$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: pUoblyVOm8pNxvDHar2K3uVYcQeyL2cXwiQ5CPa6uio= Subject key identifier: 63:9D:48:3E:58:42:86:38:33:BD:F9:FC:32:F5:70:56:F0:96:0B:B8 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 017F Signing time: Mon 03 Nov 2025 03:40:22 +0000 Manifest this update: Mon 03 Nov 2025 03:40:21 +0000 Manifest next update: Mon 10 Nov 2025 03:40:21 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: a5F61ysP7CvrrG9SUsL1eNSBWDMuYUvY/pLou3O9Lxg=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: 7rc08NoUx6luLOLc4SLZl6pXq3BAAEvf8G5/Y6oZSx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Nov 3 03:40:21 2025 GMT Not After : Nov 10 03:40:21 2025 GMT Subject: CN=69082425-fc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:7a:a5:0c:fe:74:66:b8:7e:e2:89:95:e9: 3d:20:e3:76:ed:96:b3:72:94:0c:f2:df:c9:1e:4f: d1:a5:14:4b:f0:8f:7f:74:99:ae:6c:9a:08:ce:5c: 43:90:68:ff:5c:14:fe:34:7f:c2:2a:50:93:96:a6: 8a:5d:0a:36:f5:1b:1f:f3:a7:78:de:af:56:e9:6e: d4:47:1b:74:fe:ce:89:8d:1d:90:4b:43:c9:20:8f: a6:54:72:ec:11:3a:cc:5d:a3:fe:b3:62:ac:04:21: fd:31:dc:2e:cb:ef:03:7b:10:f2:45:c7:e3:43:ef: 00:97:61:0b:ba:52:b4:2c:71:3f:cb:af:18:e4:6f: 93:c2:f0:bb:72:52:69:a3:7f:47:e3:a7:46:21:36: ea:b7:12:83:d3:4a:d6:5a:04:0a:49:2c:c0:92:16: 43:6e:87:78:f5:3f:3c:5e:6c:39:7d:66:9d:43:48: 0c:89:0d:48:06:c3:fb:c6:d1:26:8d:1b:8f:9a:44: d8:42:2a:9a:c1:89:47:b5:84:0a:ba:db:39:86:8e: 86:9e:c2:52:3d:5f:be:48:34:1c:a7:4d:15:f4:eb: cc:77:fe:0b:b9:e2:ce:4c:48:e6:af:01:e0:10:0f: 47:ad:39:51:84:ba:f6:b7:b5:3d:01:83:b2:98:78: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9D:48:3E:58:42:86:38:33:BD:F9:FC:32:F5:70:56:F0:96:0B:B8 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e5:7f:14:79:0b:5b:45:9e:eb:45:74:de:f3:27:d1:b5:1e: f4:c4:c9:4e:df:48:75:97:1f:22:94:8d:1f:07:da:02:6b:8d: c5:09:04:e5:84:96:83:8b:4f:16:0d:0d:21:ba:54:97:a7:ac: cf:35:83:44:09:b8:ca:48:35:d3:72:4e:2a:35:3b:63:d7:96: 48:ed:48:ed:87:04:cd:d4:c4:71:d5:26:13:b8:d8:a5:17:cf: 69:85:e8:39:eb:d1:9b:a9:f9:a1:96:f0:ed:de:4d:bc:7f:22: d9:18:6e:da:24:60:93:f9:7d:7d:83:62:cf:d6:d4:a8:4c:3a: 63:40:b4:85:0e:44:b5:da:f1:49:b3:82:46:d8:4c:82:f5:ae: 48:f3:28:97:80:81:52:89:81:c8:b6:9a:80:46:c2:59:88:5f: ff:ef:1f:0b:1e:d3:ff:bd:dc:68:44:41:c0:72:db:a6:fc:5f: a9:56:26:54:0f:bb:8f:8b:3a:8e:b5:82:33:56:82:1b:bd:17: 10:03:24:5b:f0:5d:08:bb:79:59:3f:21:f3:58:60:a9:b1:fa: 2d:35:2a:f3:60:d9:98:59:58:cb:cc:91:ef:a9:ae:eb:28:9b: ef:97:a4:1d:7e:24:32:c9:a1:fd:1a:91:33:58:96:4e:f7:4a: f7:f8:a6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUxMTAzMDM0MDIxWhcNMjUxMTEwMDM0MDIxWjAYMRYwFAYD VQQDEw02OTA4MjQyNS1mYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/x6pQz+dGa4fuKJlek9ION27ZazcpQM8t/JHk/RpRRL8I9/dJmubJoIzlxD kGj/XBT+NH/CKlCTlqaKXQo29Rsf86d43q9W6W7URxt0/s6JjR2QS0PJII+mVHLs ETrMXaP+s2KsBCH9Mdwuy+8DexDyRcfjQ+8Al2ELulK0LHE/y68Y5G+TwvC7clJp o39H46dGITbqtxKD00rWWgQKSSzAkhZDbod49T88Xmw5fWadQ0gMiQ1IBsP7xtEm jRuPmkTYQiqawYlHtYQKuts5ho6GnsJSPV++SDQcp00V9OvMd/4LueLOTEjmrwHg EA9HrTlRhLr2t7U9AYOymHhxVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOdSD5Y QoY4M735/DL1cFbwlgu4MB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN5X8UeQtbRZ7rRXTe8yfRtR70xMlO30h1lx8ilI0fB9oCa43FCQTl hJaDi08WDQ0hulSXp6zPNYNECbjKSDXTck4qNTtj15ZI7UjthwTN1MRx1SYTuNil F89pheg569GbqfmhlvDt3k28fyLZGG7aJGCT+X19g2LP1tSoTDpjQLSFDkS12vFJ s4JG2EyC9a5I8yiXgIFSiYHItpqARsJZiF//7x8LHtP/vdxoREHActum/F+pViZU D7uPizqOtYIzVoIbvRcQAyRb8F0Iu3lZPyHzWGCpsfotNSrzYNmYWVjLzJHvqa7r KJvvl6QdfiQyyaH9GpEzWJZO90r3+Kbi -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:48 2025 by rpki-client