$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json) Hash identifier: 55FzQnknj/0ha6NMFIbBA81+szVf87u6qKCUGeRhkDo= Subject key identifier: E7:9A:C2:F3:29:D8:B3:F9:40:31:8A:68:0D:F6:93:10:76:39:0B:C0 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft Manifest number: 3512 Signing time: Wed 22 Oct 2025 15:02:44 +0000 Manifest this update: Wed 22 Oct 2025 15:02:43 +0000 Manifest next update: Wed 29 Oct 2025 15:02:43 +0000 Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: dCDyh8uK4CQy9htdooDGmecsTw91M8K4RbcWJUwuwC4=) 2: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: aouKDvCEBWeanCsawlBT9lWakaxS2ZXwGK+L0tskXDM=) 3: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=) 4: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=) 5: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=) 6: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=) 7: CD072488981C11F081BD5721C4F9AE02.roa (hash: N9MkZB62gv52kczhap1clJNdPPPk6LnEG5YOZM6fSHE=) 8: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: 2PsbwQ/Mb5l3f+Cdk57knkEjUItMjEy4PsgyTD/0teQ=) 9: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=) 10: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=) 11: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=) 12: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: 4ydKeIYhxRWj9VQ3bZF8Gr1cN244ryelD9eyYIk71Nw=) 13: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=) 14: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: DqzdQrRpgCZA76Zft7OxsTuV0Tphmfdeu35sIE7ZBzQ=) 15: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Oct 22 15:02:43 2025 GMT Not After : Oct 29 15:02:43 2025 GMT Subject: CN=68f8f214-50fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:25:00:18:29:15:89:63:6b:f3:72:4a:aa: 1f:95:5c:f8:54:c8:9a:da:5f:a4:8d:e9:ae:4b:4e: 1d:89:16:af:a8:c1:b3:37:a3:25:00:ee:67:76:27: 87:cb:33:8b:af:39:1c:4c:5b:1f:ee:84:73:2a:21: a0:87:cb:7f:03:6c:6d:8c:de:86:c7:2d:46:0f:4d: b9:ac:34:7f:94:78:57:23:7e:30:56:45:c7:98:82: 6e:63:ac:2e:82:c8:e6:29:28:06:72:55:71:b1:47: 6b:01:2e:4e:a8:14:d6:52:40:84:3c:ed:7b:ee:cf: 0f:85:12:32:d8:a6:19:87:f3:34:a3:1c:cd:73:f9: d3:0a:9b:c9:fd:a0:1e:08:81:65:81:94:ce:f7:54: 7d:eb:b8:45:01:d1:0b:4c:20:3d:a1:0f:58:42:74: a1:49:64:28:16:f4:d8:49:f4:4e:00:f7:5e:8a:10: cd:e4:79:25:ea:a1:23:71:be:89:ed:ed:b6:12:6d: 7e:00:87:b9:c2:79:86:b0:2d:07:7d:b0:9d:83:cf: ed:57:2a:db:f3:50:47:d4:36:5a:6b:80:8c:07:6a: d0:a3:76:d9:02:0c:fd:92:9d:1a:e9:8a:55:2a:21: 61:c4:20:57:a7:8d:52:fe:77:fc:3d:01:3f:b6:4e: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9A:C2:F3:29:D8:B3:F9:40:31:8A:68:0D:F6:93:10:76:39:0B:C0 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:cc:f5:44:39:bd:63:da:c7:3c:2f:68:a9:e7:89:39:cd:d8: 7b:e1:fb:94:04:15:5b:7c:8a:84:16:dc:0a:0d:fd:05:36:17: f0:d5:f0:ea:14:05:ce:1b:24:61:8c:89:69:62:07:37:13:ea: ac:67:27:8b:1a:c3:92:b7:f6:57:dc:27:64:6f:0e:4f:c3:0c: 06:b6:e6:6d:a1:7b:e5:63:be:42:de:2e:1c:92:b7:46:13:e0: 71:0d:4e:10:55:9e:69:3b:c3:8c:d7:70:dc:87:32:14:59:0e: e8:19:04:95:1b:9c:8a:70:d6:a0:12:b8:f8:ad:c9:d2:68:7c: b1:b3:a6:8f:e1:ed:76:6c:3c:37:74:e0:8a:e0:b3:c3:9f:e7: 85:2c:fd:55:9b:01:ab:97:18:f5:f1:24:0b:09:76:b0:4b:56: 8b:40:da:4d:ee:7f:06:89:da:44:b4:9e:40:17:ba:2f:d4:bd: f6:ce:c7:66:22:05:00:c0:9a:10:71:f6:f6:9a:c5:94:bf:2b: 9c:ed:db:ad:5b:9f:42:a1:68:87:6d:b4:27:b6:0a:b5:34:1c: e1:a1:78:83:0d:28:34:47:c8:05:c1:07:0d:7e:87:cd:77:2a: b5:b3:d2:bc:41:97:e9:d0:11:53:d2:66:0c:7b:a8:31:89:0b: 3e:d7:d9:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUxMDIyMTUwMjQzWhcNMjUxMDI5MTUwMjQzWjAYMRYwFAYD VQQDEw02OGY4ZjIxNC01MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KAlABgpFYlja/NySqoflVz4VMia2l+kjemuS04diRavqMGzN6MlAO5ndieH yzOLrzkcTFsf7oRzKiGgh8t/A2xtjN6Gxy1GD025rDR/lHhXI34wVkXHmIJuY6wu gsjmKSgGclVxsUdrAS5OqBTWUkCEPO177s8PhRIy2KYZh/M0oxzNc/nTCpvJ/aAe CIFlgZTO91R967hFAdELTCA9oQ9YQnShSWQoFvTYSfROAPdeihDN5Hkl6qEjcb6J 7e22Em1+AIe5wnmGsC0HfbCdg8/tVyrb81BH1DZaa4CMB2rQo3bZAgz9kp0a6YpV KiFhxCBXp41S/nf8PQE/tk78DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeawvMp 2LP5QDGKaA32kxB2OQvAMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ MVZKRG12ams0S0NjajJXUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNzPVEOb1j2sc8L2ip54k5zdh74fuUBBVbfIqEFtwKDf0FNhfw1fDq FAXOGyRhjIlpYgc3E+qsZyeLGsOSt/ZX3Cdkbw5PwwwGtuZtoXvlY75C3i4ckrdG E+BxDU4QVZ5pO8OM13DchzIUWQ7oGQSVG5yKcNagErj4rcnSaHyxs6aP4e12bDw3 dOCK4LPDn+eFLP1VmwGrlxj18SQLCXawS1aLQNpN7n8GidpEtJ5AF7ov1L32zsdm IgUAwJoQcfb2msWUvyuc7dutW59CoWiHbbQntgq1NBzhoXiDDSg0R8gFwQcNfofN dyq1s9K8QZfp0BFT0mYMe6gxiQs+19kV -----END CERTIFICATE-----Generated at Wed Oct 22 19:06:22 2025 by rpki-client