$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: ewLTLybQkh/VdgZdiug3ukdwGqpquHkwRmnFPjge2Mw= Subject key identifier: 8A:6E:B9:01:02:E6:53:35:B0:04:B7:04:55:26:10:11:96:0B:5B:01 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0793 Signing time: Wed 22 Oct 2025 22:20:49 +0000 Manifest this update: Wed 22 Oct 2025 22:20:49 +0000 Manifest next update: Wed 29 Oct 2025 22:20:49 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: II9igujrYexYd8EuKDuUzsbrqeun/2+71ysPa03Z10A=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: 23TiuLPxAaSrXTY2xFHwDsaNfyE9NetpuIlQb209liA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Oct 22 22:20:49 2025 GMT Not After : Oct 29 22:20:49 2025 GMT Subject: CN=68f958c1-f697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:39:f4:c0:01:c3:90:7e:04:3c:e3:ca:ee: 54:73:74:e1:6f:cb:ba:c8:41:7d:83:b7:37:40:1a: 9e:86:e4:0b:e1:bd:22:c0:f8:bf:ba:6c:38:44:58: fd:31:06:dc:53:e5:89:28:6a:17:77:a7:bb:0a:c2: 88:eb:63:ca:65:68:0f:d6:03:31:c0:09:38:a1:18: 9d:53:db:34:2d:a6:67:77:bf:c4:f6:87:07:e8:73: 77:99:81:39:20:2b:63:94:2d:20:bb:68:b5:e6:57: 72:64:ca:d6:9f:e7:98:27:f4:4b:ad:12:f6:56:0b: 38:45:a9:92:be:ab:df:6c:3c:cd:85:af:dc:6c:5a: 5e:52:ed:6b:f3:85:ce:6c:e2:7c:b6:c4:d6:57:dc: d2:d5:e3:be:51:ad:72:e2:69:9f:28:9a:98:f7:22: d5:5c:c3:02:7f:65:c1:e1:70:81:b4:13:b5:31:0b: f8:94:27:cc:9b:8b:cf:8f:4e:16:f0:17:38:b0:a6: 1c:fd:05:9c:0a:d0:c3:b8:a2:23:8e:ee:f1:d2:10: 4c:41:57:60:ab:5b:a8:73:de:b3:f9:35:13:92:6a: 1e:a6:1d:f5:3d:2e:dc:0f:c4:c7:d9:bf:7e:fe:ed: ca:7a:a9:fa:d8:b2:9d:ce:ec:26:1a:66:86:62:5e: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:B9:01:02:E6:53:35:B0:04:B7:04:55:26:10:11:96:0B:5B:01 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:78:c4:63:d8:4c:c9:3e:3a:6a:2d:01:77:33:a1:16:a4:ef: 91:da:48:56:20:3c:da:a9:02:be:2e:fe:12:c8:62:61:c1:87: 14:72:c6:d4:9f:93:b9:d9:8f:9d:71:94:ba:f8:7d:fc:a9:87: 5b:e1:02:1a:40:9e:f6:4c:ea:f6:65:5b:73:71:eb:8d:09:57: 9c:87:39:3a:db:65:6d:a9:65:f1:82:0d:7d:92:b8:63:5e:b1: b8:e1:af:31:96:68:df:2e:0a:d2:23:6d:32:40:4d:06:7f:f2: 45:80:a0:6a:5a:aa:c4:36:27:6d:5b:99:18:5f:d2:16:4e:65: 8a:3e:51:b0:cd:0c:eb:df:6d:fd:14:8e:7b:9e:83:47:be:c1: 16:2d:c5:58:ad:18:1f:b2:9b:ef:cc:a0:3c:d4:80:2e:e1:db: eb:e9:89:05:63:20:4a:9f:67:01:6c:de:2d:ac:30:cb:b2:09: 54:48:46:15:f9:64:7d:64:bf:75:f6:12:bb:0f:09:f4:f2:c6: 10:f6:e2:46:50:22:0f:3d:2a:51:a9:9c:99:d6:1d:85:af:30: 87:f7:da:8e:c4:47:ab:3d:ea:2e:d7:ad:75:b2:28:06:f9:6b: db:7b:16:1a:78:33:82:81:20:d1:91:88:13:1f:24:45:18:2d: 64:6e:1f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUxMDIyMjIyMDQ5WhcNMjUxMDI5MjIyMDQ5WjAYMRYwFAYD VQQDEw02OGY5NThjMS1mNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdA59MABw5B+BDzjyu5Uc3Thb8u6yEF9g7c3QBqehuQL4b0iwPi/umw4RFj9 MQbcU+WJKGoXd6e7CsKI62PKZWgP1gMxwAk4oRidU9s0LaZnd7/E9ocH6HN3mYE5 ICtjlC0gu2i15ldyZMrWn+eYJ/RLrRL2Vgs4RamSvqvfbDzNha/cbFpeUu1r84XO bOJ8tsTWV9zS1eO+Ua1y4mmfKJqY9yLVXMMCf2XB4XCBtBO1MQv4lCfMm4vPj04W 8Bc4sKYc/QWcCtDDuKIjju7x0hBMQVdgq1uoc96z+TUTkmoeph31PS7cD8TH2b9+ /u3Keqn62LKdzuwmGmaGYl58SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpuuQEC 5lM1sAS3BFUmEBGWC1sBMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBReMRj2EzJPjpqLQF3M6EWpO+R2khWIDzaqQK+Lv4SyGJhwYcUcsbU n5O52Y+dcZS6+H38qYdb4QIaQJ72TOr2ZVtzceuNCVechzk622VtqWXxgg19krhj XrG44a8xlmjfLgrSI20yQE0Gf/JFgKBqWqrENidtW5kYX9IWTmWKPlGwzQzr3239 FI57noNHvsEWLcVYrRgfspvvzKA81IAu4dvr6YkFYyBKn2cBbN4trDDLsglUSEYV +WR9ZL919hK7Dwn08sYQ9uJGUCIPPSpRqZyZ1h2FrzCH99qOxEerPeou1611sigG +WvbexYaeDOCgSDRkYgTHyRFGC1kbh+M -----END CERTIFICATE-----Generated at Fri Oct 24 21:42:13 2025 by rpki-client