$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: WrBfKhrYgpd+wUViSsdyMvtZg1hcx9I+d3KZFUcNERM= Subject key identifier: BD:2D:DE:20:03:FC:E7:2C:B2:4F:09:B7:6D:A4:AB:BF:D4:0B:E8:AC Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0191 Signing time: Sat 25 Oct 2025 07:27:38 +0000 Manifest this update: Sat 25 Oct 2025 07:27:37 +0000 Manifest next update: Sat 01 Nov 2025 07:27:37 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: 1eftKZyBI+XZ54FXVGBIsIT2uyxqga0Va6h2v+H/eV4=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 07:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Oct 25 07:27:37 2025 GMT Not After : Nov 1 07:27:37 2025 GMT Subject: CN=68fc7bea-b257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:a5:25:c5:ac:6d:42:ca:0c:6e:52:59:b9: c3:3a:80:de:f5:c7:dd:de:a9:83:bf:78:02:6a:00: 1e:2b:a7:f9:c6:df:0f:ed:ce:d5:01:12:bd:81:bf: 64:68:54:ae:b8:71:a2:70:01:fd:72:6e:8e:40:6a: 7d:95:5d:24:ba:8a:85:db:2d:56:99:73:44:e4:9a: 95:3b:eb:58:4e:6a:f1:89:63:1b:0b:62:78:db:4f: e2:b6:0a:a0:76:64:f3:01:56:c4:bd:d0:dd:10:41: 1d:48:d2:0d:35:6b:db:55:85:1c:47:bf:41:0f:ff: 2e:c1:ee:e2:60:9c:a5:79:06:b6:ed:e7:92:3a:45: ab:a7:57:bf:59:27:cf:29:35:ad:29:8b:b8:66:8e: 7a:da:36:9e:ea:5e:37:8f:39:3a:75:21:83:5c:50: f9:00:49:54:3b:0f:25:71:8e:22:3f:b6:7c:29:9c: a0:74:38:65:53:7a:ed:de:08:f9:85:8a:27:78:1d: 90:61:75:35:a8:44:54:c1:6b:6a:7b:9e:92:e5:68: 73:8f:0e:a1:66:ba:84:b7:b8:0b:fd:1e:9d:00:bc: 2d:17:c0:e6:52:1d:e0:f2:d9:db:0b:6e:3d:05:7e: a7:fb:72:9d:81:5c:70:7e:7e:be:db:3a:0f:13:a2: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:DE:20:03:FC:E7:2C:B2:4F:09:B7:6D:A4:AB:BF:D4:0B:E8:AC X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b3:32:4c:9f:17:1a:53:3e:d4:b4:a5:31:f4:b3:36:d9:bc: 06:83:d9:4e:d7:b8:95:48:ad:10:5b:dd:3f:6f:7a:04:98:3e: 98:88:73:e8:46:3e:27:1e:a8:4a:8c:83:d1:ca:97:c1:1e:32: 8d:27:3e:79:88:fe:48:a8:4a:80:db:a9:e5:61:a1:52:e8:59: 3d:b9:18:1a:62:0d:cb:09:8c:f8:31:86:f8:b4:f3:2a:4e:36: fa:66:ff:5a:71:30:c9:b1:7a:8e:4d:62:1f:39:f1:81:04:b7: 38:f8:63:32:2e:3f:6a:a7:04:e1:22:b9:3d:eb:d0:cf:50:b4: ec:d9:8b:2f:0a:ae:10:06:05:ed:eb:ce:ce:81:bb:1b:03:e9: 48:5f:8b:2d:f8:bc:81:d0:81:79:e3:4e:57:a9:24:eb:70:55: 13:66:49:5f:07:46:68:73:44:c3:9e:6b:b7:7f:90:de:f8:50: 55:be:31:53:69:39:56:82:56:57:af:35:06:88:63:c1:71:48: ef:66:6a:62:cb:d4:3b:59:c9:b9:1d:b2:b2:1b:0c:8c:50:3a: 58:61:17:1f:c1:2d:43:43:4d:89:da:3d:44:44:1a:7a:c7:46: 01:8b:9a:78:9c:8a:d4:ff:e7:5c:3a:4c:14:41:4e:d0:1b:d8: fc:72:7b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUxMDI1MDcyNzM3WhcNMjUxMTAxMDcyNzM3WjAYMRYwFAYD VQQDEw02OGZjN2JlYS1iMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8USlJcWsbULKDG5SWbnDOoDe9cfd3qmDv3gCagAeK6f5xt8P7c7VARK9gb9k aFSuuHGicAH9cm6OQGp9lV0kuoqF2y1WmXNE5JqVO+tYTmrxiWMbC2J420/itgqg dmTzAVbEvdDdEEEdSNINNWvbVYUcR79BD/8uwe7iYJyleQa27eeSOkWrp1e/WSfP KTWtKYu4Zo562jae6l43jzk6dSGDXFD5AElUOw8lcY4iP7Z8KZygdDhlU3rt3gj5 hYoneB2QYXU1qERUwWtqe56S5Whzjw6hZrqEt7gL/R6dALwtF8DmUh3g8tnbC249 BX6n+3KdgVxwfn6+2zoPE6JmmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0t3iAD /Ocssk8Jt22kq7/UC+isMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbszJMnxcaUz7UtKUx9LM22bwGg9lO17iVSK0QW90/b3oEmD6YiHPo Rj4nHqhKjIPRypfBHjKNJz55iP5IqEqA26nlYaFS6Fk9uRgaYg3LCYz4MYb4tPMq Tjb6Zv9acTDJsXqOTWIfOfGBBLc4+GMyLj9qpwThIrk969DPULTs2YsvCq4QBgXt 687OgbsbA+lIX4st+LyB0IF5405XqSTrcFUTZklfB0Zoc0TDnmu3f5De+FBVvjFT aTlWglZXrzUGiGPBcUjvZmpiy9Q7Wcm5HbKyGwyMUDpYYRcfwS1DQ02J2j1ERBp6 x0YBi5p4nIrU/+dcOkwUQU7QG9j8cnuG -----END CERTIFICATE-----Generated at Sun Oct 26 23:18:37 2025 by rpki-client