f:23:d8:fd:e3:9a: b3:64:7e:ec:66:97:6b:5c:d9:f8:5b:d7:b8:4c:0b: 28:88:33:d4:c7:77:1a:5f:65:ac:2d:a2:a9:00:98: c9:20:c0:a5:39:63:06:49:19:12:5d:62:74:63:19: 6f:41:98:4c:ae:a6:22:0e:45:d4:24:c2:22:3b:1b: 54:5e:82:84:70:24:be:26:b3:49:fa:b7:ba:90:a9: 21:a9:41:00:f3:56:37:15:a8:d3:d8:c5:25:b4:72: 27:49:0d:cf:c4:67:09:3a:c0:7c:d8:bb:3b:12:b9: 60:1c:77:8e:4c:ec:50:23:73:38:cb:bd:09:68:45: 7a:37:aa:11:f2:d7:f5:cc:97:52:75:94:8e:9b:86: 4b:66:ac:f6:6d:36:39:6b:0a:fe:23:de:1b:31:95: f8:1e:70:32:e9:e9:ea:f2:d8:75:cc:46:5d:98:bf: 97:eb:63:b8:aa:4e:38:0f:29:ea:90:ad:b4:c5:ba: a9:1c:f9:11:c1:bb:1e:a0:8d:48:68:ad:aa:ed:b5: 6c:66:56:35:65:bb:ee:6d:a3:d6:1a:12:60:f0:e4: 48:4d:7e:4e:71:9e:1d:23:6d:e5:7a:ee:d9:05:d8: 25:a4:c9:7e:9b:c2:c8:31:18:ad:f1:c7:fb:8d:d1: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:3E:B6:32:72:6B:3C:12:A9:A0:BA:C7:7A:66:62:60:5D:D3:FE X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:82:c9:c2:d7:3b:a6:84:a9:07:0b:30:80:16:84:97:ad: c5:27:57:4a:9e:8e:67:3d:ea:6e:e7:22:1e:f0:3d:95:22:f6: c5:3e:80:1d:98:15:6b:9c:42:7a:b6:86:ad:c6:87:0d:64:87: 1e:ef:1e:63:6a:00:4e:3e:77:78:12:76:9c:98:e3:a3:82:95: 7f:39:d1:0c:e8:c7:b2:9d:83:98:4e:a0:98:3a:98:95:28:93: c7:da:05:f6:2f:bd:cc:cc:45:88:50:10:dd:30:b8:c5:6d:aa: 83:b4:37:ca:af:92:31:5c:f9:a0:ba:20:55:d6:c5:b2:bd:07: 95:d9:11:4b:98:44:62:bd:b4:5b:a7:41:78:8c:0a:cc:bb:00: 09:1f:91:9a:d9:f6:87:71:9d:75:17:26:03:6c:3c:2e:94:60: 86:84:9a:be:de:4c:3a:4a:c0:c0:22:1b:ec:25:ad:01:a9:e3: 62:43:b0:d9:2b:cb:ce:f0:fa:73:32:3e:9e:43:49:14:7c:ce: 8d:06:89:d1:a5:21:c5:7a:9b:14:e4:e0:fc:b7:82:ac:64:fa: 7c:00:f9:7b:18:75:31:fc:ee:da:4b:c9:06:f4:b4:5a:43:d0: 02:38:cc:f1:af:49:0a:25:3e:3a:f9:5d:db:66:4a:62:0a:9e: 8e:e1:37:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUxMDE5MDYyMzU5WhcNMjUxMDI2MDYyMzU5WjAYMRYwFAYD VQQDEw02OGY0ODNmZi01NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4btEekHbOkPI9j945qzZH7sZpdrXNn4W9e4TAsoiDPUx3caX2WsLaKpAJjJ IMClOWMGSRkSXWJ0YxlvQZhMrqYiDkXUJMIiOxtUXoKEcCS+JrNJ+re6kKkhqUEA 81Y3FajT2MUltHInSQ3PxGcJOsB82Ls7ErlgHHeOTOxQI3M4y70JaEV6N6oR8tf1 zJdSdZSOm4ZLZqz2bTY5awr+I94bMZX4HnAy6enq8th1zEZdmL+X62O4qk44Dynq kK20xbqpHPkRwbseoI1IaK2q7bVsZlY1ZbvubaPWGhJg8ORITX5OcZ4dI23leu7Z BdglpMl+m8LIMRit8cf7jdGNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcDPrYy cms8Eqmgusd6ZmJgXdP+MB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdoLJwtc7poSpBwswgBaEl63FJ1dKno5nPepu5yIe8D2VIvbFPoAd mBVrnEJ6toatxocNZIce7x5jagBOPnd4EnacmOOjgpV/OdEM6MeynYOYTqCYOpiV KJPH2gX2L73MzEWIUBDdMLjFbaqDtDfKr5IxXPmguiBV1sWyvQeV2RFLmERivbRb p0F4jArMuwAJH5Ga2faHcZ11FyYDbDwulGCGhJq+3kw6SsDAIhvsJa0BqeNiQ7DZ K8vO8PpzMj6eQ0kUfM6NBonRpSHFepsU5OD8t4KsZPp8APl7GHUx/O7aS8kG9LRa Q9ACOMzxr0kKJT46+V3bZkpiCp6O4Tco -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:11 2025 by rpki-client