$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: 571IygvPkVTiCKZ/IF2pydHICrV3EPzRiMn9oA48a4k= Subject key identifier: 40:7C:72:9E:57:0F:DF:C3:A7:9B:81:86:22:D9:D9:F7:75:19:90:AD Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 12CE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 12C6 Signing time: Mon 20 Oct 2025 17:29:25 +0000 Manifest this update: Mon 20 Oct 2025 17:29:24 +0000 Manifest next update: Mon 27 Oct 2025 17:29:24 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: neXsWNssWRRKAovIGsGTTV4jgDOl8norhU34RQn6sjc=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4814 (0x12ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Oct 20 17:29:24 2025 GMT Not After : Oct 27 17:29:24 2025 GMT Subject: CN=68f67174-8fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:f4:7c:14:66:42:a3:28:9f:23:6d:a5:c2: cd:fe:d1:ca:c2:1b:53:a5:c8:05:e1:9e:d7:09:a3: be:61:f0:a6:07:34:0b:3b:28:39:4c:44:9a:64:8a: 4d:10:a4:2f:be:bf:35:13:60:92:44:0e:ec:a8:3c: f6:b1:db:dc:dd:4e:49:c5:82:38:8c:53:11:9b:a0: 2c:20:a0:47:ba:f6:ea:0b:97:ca:f8:5a:2a:f9:a5: 9a:e4:e2:b1:59:a4:2b:40:a3:19:23:49:6f:b1:38: ca:cb:01:fb:ae:35:5c:e5:c1:e2:93:b1:0d:15:e4: 5c:3f:f6:b0:cf:3d:c1:05:3a:f3:cd:9e:da:6c:a6: 8d:9c:00:e5:e0:6d:f9:2a:f7:c0:13:ee:4b:3e:f3: a9:e4:93:22:23:e7:92:a8:da:13:f9:76:d9:04:38: 01:87:9b:fe:6f:cd:ee:01:4e:2b:06:1b:4d:28:73: 18:d2:2b:1a:2c:c7:5d:3d:c4:69:f3:6d:b6:7c:a2: a3:f3:52:8d:d6:b1:23:a5:b1:3d:00:93:b9:6a:1a: ae:c0:53:bc:59:0d:a0:7e:f8:80:db:b0:00:65:be: 02:cc:1c:35:ed:f9:c2:9b:17:8f:7f:90:49:71:f9: e0:c6:51:c9:00:12:ae:c4:44:da:59:ff:5a:d9:0b: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:72:9E:57:0F:DF:C3:A7:9B:81:86:22:D9:D9:F7:75:19:90:AD X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9e:8e:dc:5a:08:59:23:cd:f2:ff:f2:27:3e:5c:53:d5:41: 5a:3b:bf:02:cf:44:18:11:8f:24:0a:41:14:87:75:7b:09:52: 2e:fe:a6:b5:6a:82:36:2d:29:0e:97:d8:9a:6a:9c:53:80:51: 92:05:71:2a:a6:b2:a9:a2:a3:59:b2:db:d6:c0:fa:b6:59:8e: 81:18:42:e6:cc:24:e3:36:89:77:61:6b:a6:99:3d:8b:df:d2: bd:0e:7a:22:f5:bc:bb:f2:f7:56:e5:b7:3d:4c:e8:7c:10:00: 59:17:a8:db:7a:d0:5e:2c:4e:32:7a:00:47:2b:75:79:74:10: 18:91:95:df:50:18:86:d7:99:38:0e:7f:e2:7a:e8:44:ed:87: a6:db:6a:fa:92:da:45:9c:ff:d7:be:fc:9b:0c:f3:be:0f:26: 99:65:bc:95:e8:02:46:76:05:67:f9:a4:d0:1d:b1:5e:f8:fb: a2:fa:fb:e2:29:8e:c1:70:5e:42:8e:fd:53:ef:85:a9:32:57: 92:aa:1f:2d:d0:fd:f3:b6:7d:45:e8:a7:e8:7f:69:6c:64:58: ab:3e:8e:9b:c2:85:6e:67:86:7a:83:21:3d:09:05:0b:25:d1: 60:2c:c6:1c:5f:90:de:c1:47:13:4e:51:2f:ec:e0:13:d0:2f: 0c:b8:9e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUxMDIwMTcyOTI0WhcNMjUxMDI3MTcyOTI0WjAYMRYwFAYD VQQDEw02OGY2NzE3NC04ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFD0fBRmQqMonyNtpcLN/tHKwhtTpcgF4Z7XCaO+YfCmBzQLOyg5TESaZIpN EKQvvr81E2CSRA7sqDz2sdvc3U5JxYI4jFMRm6AsIKBHuvbqC5fK+Foq+aWa5OKx WaQrQKMZI0lvsTjKywH7rjVc5cHik7ENFeRcP/awzz3BBTrzzZ7abKaNnADl4G35 KvfAE+5LPvOp5JMiI+eSqNoT+XbZBDgBh5v+b83uAU4rBhtNKHMY0isaLMddPcRp 8222fKKj81KN1rEjpbE9AJO5ahquwFO8WQ2gfviA27AAZb4CzBw17fnCmxePf5BJ cfngxlHJABKuxETaWf9a2QuT2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB8cp5X D9/Dp5uBhiLZ2fd1GZCtMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMno7cWghZI83y//InPlxT1UFaO78Cz0QYEY8kCkEUh3V7CVIu/qa1 aoI2LSkOl9iaapxTgFGSBXEqprKpoqNZstvWwPq2WY6BGELmzCTjNol3YWummT2L 39K9Dnoi9by78vdW5bc9TOh8EABZF6jbetBeLE4yegBHK3V5dBAYkZXfUBiG15k4 Dn/ieuhE7Yem22r6ktpFnP/XvvybDPO+DyaZZbyV6AJGdgVn+aTQHbFe+Pui+vvi KY7BcF5Cjv1T74WpMleSqh8t0P3ztn1F6Kfof2lsZFirPo6bwoVuZ4Z6gyE9CQUL JdFgLMYcX5DewUcTTlEv7OAT0C8MuJ7Z -----END CERTIFICATE-----Generated at Wed Oct 22 02:50:27 2025 by rpki-client