$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: 3Cfc0Tuj5gNDUoWZsEGtz8diFsjYV6CoEVW5uHFbf4Q= Subject key identifier: 12:23:8E:EF:F3:BE:CD:5F:84:CE:CE:24:FE:B2:DB:42:65:9C:6B:44 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 184B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 1842 Signing time: Sat 18 Oct 2025 16:54:14 +0000 Manifest this update: Sat 18 Oct 2025 16:54:14 +0000 Manifest next update: Sat 25 Oct 2025 16:54:14 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: lXA3CLh1apL2uE5B1P6LAJpn1pgNjPTkJ2xMpnqOCys=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6219 (0x184b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Oct 18 16:54:14 2025 GMT Not After : Oct 25 16:54:14 2025 GMT Subject: CN=68f3c636-703a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:76:49:04:84:59:e6:8e:4f:06:71:a9:af: 48:9e:ad:ef:eb:d8:0e:df:90:ee:a2:58:00:2b:18: e8:1f:80:e6:a7:54:0d:87:21:31:53:6e:a3:1d:ed: 9b:d7:8b:ac:63:f8:4c:b7:a8:2f:82:fb:a2:24:8a: 11:a7:b8:c0:e6:bc:58:f4:47:6c:aa:72:98:eb:b2: be:f0:b0:dd:f6:8f:52:cd:b4:3e:65:d1:d6:52:e4: b0:b9:04:f9:b0:10:42:bd:0c:53:bd:06:9b:08:85: b0:34:63:11:9a:ad:5e:6e:96:29:66:1f:20:c2:d1: 03:60:72:14:71:c6:b9:e2:03:e1:bd:f8:a5:a0:2f: 10:20:f0:18:4e:57:0f:bd:b2:f7:b4:a2:45:a8:ce: 87:c7:3a:41:ee:8c:81:1a:d7:34:b6:cb:4a:3a:1e: 76:e9:88:e9:2d:6e:4c:35:f0:f6:c3:34:bb:d2:89: 87:e1:24:ac:f5:4f:45:f2:11:47:e0:bc:3d:1c:f0: 30:e3:4b:3b:0f:53:d7:b0:bd:7e:c8:29:8b:9f:2b: 1c:80:a1:51:d2:b3:44:7c:ff:2b:98:67:a9:fe:22: 3a:07:57:87:36:1a:df:70:e0:c5:86:f6:8d:15:7e: 5c:7f:47:9b:e0:e7:19:79:bd:7a:07:5f:d3:ff:b2: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:23:8E:EF:F3:BE:CD:5F:84:CE:CE:24:FE:B2:DB:42:65:9C:6B:44 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e4:87:ab:a5:dc:1a:83:67:bd:aa:33:e9:24:98:4f:05:0e: 83:2c:4c:dc:1c:0f:1b:1f:54:4f:a2:67:84:f4:6c:89:52:f8: ab:95:a8:d8:fc:b1:af:bd:bf:fb:24:d4:a6:fd:22:34:7a:3a: fe:da:65:f0:75:73:f8:db:a0:7f:50:34:56:c0:ef:91:7f:da: 4e:fb:23:4e:4c:a1:d2:5b:5e:9a:9f:18:d6:dd:3c:e9:6a:18: 1a:c2:06:6d:47:b8:66:89:ba:fe:72:f1:53:d0:33:17:df:d0: 36:45:af:32:69:bc:01:8c:44:c6:41:77:c7:64:ad:51:33:fd: ae:2c:5e:81:0e:2e:a6:23:41:1e:be:43:de:2d:1b:6d:ed:4b: 56:ba:ec:2f:b8:27:1a:ad:9f:10:31:28:2c:ed:be:b1:c2:c6: e2:86:6c:30:7d:16:8a:8d:85:fd:27:2e:d0:69:08:a0:9c:3e: e7:6c:51:ee:dc:f9:7e:ec:43:5e:78:9e:39:14:01:9a:b7:ee: 2e:e7:ee:d0:92:d3:97:b5:7d:c3:de:cd:67:14:86:da:3c:30: d9:00:e4:3c:ee:04:e3:33:e1:d8:0b:c0:44:b7:86:ab:6c:68: 47:a7:37:33:08:a2:9c:a4:c8:4e:47:2c:7b:aa:cb:a8:3e:67: 73:3e:b6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUxMDE4MTY1NDE0WhcNMjUxMDI1MTY1NDE0WjAYMRYwFAYD VQQDEw02OGYzYzYzNi03MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6J2SQSEWeaOTwZxqa9Inq3v69gO35DuolgAKxjoH4Dmp1QNhyExU26jHe2b 14usY/hMt6gvgvuiJIoRp7jA5rxY9EdsqnKY67K+8LDd9o9SzbQ+ZdHWUuSwuQT5 sBBCvQxTvQabCIWwNGMRmq1ebpYpZh8gwtEDYHIUcca54gPhvfiloC8QIPAYTlcP vbL3tKJFqM6HxzpB7oyBGtc0tstKOh526YjpLW5MNfD2wzS70omH4SSs9U9F8hFH 4Lw9HPAw40s7D1PXsL1+yCmLnyscgKFR0rNEfP8rmGep/iI6B1eHNhrfcODFhvaN FX5cf0eb4OcZeb16B1/T/7LRNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIjju/z vs1fhM7OJP6y20JlnGtEMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV5Ierpdwag2e9qjPpJJhPBQ6DLEzcHA8bH1RPomeE9GyJUvirlajY /LGvvb/7JNSm/SI0ejr+2mXwdXP426B/UDRWwO+Rf9pO+yNOTKHSW16anxjW3Tzp ahgawgZtR7hmibr+cvFT0DMX39A2Ra8yabwBjETGQXfHZK1RM/2uLF6BDi6mI0Ee vkPeLRtt7UtWuuwvuCcarZ8QMSgs7b6xwsbihmwwfRaKjYX9Jy7QaQignD7nbFHu 3Pl+7ENeeJ45FAGat+4u5+7QktOXtX3D3s1nFIbaPDDZAOQ87gTjM+HYC8BEt4ar bGhHpzczCKKcpMhORyx7qsuoPmdzPrb9 -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:08 2025 by rpki-client