$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: 3jOVv319nIMnAtSPp7zst79Dh3U48DdOnqDV8FwvwB0= Subject key identifier: 5F:ED:16:30:94:1A:10:29:4D:74:F4:1E:82:37:49:31:2D:11:76:DA Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 076D Signing time: Sat 18 Oct 2025 22:56:40 +0000 Manifest this update: Sat 18 Oct 2025 22:56:39 +0000 Manifest next update: Sat 25 Oct 2025 22:56:39 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: PGkTNsM5CxaQK7JCRa8fowRV7AvFs1OH/fNzP2ljbrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Oct 18 22:56:39 2025 GMT Not After : Oct 25 22:56:39 2025 GMT Subject: CN=68f41b27-bec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:71:31:61:e2:93:ef:2c:17:1f:72:4b:6b: c7:ae:82:83:93:a7:78:5b:8d:d5:c3:e0:bb:fe:b8: 0b:da:1b:9d:50:74:a5:63:16:ba:ea:26:bb:93:0a: 91:01:5e:fd:20:5c:b7:57:87:bb:22:10:b0:94:ce: bc:e9:27:b4:66:84:9f:49:33:ca:56:a0:9d:b4:18: e4:7c:67:bc:f8:8d:ad:45:a1:90:24:75:e5:49:e7: c2:e5:fb:3e:db:72:83:b0:51:12:d2:34:a5:4c:a0: 65:8d:ec:65:72:83:77:ee:db:a5:21:a8:6a:ae:14: be:21:70:1b:75:40:e1:e0:6d:fd:a2:b6:c3:a4:bd: 25:d8:8d:82:0c:a6:66:0d:21:eb:61:d1:2a:a8:a9: ea:7b:5b:6d:52:ef:5c:1f:8a:f1:1c:e6:5b:7c:59: 0c:76:f8:be:4b:f5:51:f5:17:07:2c:52:ce:b3:4b: b6:32:f3:1c:08:e5:74:b4:14:17:3d:f0:69:0f:bc: e1:90:de:d2:12:07:0a:5e:af:3b:00:47:38:10:ab: 59:7f:36:de:2b:3c:b8:ae:c2:b2:fe:84:f4:5e:00: 98:67:63:69:4b:fa:2f:dd:32:de:f8:3c:ec:3d:e5: 90:9b:7e:0d:61:81:a0:1a:fa:c2:b0:34:c1:86:6a: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:16:30:94:1A:10:29:4D:74:F4:1E:82:37:49:31:2D:11:76:DA X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b4:85:92:04:18:38:30:5b:2e:c3:39:28:2a:b5:33:42:e1: da:a2:13:26:5f:a8:df:c3:3e:5f:70:f9:6e:52:16:a7:6c:62: 52:6f:30:e3:3e:91:69:3b:65:8a:93:26:7e:cd:18:09:82:cf: 2d:c1:13:52:25:30:58:01:9f:4b:a5:e3:dc:47:46:6b:1a:7b: 33:fe:51:bc:35:a8:02:5f:5e:4c:e3:1f:76:c6:75:d8:ad:bc: 69:bd:b8:f8:39:f4:30:49:f7:99:aa:90:d3:9a:b9:70:b5:f3: 46:ac:1d:03:c1:16:5e:7d:a4:0a:f5:c9:bd:0f:55:ee:3e:f6: 39:a4:9e:9d:46:e0:ec:28:b9:e7:7c:b7:79:01:54:6d:b3:30: 2e:e3:7f:95:30:a8:a3:cf:c0:69:76:a4:2a:e3:0f:77:43:3a: b2:c3:20:b8:76:02:67:52:67:fc:f8:58:78:01:a0:75:a1:a5: ad:13:32:ee:13:86:1e:e6:65:f7:2f:a5:11:bb:33:22:b4:fc: 71:34:84:7b:6a:75:02:df:46:f2:f5:ce:3c:d1:15:4c:08:c6: 19:c9:af:21:a7:a5:e7:30:4b:42:32:41:c8:54:ce:95:bc:8c: 3c:0c:f2:1f:44:8b:ba:11:86:4f:53:d8:76:8a:ea:da:55:b7: 82:21:5a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUxMDE4MjI1NjM5WhcNMjUxMDI1MjI1NjM5WjAYMRYwFAYD VQQDEw02OGY0MWIyNy1iZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hJxMWHik+8sFx9yS2vHroKDk6d4W43Vw+C7/rgL2hudUHSlYxa66ia7kwqR AV79IFy3V4e7IhCwlM686Se0ZoSfSTPKVqCdtBjkfGe8+I2tRaGQJHXlSefC5fs+ 23KDsFES0jSlTKBljexlcoN37tulIahqrhS+IXAbdUDh4G39orbDpL0l2I2CDKZm DSHrYdEqqKnqe1ttUu9cH4rxHOZbfFkMdvi+S/VR9RcHLFLOs0u2MvMcCOV0tBQX PfBpD7zhkN7SEgcKXq87AEc4EKtZfzbeKzy4rsKy/oT0XgCYZ2NpS/ov3TLe+Dzs PeWQm34NYYGgGvrCsDTBhmrUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/tFjCU GhApTXT0HoI3STEtEXbaMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBstIWSBBg4MFsuwzkoKrUzQuHaohMmX6jfwz5fcPluUhanbGJSbzDj PpFpO2WKkyZ+zRgJgs8twRNSJTBYAZ9LpePcR0ZrGnsz/lG8NagCX15M4x92xnXY rbxpvbj4OfQwSfeZqpDTmrlwtfNGrB0DwRZefaQK9cm9D1XuPvY5pJ6dRuDsKLnn fLd5AVRtszAu43+VMKijz8BpdqQq4w93QzqywyC4dgJnUmf8+Fh4AaB1oaWtEzLu E4Ye5mX3L6URuzMitPxxNIR7anUC30by9c480RVMCMYZya8hp6XnMEtCMkHIVM6V vIw8DPIfRIu6EYZPU9h2iuraVbeCIVr4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:05 2025 by rpki-client