$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: S0K4pTC/6Sgo6ntkwoJclcFs2H7tDmMCMm+znmbHPIg= Subject key identifier: 5E:4A:2C:F6:A8:74:C8:B2:00:32:C6:78:A6:79:A5:7E:1D:43:B8:C2 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 070D Signing time: Wed 08 Oct 2025 21:50:31 +0000 Manifest this update: Wed 08 Oct 2025 21:50:30 +0000 Manifest next update: Wed 15 Oct 2025 21:50:30 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: MACD2Kve13XLYqjzg5Zm0rJEhUm5z9v/C7ZWaRHwyFo=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 21:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Oct 8 21:50:30 2025 GMT Not After : Oct 15 21:50:30 2025 GMT Subject: CN=68e6dca6-c428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:5d:bf:e6:9b:b1:42:7f:38:a1:53:06:3e: ad:c8:9f:54:77:17:ee:41:9d:ce:38:e2:52:04:dc: 26:d4:06:20:29:1c:79:ae:74:6d:5c:9b:98:30:bb: 10:a3:6e:7b:3e:df:70:78:6a:55:f7:8d:1a:bd:1b: da:90:ac:72:a1:e8:1d:6f:65:09:e4:e1:d9:0a:09: 37:c8:46:0b:9c:56:00:6c:2e:4a:2a:de:a2:7b:6d: a3:e3:66:02:b7:0b:2d:66:f9:46:2b:dc:4b:ac:f9: 14:5e:b7:f4:21:ba:7a:8b:d9:c2:a4:55:38:c9:75: 79:3a:d2:76:eb:b0:51:81:4c:af:2a:42:f6:5c:00: e3:4c:3f:61:61:1c:83:68:0b:fd:3e:33:66:e4:f8: 0d:f5:61:06:20:06:da:f9:bf:01:c6:a7:ef:3f:0b: 90:fd:1e:59:2b:01:31:77:9f:a1:fa:cb:47:d4:6d: 12:bf:b8:f3:42:c4:b7:41:d6:06:e8:df:4a:f7:9e: c5:40:ba:21:b7:8f:d2:34:af:bf:92:d8:53:2f:bf: 49:cc:35:f0:a6:8a:8a:20:c0:59:fd:b7:ec:0b:b1: 41:63:0b:df:b0:40:23:79:cd:53:0c:47:ac:d5:ef: 13:f0:5b:43:f7:13:cc:a7:ea:1d:15:a2:6f:3e:e0: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:2C:F6:A8:74:C8:B2:00:32:C6:78:A6:79:A5:7E:1D:43:B8:C2 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:85:e5:65:17:0e:a8:38:bd:a1:7f:da:ab:7e:ef:a3:4e:11: f0:0b:e3:71:ad:1c:9d:c0:32:bf:1d:f0:3d:d4:88:7c:db:6e: 3d:89:f8:ed:f7:d5:ff:65:3c:d9:9a:b1:a9:6d:0d:33:de:8e: 93:4b:30:b4:2e:15:9f:2e:5c:bc:c1:6c:6e:c8:9c:a1:cf:8a: 3d:86:95:47:60:4e:c9:cf:fe:0f:3c:a7:49:90:fe:b1:62:cd: 9e:8a:50:98:5b:b8:19:71:90:c4:9b:17:8f:5f:71:8a:db:00: 86:a6:d9:61:5d:9b:a2:25:77:c2:6e:86:3b:3b:5e:49:3d:0a: d5:53:8d:76:39:04:50:23:31:6e:d8:97:16:63:df:f4:ed:a1: ce:57:1a:73:b4:ff:29:7b:8a:89:6a:42:71:d4:48:e2:2b:44: 1b:a2:d4:cb:60:c2:d7:04:37:fa:e7:92:ea:50:b3:4d:6d:1c: 32:71:c1:45:f1:28:e8:6b:f0:1a:57:ac:fb:0d:17:e8:5a:56: 23:79:54:1d:85:f8:3a:bd:37:44:b2:ed:3d:69:f4:26:2a:7d: 5a:ef:ea:13:00:94:77:d6:b2:df:6e:97:b2:b2:03:65:44:07: f0:25:cf:6f:e1:79:20:a3:3c:ef:33:d8:93:ec:5b:8f:6c:e2: 08:74:bf:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUxMDA4MjE1MDMwWhcNMjUxMDE1MjE1MDMwWjAYMRYwFAYD VQQDEw02OGU2ZGNhNi1jNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeJdv+absUJ/OKFTBj6tyJ9UdxfuQZ3OOOJSBNwm1AYgKRx5rnRtXJuYMLsQ o257Pt9weGpV940avRvakKxyoegdb2UJ5OHZCgk3yEYLnFYAbC5KKt6ie22j42YC twstZvlGK9xLrPkUXrf0Ibp6i9nCpFU4yXV5OtJ267BRgUyvKkL2XADjTD9hYRyD aAv9PjNm5PgN9WEGIAba+b8BxqfvPwuQ/R5ZKwExd5+h+stH1G0Sv7jzQsS3QdYG 6N9K957FQLoht4/SNK+/kthTL79JzDXwpoqKIMBZ/bfsC7FBYwvfsEAjec1TDEes 1e8T8FtD9xPMp+odFaJvPuCIVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5KLPao dMiyADLGeKZ5pX4dQ7jCMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKheVlFw6oOL2hf9qrfu+jThHwC+NxrRydwDK/HfA91Ih82249ifjt 99X/ZTzZmrGpbQ0z3o6TSzC0LhWfLly8wWxuyJyhz4o9hpVHYE7Jz/4PPKdJkP6x Ys2eilCYW7gZcZDEmxePX3GK2wCGptlhXZuiJXfCboY7O15JPQrVU412OQRQIzFu 2JcWY9/07aHOVxpztP8pe4qJakJx1EjiK0QbotTLYMLXBDf655LqULNNbRwyccFF 8Sjoa/AaV6z7DRfoWlYjeVQdhfg6vTdEsu09afQmKn1a7+oTAJR31rLfbpeysgNl RAfwJc9v4XkgozzvM9iT7FuPbOIIdL/S -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:45 2025 by rpki-client