$ rpki-client -vvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft File: tGgNFzsLuF80uLi77cMmOXlY2O4.mft (raw, json) Hash identifier: rgwfQ1I2lc7hMqQI8yr/c3WwSNRfZtmaKirZrH3wVaA= Subject key identifier: BA:B7:41:1E:65:84:12:10:F1:00:90:46:92:D9:2B:EC:6B:8C:C9:7F Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE Certificate issuer: /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft Manifest number: 03 Signing time: Thu 23 Oct 2025 10:22:05 +0000 Manifest this update: Thu 23 Oct 2025 10:22:04 +0000 Manifest next update: Thu 30 Oct 2025 10:22:04 +0000 Files and hashes: 1: tGgNFzsLuF80uLi77cMmOXlY2O4.crl (hash: 6o0T4Dswxu7TXNp4EQcTSuggaD8o1ZtdkfofgDQtbcM=) 2: F265F888AE6C11F0B33E1454C4F9AE02.roa (hash: PwkeWMT2PFnmytpJenwW/pPPAGqdRGXyqS8HBrt6Ivw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 10:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Validity Not Before: Oct 23 10:22:04 2025 GMT Not After : Oct 30 10:22:04 2025 GMT Subject: CN=68fa01cd-102b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:e1:77:f9:a4:9c:76:48:2c:ec:4b:f2:41: cf:ab:60:94:e1:15:3f:0a:89:7f:c8:36:92:e6:70: 26:d7:cc:19:16:3e:ee:56:48:6b:a9:f0:be:ee:7c: 2d:14:76:66:f9:59:a2:9f:6f:00:03:76:42:f0:b6: 04:69:a0:c3:04:81:b2:45:ef:81:6f:e2:96:6c:45: 55:4b:aa:73:6e:7a:2d:0c:04:39:06:2d:24:a1:45: 61:2d:b8:0a:97:71:59:7b:ae:57:4c:77:80:99:a6: 29:91:9a:70:62:2c:89:de:26:a5:5f:c4:30:2b:1b: 5f:42:d7:ae:c6:ec:88:e7:56:30:20:37:ab:02:90: 7f:2b:bf:a6:14:d7:bf:25:de:93:c4:65:21:6c:08: 95:aa:c6:d9:e9:ec:a0:10:4b:ba:c1:b2:47:37:0c: e9:a1:80:43:a6:bf:53:f1:d9:63:41:df:fa:29:d8: 93:d0:8d:b2:3b:2f:7e:b8:da:2a:1c:f5:7e:ec:01: be:e5:b9:92:2a:cb:8a:78:17:c9:1a:61:2e:eb:2c: ba:7a:04:99:46:d2:ae:9f:f7:b3:7c:88:09:28:30: 64:fe:67:81:d6:5a:ea:8a:35:1d:95:1f:f5:8b:cf: 7e:51:95:74:5e:1f:d5:bd:69:e8:4a:bd:a1:57:60: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B7:41:1E:65:84:12:10:F1:00:90:46:92:D9:2B:EC:6B:8C:C9:7F X509v3 Authority Key Identifier: keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1b:7a:03:75:51:9c:ee:9b:97:59:4e:81:9d:2f:d5:c1:cb: 3d:9d:76:0a:76:39:32:12:84:d0:d2:2d:66:b8:22:a6:2d:05: f3:cc:88:fa:f6:e5:d3:2f:eb:51:47:42:0e:6e:59:d8:8b:49: 83:b8:c1:c6:36:46:e9:cd:d7:9f:97:b1:3d:34:b2:c0:d1:7e: 59:5f:3e:77:8a:07:ae:04:d8:20:a8:66:57:3e:68:1e:49:5c: a3:43:cf:52:22:31:f4:15:c0:3f:e8:66:29:58:a7:7c:dc:9b: 16:75:94:91:9d:e8:44:cd:b8:e8:f2:5d:6a:c5:2d:63:8c:42: 37:7f:da:b0:57:64:7c:fb:18:bf:21:67:e7:cc:08:75:36:b4: 28:22:6d:21:da:78:01:46:f1:48:86:be:58:ef:4e:59:e7:dd: ca:f6:cc:56:a8:80:03:2a:41:df:0c:7f:78:0c:2a:09:97:b6: 32:68:d7:4c:5a:9c:60:45:12:4e:e5:09:65:3f:9a:00:5a:2d: 15:c4:a7:09:59:0d:12:a7:b6:81:85:07:c6:3c:2c:f6:9d:73: 22:c0:d9:e4:0b:6e:02:40:5d:a6:e7:40:95:64:52:0f:ef:51: db:67:a6:28:b4:7f:97:7c:9e:a2:c6:29:ae:f6:51:ae:e2:b7: 87:4c:33:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjQ3NDExMC8GA1UEBRMoQjQ2ODBEMTczQjBCQjg1RjM0QjhCOEJCRURDMzI2Mzk3 OTU4RDhFRTAeFw0yNTEwMjMxMDIyMDRaFw0yNTEwMzAxMDIyMDRaMBgxFjAUBgNV BAMTDTY4ZmEwMWNkLTEwMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoTuF3+aScdkgs7EvyQc+rYJThFT8KiX/INpLmcCbXzBkWPu5WSGup8L7ufC0U dmb5WaKfbwADdkLwtgRpoMMEgbJF74Fv4pZsRVVLqnNuei0MBDkGLSShRWEtuAqX cVl7rldMd4CZpimRmnBiLIneJqVfxDArG19C167G7IjnVjAgN6sCkH8rv6YU178l 3pPEZSFsCJWqxtnp7KAQS7rBskc3DOmhgEOmv1Px2WNB3/op2JPQjbI7L3642ioc 9X7sAb7luZIqy4p4F8kaYS7rLLp6BJlG0q6f97N8iAkoMGT+Z4HWWuqKNR2VH/WL z35RlXReH9W9aehKvaFXYGgZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUurdBHmWE EhDxAJBGktkr7GuMyX8wHwYDVR0jBBgwFoAUtGgNFzsLuF80uLi77cMmOXlY2O4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNDc0LzEzRDZCNEZFQUU2 QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4MHVMaTc3Y01tT1hsWTJP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEdnTkZ6c0x1RjgwdUxpNzdjTW1PWGxZMk80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG NDc0LzEzRDZCNEZFQUU2QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4 MHVMaTc3Y01tT1hsWTJPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAbegN1UZzum5dZToGdL9XByz2ddgp2OTIShNDSLWa4IqYtBfPMiPr2 5dMv61FHQg5uWdiLSYO4wcY2RunN15+XsT00ssDRfllfPneKB64E2CCoZlc+aB5J XKNDz1IiMfQVwD/oZilYp3zcmxZ1lJGd6ETNuOjyXWrFLWOMQjd/2rBXZHz7GL8h Z+fMCHU2tCgibSHaeAFG8UiGvljvTlnn3cr2zFaogAMqQd8Mf3gMKgmXtjJo10xa nGBFEk7lCWU/mgBaLRXEpwlZDRKntoGFB8Y8LPadcyLA2eQLbgJAXabnQJVkUg/v Udtnpii0f5d8nqLGKa72Ua7it4dMM0c= -----END CERTIFICATE-----Generated at Fri Oct 24 21:47:23 2025 by rpki-client