$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: LR2K3pJUlSreV6JX8kiv7UHBVEhLL3/+LsAtkjXGAuc= Subject key identifier: AB:00:B4:2D:72:4F:A9:96:FF:E8:68:8C:B2:8E:43:63:1E:59:4A:A8 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 0819 Signing time: Sat 18 Oct 2025 22:02:09 +0000 Manifest this update: Sat 18 Oct 2025 22:02:08 +0000 Manifest next update: Sat 25 Oct 2025 22:02:08 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: Jj15CqCwYKDsz2XlDX2nFyxYpuTRoV8eh7+Ah3a3PTg=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Oct 18 22:02:08 2025 GMT Not After : Oct 25 22:02:08 2025 GMT Subject: CN=68f40e61-6266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:4a:59:89:ae:c9:53:9a:ce:43:0d:0d:fd: 41:d4:8a:bb:b7:0a:e9:aa:77:51:29:5b:bc:df:e2: 56:de:c4:ae:8a:de:24:96:e7:8c:a1:36:61:fe:64: e2:84:82:ca:c5:29:bf:ee:53:6e:39:8e:41:2d:11: c1:5d:3d:73:f0:fe:4c:f1:34:c6:37:67:67:45:60: e6:13:1e:90:dc:03:c6:86:e0:29:d2:a5:59:43:67: 2f:d8:26:85:60:6b:7b:86:4c:e2:bb:57:e0:b5:73: 7b:dc:48:38:aa:9d:1d:d4:1d:0d:19:2c:9c:0b:e0: 56:10:84:af:94:68:6b:0d:c9:76:94:cb:72:a2:af: ae:6d:cd:bc:8d:8c:41:da:0f:d1:4d:e1:03:d2:41: c0:16:c6:9d:f0:db:fe:5d:1f:b1:21:0b:bd:e6:d5: a2:03:00:1a:f4:2c:c7:a6:e9:86:c4:52:45:18:e4: 3d:f3:1d:fd:cf:e2:96:b6:2a:a5:0e:01:da:a5:34: 4e:55:1a:af:a2:cf:63:55:98:00:b5:92:23:6c:59: 6e:ea:01:5b:6e:68:10:8e:93:05:7d:95:27:6a:c7: e7:db:45:ba:56:f7:66:c6:6f:c2:48:cd:f6:29:c8: af:5e:07:7a:b2:88:03:e1:7c:6b:90:a4:18:8c:12: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:00:B4:2D:72:4F:A9:96:FF:E8:68:8C:B2:8E:43:63:1E:59:4A:A8 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:64:ae:af:1e:12:0b:6d:5d:84:e4:af:8c:26:e1:66:18:0c: a3:02:1f:18:3c:a6:69:3a:90:d8:19:06:cb:64:a9:62:d2:b2: db:5f:3c:e2:c3:11:9c:d9:76:0b:80:ea:8a:a9:63:32:c6:03: b9:e8:7a:b6:ba:19:82:e0:ed:13:a5:9f:1c:07:2e:74:cf:de: d2:9c:d9:33:de:0a:70:b1:10:f1:5a:43:af:24:9f:2e:73:96: 8d:a7:50:36:7e:dc:ff:2b:bc:b1:6a:22:a8:1b:01:ec:f5:3a: d9:6c:77:a4:e5:c3:8c:12:f1:89:5b:96:cf:48:b3:1f:82:2d: 2e:e2:90:af:22:53:ac:51:28:0a:b3:1b:dc:ee:9c:43:3a:71: ae:a3:ec:4f:38:fc:39:cd:b7:1f:8b:3e:be:f9:97:30:59:a5: b5:37:f1:06:8b:69:10:bf:d4:25:f3:60:e2:ca:ce:07:06:5b: 5f:6f:91:62:84:2e:1d:ff:fd:5b:b7:c6:19:4b:d1:d1:0a:fc: 5b:8f:06:88:7a:ec:89:bf:66:a3:b5:5b:de:0c:c8:98:8a:11: c5:c7:91:f7:35:d9:4e:45:0b:fd:e1:16:8a:f3:b3:c1:ab:95: cc:94:0f:b1:28:e0:81:36:0d:d8:23:1a:1b:a0:b0:b7:e1:f5: c4:5c:45:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUxMDE4MjIwMjA4WhcNMjUxMDI1MjIwMjA4WjAYMRYwFAYD VQQDEw02OGY0MGU2MS02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2dKWYmuyVOazkMNDf1B1Iq7twrpqndRKVu83+JW3sSuit4klueMoTZh/mTi hILKxSm/7lNuOY5BLRHBXT1z8P5M8TTGN2dnRWDmEx6Q3APGhuAp0qVZQ2cv2CaF YGt7hkziu1fgtXN73Eg4qp0d1B0NGSycC+BWEISvlGhrDcl2lMtyoq+ubc28jYxB 2g/RTeED0kHAFsad8Nv+XR+xIQu95tWiAwAa9CzHpumGxFJFGOQ98x39z+KWtiql DgHapTROVRqvos9jVZgAtZIjbFlu6gFbbmgQjpMFfZUnasfn20W6Vvdmxm/CSM32 KcivXgd6sogD4XxrkKQYjBJDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsAtC1y T6mW/+hojLKOQ2MeWUqoMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZK6vHhILbV2E5K+MJuFmGAyjAh8YPKZpOpDYGQbLZKli0rLbXzzi wxGc2XYLgOqKqWMyxgO56Hq2uhmC4O0TpZ8cBy50z97SnNkz3gpwsRDxWkOvJJ8u c5aNp1A2ftz/K7yxaiKoGwHs9TrZbHek5cOMEvGJW5bPSLMfgi0u4pCvIlOsUSgK sxvc7pxDOnGuo+xPOPw5zbcfiz6++ZcwWaW1N/EGi2kQv9Ql82Diys4HBltfb5Fi hC4d//1bt8YZS9HRCvxbjwaIeuyJv2ajtVveDMiYihHFx5H3NdlORQv94RaK87PB q5XMlA+xKOCBNg3YIxoboLC34fXEXEV4 -----END CERTIFICATE-----Generated at Wed Oct 22 22:37:06 2025 by rpki-client