$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: IxCi+qJM1UH2EeMm2kHSF7yxs/4J7tGWB/momquvXN8= Subject key identifier: 70:CF:47:47:E4:2E:F0:DD:19:C6:07:22:DC:AC:3D:B1:A9:3A:B5:0C Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 01B9 Signing time: Sun 19 Oct 2025 05:42:13 +0000 Manifest this update: Sun 19 Oct 2025 05:42:12 +0000 Manifest next update: Sun 26 Oct 2025 05:42:12 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: KPQhez3zmj8Ik/KCBabOWtskkyCXlNs+u84EX9HvjtQ=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: V7+xw0Oh19sCCsRJ/3dn3BE03yFJdR1cttirX6vRQc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Oct 19 05:42:12 2025 GMT Not After : Oct 26 05:42:12 2025 GMT Subject: CN=68f47a34-8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:c0:95:d2:9f:72:7f:61:9a:ed:83:b4:37: f8:f9:a8:23:56:2f:7b:bf:de:59:d0:12:77:5d:53: 3e:95:7c:c5:e9:4b:b1:06:0d:2d:ea:e0:3e:ea:f2: 34:ca:2f:f5:00:3a:17:67:04:98:d6:14:74:d8:ec: 74:83:4e:29:27:c7:a2:4a:84:7c:15:de:7d:a0:b1: fa:7b:08:11:56:85:40:ff:d0:ed:40:d3:31:0a:26: 04:97:cc:11:28:69:27:44:64:45:22:93:05:d6:61: 4b:39:01:f3:14:ab:e9:3a:db:27:51:d6:83:7e:c4: df:a1:1f:ad:67:b3:37:e0:25:a7:4c:81:2c:f1:62: d1:d2:1e:5d:3a:04:b9:84:29:26:79:d4:8b:94:0b: 15:6d:ec:be:39:a2:ec:be:e6:1a:8c:69:22:66:cd: db:8c:e5:c0:3b:b1:c0:f0:81:78:93:a3:91:a7:46: b1:30:76:d5:5f:f6:75:ff:bd:c0:70:33:8e:0c:29: 91:52:03:ac:01:d4:df:6a:e0:95:b9:e0:8f:9f:ef: 40:7e:35:be:79:da:0f:a5:27:6a:09:b9:40:b5:19: ea:ca:58:4f:5b:1f:87:6e:cb:30:36:f2:6e:7e:2a: 78:45:0f:c0:bb:4b:bb:50:22:26:89:45:0b:28:7e: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:47:47:E4:2E:F0:DD:19:C6:07:22:DC:AC:3D:B1:A9:3A:B5:0C X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b2:c7:b0:b4:31:9f:ff:46:f7:28:aa:57:04:7f:56:fc:c2: e9:21:37:ea:ae:22:9a:66:ee:45:f6:72:7a:c8:77:0f:71:3d: 7e:9f:5e:fd:96:7c:76:72:a0:fd:cc:c1:e2:99:77:0c:70:41: 31:03:00:86:da:d1:14:6e:0d:10:91:be:4c:63:c8:3f:e5:e7: 17:2b:f1:40:a1:03:3c:f3:50:b4:ee:87:e1:76:95:12:31:38: 89:dc:6f:e4:e8:8e:00:8d:44:ff:82:78:93:34:cb:d5:d2:56: 1b:e1:c8:22:25:95:9c:60:d3:06:fb:0d:b3:e1:ce:bb:2c:0f: ac:5c:7a:2d:74:81:27:27:c6:e2:ab:3b:c6:1a:df:35:8f:38: 19:d5:ac:38:e6:29:3d:18:87:0a:98:07:37:42:17:15:ab:6c: 63:15:d3:d3:d5:50:32:38:b7:64:20:a4:e8:5a:4b:b1:63:a8: 44:95:59:8e:82:e7:d3:86:1d:94:12:48:d8:cc:95:17:99:64: 46:ef:25:47:c3:70:a6:0c:da:4b:4a:6f:1d:43:cd:a4:56:20: ad:e3:84:64:4b:73:76:c4:a0:7d:39:ba:cb:2b:ff:01:98:d5: 70:6f:db:e7:1f:2e:58:3e:2a:6d:ec:0f:32:b9:b0:42:96:45: b4:45:04:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUxMDE5MDU0MjEyWhcNMjUxMDI2MDU0MjEyWjAYMRYwFAYD VQQDEw02OGY0N2EzNC04YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBXAldKfcn9hmu2DtDf4+agjVi97v95Z0BJ3XVM+lXzF6UuxBg0t6uA+6vI0 yi/1ADoXZwSY1hR02Ox0g04pJ8eiSoR8Fd59oLH6ewgRVoVA/9DtQNMxCiYEl8wR KGknRGRFIpMF1mFLOQHzFKvpOtsnUdaDfsTfoR+tZ7M34CWnTIEs8WLR0h5dOgS5 hCkmedSLlAsVbey+OaLsvuYajGkiZs3bjOXAO7HA8IF4k6ORp0axMHbVX/Z1/73A cDOODCmRUgOsAdTfauCVueCPn+9AfjW+edoPpSdqCblAtRnqylhPWx+HbsswNvJu fip4RQ/Au0u7UCImiUULKH7lywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDPR0fk LvDdGcYHItysPbGpOrUMMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJssewtDGf/0b3KKpXBH9W/MLpITfqriKaZu5F9nJ6yHcPcT1+n179 lnx2cqD9zMHimXcMcEExAwCG2tEUbg0Qkb5MY8g/5ecXK/FAoQM881C07ofhdpUS MTiJ3G/k6I4AjUT/gniTNMvV0lYb4cgiJZWcYNMG+w2z4c67LA+sXHotdIEnJ8bi qzvGGt81jzgZ1aw45ik9GIcKmAc3QhcVq2xjFdPT1VAyOLdkIKToWkuxY6hElVmO gufThh2UEkjYzJUXmWRG7yVHw3CmDNpLSm8dQ82kViCt44RkS3N2xKB9ObrLK/8B mNVwb9vnHy5YPipt7A8yubBClkW0RQR9 -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:36 2025 by rpki-client