$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: S2E2nZEYC0jUdSm3Bqt0p4F37yunn4ZkBtNmENfchUI= Subject key identifier: 36:35:A1:0C:96:5C:E2:B8:67:0A:DB:38:38:62:60:C0:51:1F:0F:3E Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: AC Signing time: Mon 03 Nov 2025 06:09:59 +0000 Manifest this update: Mon 03 Nov 2025 06:09:58 +0000 Manifest next update: Mon 10 Nov 2025 06:09:58 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: F77Etnn7MHb5A4aN1dDwuQbAP37lrez3oWZA8J54G/Q=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: pawwhpt8xl4Jm5tUlNLFvNNRwT1g8ks5JKIz2Wod4KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Nov 3 06:09:58 2025 GMT Not After : Nov 10 06:09:58 2025 GMT Subject: CN=69084736-eb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:54:ab:4a:a6:32:df:a5:03:23:85:4b:d3: 27:3f:4b:b4:eb:a2:20:e3:2a:92:a3:a3:10:ab:56: 3e:ba:10:a4:a6:cf:5e:40:97:16:03:9e:4d:97:18: e5:56:ee:c2:55:04:03:06:b6:04:bf:c1:02:4b:42: 70:9d:63:eb:74:ea:a1:f7:88:69:ab:09:ae:c3:0c: 70:99:89:6f:1a:d2:13:cf:22:97:04:c9:81:d7:53: c6:1d:a5:c3:43:ca:1a:45:af:79:62:49:0d:51:77: 14:a1:91:ec:fd:6d:46:d2:b0:3c:56:14:31:ad:a5: 53:1b:48:c0:17:ff:fd:14:78:fa:33:d8:d7:7e:b7: b8:cd:7c:b4:9f:0e:ba:c6:46:c0:f0:eb:be:be:fe: 8e:2e:34:20:00:91:cf:ca:83:81:31:4a:4c:e9:98: 0e:65:9d:a7:5d:2b:ed:13:16:3f:69:70:17:f5:58: 91:3a:43:d4:ea:ed:b1:87:b9:16:d0:71:b8:e6:b2: ab:fa:3f:63:ba:2f:bb:7a:a2:64:2f:a2:68:3a:0c: b0:9f:b2:c2:a6:c1:2d:f2:ae:e5:59:7f:30:b4:a5: 07:96:96:0c:42:a7:d7:b7:e4:2f:b8:15:c9:bd:90: 1e:fa:12:28:a5:c1:61:0c:f1:42:fa:ea:46:8f:52: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:A1:0C:96:5C:E2:B8:67:0A:DB:38:38:62:60:C0:51:1F:0F:3E X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:d4:88:60:98:20:98:94:83:9d:36:0b:ad:5d:7b:ba:dd: a7:b1:ac:25:01:cf:fa:b0:98:05:79:5d:8d:cc:41:f7:1c:dc: dd:40:f9:55:ff:d5:83:6c:77:49:f3:d6:16:ec:db:04:7c:7b: c7:03:1f:52:f3:07:5d:a7:3d:3f:22:0b:51:49:5d:22:59:14: 83:fb:f2:c9:ba:f8:9c:54:7b:dc:46:3e:fc:96:5f:78:57:43: d1:a1:eb:2b:c5:31:b0:47:4d:d2:cf:ee:69:02:c1:48:e6:66: 50:0f:75:e4:a6:1d:d5:90:68:4e:c9:1b:0a:6a:b0:39:0b:91: af:8c:9b:06:ad:16:51:9e:85:ca:52:3e:a0:6a:3c:7e:d2:19: 73:03:e3:d6:5f:a1:f8:6f:f9:0d:7c:77:9d:e1:39:a8:81:a3: 8e:32:3b:71:30:2b:01:2a:5f:43:b4:69:e4:63:b2:b5:a5:9e: 45:52:00:57:66:5e:6d:94:15:3d:e9:43:7b:43:2d:ad:26:1f: 75:de:51:21:d5:a4:a5:f4:15:87:f3:dd:b9:a9:99:1d:d0:cd: bf:eb:1b:0f:a4:cd:8b:2c:ca:b4:2e:8d:3c:4f:2b:24:75:37: a9:8c:6c:93:99:cb:36:1a:31:09:87:ae:42:79:fd:a6:b2:e9: e8:6f:21:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjUxMTAzMDYwOTU4WhcNMjUxMTEwMDYwOTU4WjAYMRYwFAYD VQQDEw02OTA4NDczNi1lYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyBUq0qmMt+lAyOFS9MnP0u066Ig4yqSo6MQq1Y+uhCkps9eQJcWA55Nlxjl Vu7CVQQDBrYEv8ECS0JwnWPrdOqh94hpqwmuwwxwmYlvGtITzyKXBMmB11PGHaXD Q8oaRa95YkkNUXcUoZHs/W1G0rA8VhQxraVTG0jAF//9FHj6M9jXfre4zXy0nw66 xkbA8Ou+vv6OLjQgAJHPyoOBMUpM6ZgOZZ2nXSvtExY/aXAX9ViROkPU6u2xh7kW 0HG45rKr+j9jui+7eqJkL6JoOgywn7LCpsEt8q7lWX8wtKUHlpYMQqfXt+QvuBXJ vZAe+hIopcFhDPFC+upGj1LA1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY1oQyW XOK4ZwrbODhiYMBRHw8+MB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhX9SIYJggmJSDnTYLrV17ut2nsawlAc/6sJgFeV2NzEH3HNzdQPlV /9WDbHdJ89YW7NsEfHvHAx9S8wddpz0/IgtRSV0iWRSD+/LJuvicVHvcRj78ll94 V0PRoesrxTGwR03Sz+5pAsFI5mZQD3Xkph3VkGhOyRsKarA5C5GvjJsGrRZRnoXK Uj6gajx+0hlzA+PWX6H4b/kNfHed4TmogaOOMjtxMCsBKl9DtGnkY7K1pZ5FUgBX Zl5tlBU96UN7Qy2tJh913lEh1aSl9BWH8925qZkd0M2/6xsPpM2LLMq0Lo08Tysk dTepjGyTmcs2GjEJh65Cef2msunobyEg -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:20 2025 by rpki-client