$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: 9y5+7tZBPjCb5icMCYlwHiNWptZH/s/cFECttL7B7L4= Subject key identifier: E7:F9:2E:BE:61:D4:4D:81:AA:49:90:1C:B3:97:A0:3C:66:B2:6D:C5 Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0AAB Signing time: Sat 18 Oct 2025 20:29:39 +0000 Manifest this update: Sat 18 Oct 2025 20:29:38 +0000 Manifest next update: Sat 25 Oct 2025 20:29:38 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: Rwrej2p7KJ68mHb+Guu7NUlvPK0HeKt5W/kT0jkMs/c=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Oct 18 20:29:38 2025 GMT Not After : Oct 25 20:29:38 2025 GMT Subject: CN=68f3f8b3-5211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:1c:94:ce:dc:74:86:51:b3:3d:fa:f1:7c: c9:7d:20:da:8c:8b:2d:f8:b1:23:b5:8b:3d:60:13: 4c:b4:c2:c3:52:b7:c4:60:9e:23:fd:9a:d3:36:19: 15:6c:e5:1a:5c:03:e9:2c:7b:e0:2c:31:d4:e0:fc: 5e:3d:80:7a:d6:95:8b:3a:2e:e6:4d:f8:92:a0:3e: 4f:f0:27:d5:ae:31:51:dc:73:54:a6:c9:c0:bc:1d: 2e:53:0f:ba:ce:ee:3b:31:20:b4:e0:18:ac:83:82: f5:cb:1c:a8:eb:be:ee:5c:72:a0:59:ba:02:e5:bf: b2:f5:72:4e:a3:5c:75:cf:25:ce:2e:f3:5c:8f:cb: 7c:3a:07:25:9f:d8:86:cd:06:c9:0d:f6:38:bc:6c: e7:13:de:56:a6:93:2b:2a:05:b9:9b:98:37:57:57: 36:cf:05:76:81:b5:75:23:93:ad:54:de:54:f8:ba: 63:d2:ea:1a:4b:ea:a0:30:38:6b:b5:a8:bb:5f:11: a2:b7:c4:98:e1:81:d3:90:ba:26:3e:2d:3e:93:3c: 34:91:d6:9e:4b:28:e5:56:1a:77:4e:a1:6a:4b:1b: 2b:af:90:d0:10:f3:81:dc:bf:9d:41:15:5c:8d:f1: 20:16:ab:5c:df:b3:6f:1f:f8:d4:7a:f7:65:64:a2: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:2E:BE:61:D4:4D:81:AA:49:90:1C:B3:97:A0:3C:66:B2:6D:C5 X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:72:3c:b5:aa:3e:e8:c7:5e:b5:0b:ff:be:37:af:4c:9a:1d: 78:82:de:8f:cf:fd:b2:9d:92:9e:62:28:40:7c:fe:c3:ab:fb: fd:67:13:e3:bf:72:bb:68:c9:c8:bb:81:a4:55:ef:09:1b:f9: 05:e5:41:22:c3:a1:71:1a:7f:75:b3:95:14:51:43:86:ad:02: 65:fc:53:0e:9c:bd:71:40:eb:1d:41:26:b2:03:84:85:8d:e9: fb:b4:c8:7d:54:b5:a2:1f:a1:74:b4:9c:0f:76:2f:de:f0:0a: 2c:d9:c9:d3:b5:a0:5b:00:8a:6f:91:2e:b9:e3:d2:a3:dd:6d: a3:06:b4:4f:cf:a0:d1:2e:9e:d2:a1:70:b9:3a:10:b7:d0:ef: af:ca:2d:39:93:84:66:e4:ef:24:dc:31:a5:3e:6b:18:6a:62: 9a:23:25:8c:11:94:93:4f:3d:a5:2e:41:0f:bf:37:5d:8e:e7: d3:b6:e6:47:23:a7:78:8b:16:b8:1a:2d:4e:06:b5:4f:68:97: bf:c1:b4:b2:3d:ca:d5:e0:d3:82:6b:ef:e2:68:b8:e7:79:7c: 09:f2:f9:39:bc:a2:41:43:25:6a:a7:46:79:f8:ec:ee:72:b5: bf:92:b7:67:37:f8:67:83:b3:cc:cd:1f:13:c9:d4:97:d0:16: e6:7a:c1:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUxMDE4MjAyOTM4WhcNMjUxMDI1MjAyOTM4WjAYMRYwFAYD VQQDEw02OGYzZjhiMy01MjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4AclM7cdIZRsz368XzJfSDajIst+LEjtYs9YBNMtMLDUrfEYJ4j/ZrTNhkV bOUaXAPpLHvgLDHU4PxePYB61pWLOi7mTfiSoD5P8CfVrjFR3HNUpsnAvB0uUw+6 zu47MSC04Bisg4L1yxyo677uXHKgWboC5b+y9XJOo1x1zyXOLvNcj8t8Ogcln9iG zQbJDfY4vGznE95WppMrKgW5m5g3V1c2zwV2gbV1I5OtVN5U+Lpj0uoaS+qgMDhr tai7XxGit8SY4YHTkLomPi0+kzw0kdaeSyjlVhp3TqFqSxsrr5DQEPOB3L+dQRVc jfEgFqtc37NvH/jUevdlZKITkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf5Lr5h 1E2BqkmQHLOXoDxmsm3FMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCcjy1qj7ox161C/++N69Mmh14gt6Pz/2ynZKeYihAfP7Dq/v9ZxPj v3K7aMnIu4GkVe8JG/kF5UEiw6FxGn91s5UUUUOGrQJl/FMOnL1xQOsdQSayA4SF jen7tMh9VLWiH6F0tJwPdi/e8Aos2cnTtaBbAIpvkS6549Kj3W2jBrRPz6DRLp7S oXC5OhC30O+vyi05k4Rm5O8k3DGlPmsYamKaIyWMEZSTTz2lLkEPvzddjufTtuZH I6d4ixa4Gi1OBrVPaJe/wbSyPcrV4NOCa+/iaLjneXwJ8vk5vKJBQyVqp0Z5+Ozu crW/krdnN/hng7PMzR8TydSX0BbmesEF -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:23 2025 by rpki-client