$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: qobY6/6XFLxHrP3RNO/7DwqWwEFUSnrSCWpOIfhaFbA= Subject key identifier: C5:79:2E:EC:CD:9A:6C:25:A3:7A:36:97:B0:FD:97:18:2F:D7:5B:8F Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 1277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 124C Signing time: Mon 20 Oct 2025 17:33:58 +0000 Manifest this update: Mon 20 Oct 2025 17:33:57 +0000 Manifest next update: Mon 27 Oct 2025 17:33:57 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: L5fS8BAYCMgfedKNRCOT/S6fWdbzz7CCaQtLmhb8PkI=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4727 (0x1277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Oct 20 17:33:57 2025 GMT Not After : Oct 27 17:33:57 2025 GMT Subject: CN=68f67286-811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:ac:5d:51:7c:ae:80:e9:6e:8f:5c:ab:f7: 7d:c2:43:0b:64:68:74:45:4f:4d:49:18:0e:b4:c6: fe:48:a3:5d:ad:e4:f4:f6:d9:c2:39:60:da:ef:e1: e4:50:92:af:78:20:a3:42:b5:26:e0:08:fc:bb:ad: 01:4b:9d:8c:c9:56:db:28:f9:02:d8:ca:03:ba:0e: 99:45:18:cc:9a:ca:59:31:2c:14:b9:0f:c1:91:33: e9:23:0d:65:d6:01:8e:da:95:ef:30:2d:b7:db:44: 8b:11:78:07:a6:c9:af:c3:29:fd:49:28:a7:ee:e4: 8f:c6:08:fd:c2:fe:78:e7:7c:28:a5:f7:7b:91:76: 7b:03:ae:a2:64:1c:b7:eb:3b:93:f7:85:d7:a4:40: fa:4c:3d:58:63:43:59:d4:de:42:d1:be:32:e4:40: f5:19:3e:f2:46:10:6b:cc:82:2d:d6:ea:80:a4:07: e4:c8:8f:a1:aa:70:44:9c:b8:63:20:48:5e:8a:ae: 84:6e:1d:6a:4e:0e:43:4b:12:f2:ce:e8:49:98:72: e6:5c:6c:8e:fc:92:90:14:35:06:fd:cd:eb:8b:9d: 75:04:a6:98:1e:d8:b1:99:9f:ef:37:3b:d9:02:a5: f0:21:58:bb:54:94:7a:17:cf:5a:05:13:22:0b:a0: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:2E:EC:CD:9A:6C:25:A3:7A:36:97:B0:FD:97:18:2F:D7:5B:8F X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:cf:b7:6c:f1:56:e7:f4:a2:26:a7:1f:4a:bf:a3:36:8c:a5: 51:04:a2:7c:f0:75:8a:1d:29:c5:05:1d:a0:ab:3f:d6:f8:01: 63:82:db:b9:e8:c0:f4:01:6f:7a:9e:49:54:4b:18:82:f7:38: 6a:43:cd:91:58:6a:73:61:ee:c8:c5:79:bc:f7:16:a3:e5:5b: f1:75:4d:5a:e3:e3:74:9b:7a:f9:e0:33:4a:ec:3c:84:2e:ae: 5c:26:cc:bc:34:76:69:3e:6b:b9:26:89:ec:0f:56:50:9d:56: 30:e8:a8:5f:37:22:3e:b5:8c:1c:fd:73:ba:d2:fe:51:15:25: 30:bf:7a:f8:73:39:93:50:d1:bc:9d:85:76:d7:40:9c:55:13: 6e:41:98:59:76:f9:ca:6b:c1:ff:05:9b:b3:a2:7c:47:7e:ce: 1b:a1:2b:4b:92:b5:e8:dc:c1:de:c2:0d:e2:ae:a6:54:8f:7c: 98:d8:f5:a5:c9:81:83:34:13:73:49:ee:5f:e5:8e:1c:67:31: f7:e6:48:6d:11:ee:98:97:0a:0a:14:8f:1a:73:d5:30:eb:28: 65:b2:c3:a3:e5:e4:d6:5f:89:aa:fc:34:02:0f:68:ec:60:42: 42:30:51:93:3f:2b:78:6e:df:2e:d3:47:e6:66:a4:9e:7e:12: 1d:14:23:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUxMDIwMTczMzU3WhcNMjUxMDI3MTczMzU3WjAYMRYwFAYD VQQDEw02OGY2NzI4Ni04MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx06sXVF8roDpbo9cq/d9wkMLZGh0RU9NSRgOtMb+SKNdreT09tnCOWDa7+Hk UJKveCCjQrUm4Aj8u60BS52MyVbbKPkC2MoDug6ZRRjMmspZMSwUuQ/BkTPpIw1l 1gGO2pXvMC2320SLEXgHpsmvwyn9SSin7uSPxgj9wv5453wopfd7kXZ7A66iZBy3 6zuT94XXpED6TD1YY0NZ1N5C0b4y5ED1GT7yRhBrzIIt1uqApAfkyI+hqnBEnLhj IEheiq6Ebh1qTg5DSxLyzuhJmHLmXGyO/JKQFDUG/c3ri511BKaYHtixmZ/vNzvZ AqXwIVi7VJR6F89aBRMiC6BjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMV5LuzN mmwlo3o2l7D9lxgv11uPMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIz7ds8Vbn9KImpx9Kv6M2jKVRBKJ88HWKHSnFBR2gqz/W+AFjgtu5 6MD0AW96nklUSxiC9zhqQ82RWGpzYe7IxXm89xaj5VvxdU1a4+N0m3r54DNK7DyE Lq5cJsy8NHZpPmu5JonsD1ZQnVYw6KhfNyI+tYwc/XO60v5RFSUwv3r4czmTUNG8 nYV210CcVRNuQZhZdvnKa8H/BZuzonxHfs4boStLkrXo3MHewg3irqZUj3yY2PWl yYGDNBNzSe5f5Y4cZzH35khtEe6YlwoKFI8ac9Uw6yhlssOj5eTWX4mq/DQCD2js YEJCMFGTPyt4bt8u00fmZqSefhIdFCOj -----END CERTIFICATE-----Generated at Wed Oct 22 07:13:10 2025 by rpki-client