$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: q6bG0hCcSUgs1ZRh5dTRktIikBpYlppLmgPesaJgRHA= Subject key identifier: 1B:3C:4C:50:8C:AF:9A:BD:C9:37:E2:0D:B8:78:35:ED:17:37:DF:6D Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0CD1 Signing time: Tue 04 Nov 2025 18:15:01 +0000 Manifest this update: Tue 04 Nov 2025 18:15:01 +0000 Manifest next update: Tue 11 Nov 2025 18:15:01 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: h26Yuci6xcH1vvK0rtTeaO2an8r4Ay5KerS6y3VDwHg=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Nov 4 18:15:01 2025 GMT Not After : Nov 11 18:15:01 2025 GMT Subject: CN=690a42a5-ca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:a9:a3:e2:95:7f:b5:bd:22:d8:20:db:fe: 33:86:38:a1:3f:20:db:18:ab:ba:5d:31:ae:b4:2e: 2b:32:31:4f:72:50:9d:2d:9b:bd:9c:bf:4e:e0:d6: f5:07:2b:0b:8f:e4:87:7b:6c:a6:40:58:a2:38:57: 23:47:06:dd:cf:30:e0:62:5d:ea:11:8b:7c:18:ac: e8:41:7e:10:04:20:e8:52:78:ec:cc:87:aa:8a:41: dc:5c:e6:52:7d:85:0f:e2:f4:25:d5:ce:d8:b2:9d: 38:02:74:da:eb:04:2a:74:2b:99:63:b9:e8:48:4f: 85:68:4b:6e:3c:9c:3e:1b:23:fb:71:bb:41:93:34: d8:6c:a3:56:f0:8c:c9:d4:aa:bd:26:cc:ad:7b:ae: da:66:73:59:02:d6:4a:f2:47:ab:02:54:66:c6:ad: 10:07:61:29:c1:21:c0:17:90:b2:4b:3a:8e:3f:89: 0c:1f:15:b9:b0:65:5a:72:13:dd:61:8a:72:82:bc: 6e:da:06:52:47:03:aa:c8:45:03:a2:df:4d:74:b5: 33:7d:c1:b3:8f:68:ff:9d:01:23:50:1c:34:9f:5d: af:0e:a1:99:09:02:c8:b6:35:c3:30:a8:af:3a:04: 9f:6f:a1:b3:cd:55:9d:74:1a:82:3b:05:47:1a:3e: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:4C:50:8C:AF:9A:BD:C9:37:E2:0D:B8:78:35:ED:17:37:DF:6D X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b2:d0:18:7b:06:ab:9a:6d:d1:10:a4:dd:1d:25:54:2d:da: 95:f0:01:e5:ab:d9:38:9b:2e:2b:8a:19:66:32:4f:66:d5:b0: 6d:32:26:b1:1f:b0:03:6c:76:cb:75:ec:8e:c2:a6:db:03:f1: 68:57:f7:3e:26:95:6a:e9:fb:f1:4d:40:cc:5f:97:49:13:eb: 42:02:4c:cd:c4:af:ec:8e:41:15:af:ae:40:ec:11:09:1e:4a: 12:18:4e:08:d6:50:7f:50:92:52:e2:74:a2:1d:0f:55:46:73: 83:fc:c1:da:e9:f9:44:5f:d0:e9:2a:e3:5e:34:b0:61:1a:6b: 14:3c:28:31:fb:9a:b3:74:3a:71:c5:ce:58:ae:37:38:2d:6b: d3:9d:f2:12:e9:85:2a:75:4a:c7:25:12:a0:03:b6:0a:c5:33: 04:35:37:13:d1:6c:62:22:8c:82:b1:3f:48:15:3e:43:3b:68: 00:47:56:43:58:14:91:ba:fd:81:91:a0:14:9c:5c:74:c2:04: dd:06:cd:ea:3f:40:6d:ef:50:94:17:bd:a6:60:e7:ca:ac:90: 03:16:f8:dd:9d:1e:63:c7:7f:f9:68:9f:6f:84:63:ee:e7:bf: f3:7b:97:67:ac:b4:12:02:e5:f7:d5:59:99:06:da:58:4a:09: 29:99:54:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUxMTA0MTgxNTAxWhcNMjUxMTExMTgxNTAxWjAYMRYwFAYD VQQDEw02OTBhNDJhNS1jYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzepo+KVf7W9Itgg2/4zhjihPyDbGKu6XTGutC4rMjFPclCdLZu9nL9O4Nb1 BysLj+SHe2ymQFiiOFcjRwbdzzDgYl3qEYt8GKzoQX4QBCDoUnjszIeqikHcXOZS fYUP4vQl1c7Ysp04AnTa6wQqdCuZY7noSE+FaEtuPJw+GyP7cbtBkzTYbKNW8IzJ 1Kq9Jsyte67aZnNZAtZK8kerAlRmxq0QB2EpwSHAF5CySzqOP4kMHxW5sGVachPd YYpygrxu2gZSRwOqyEUDot9NdLUzfcGzj2j/nQEjUBw0n12vDqGZCQLItjXDMKiv OgSfb6GzzVWddBqCOwVHGj7PvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs8TFCM r5q9yTfiDbh4Ne0XN99tMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlstAYewarmm3REKTdHSVULdqV8AHlq9k4my4rihlmMk9m1bBtMiax H7ADbHbLdeyOwqbbA/FoV/c+JpVq6fvxTUDMX5dJE+tCAkzNxK/sjkEVr65A7BEJ HkoSGE4I1lB/UJJS4nSiHQ9VRnOD/MHa6flEX9DpKuNeNLBhGmsUPCgx+5qzdDpx xc5Yrjc4LWvTnfIS6YUqdUrHJRKgA7YKxTMENTcT0WxiIoyCsT9IFT5DO2gAR1ZD WBSRuv2BkaAUnFx0wgTdBs3qP0Bt71CUF72mYOfKrJADFvjdnR5jx3/5aJ9vhGPu 57/ze5dnrLQSAuX31VmZBtpYSgkpmVRb -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:23 2025 by rpki-client