$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: wSgidMJDNDGUyGyfmIonqsJBajg1Q26/NuI//kypFNM= Subject key identifier: 70:88:61:7F:0A:6F:49:C5:7F:D8:4B:3D:37:87:A3:CF:D6:A1:9A:D6 Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 195A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 194D Signing time: Sun 02 Nov 2025 16:25:49 +0000 Manifest this update: Sun 02 Nov 2025 16:25:48 +0000 Manifest next update: Sun 09 Nov 2025 16:25:48 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: ajQ5vW1kazaEJe3z8UQAytUzPGxJC1aj1bEHbcHYqZE=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6490 (0x195a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Nov 2 16:25:48 2025 GMT Not After : Nov 9 16:25:48 2025 GMT Subject: CN=6907860c-6a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:b0:45:2a:a5:f4:ed:5a:bb:91:c9:54:4e: 8f:3a:ee:e5:63:ef:b4:9e:0b:37:d1:bc:3d:95:fa: cb:de:5f:10:54:80:49:e1:7b:b8:be:df:f9:7d:d4: 46:36:e8:66:46:ab:65:19:da:db:e7:fa:0f:11:d4: 14:f8:8b:a0:3b:36:7a:4f:5c:10:f6:29:4c:b2:96: c8:53:8a:7a:63:ad:17:93:da:24:2f:7f:72:e6:69: 0f:1d:c4:b7:30:a2:03:da:fb:ae:ff:ad:2b:f9:01: 87:d6:2a:d8:73:6c:8f:9e:6a:30:4f:c8:38:09:a1: a6:40:70:7d:f9:23:59:16:71:8c:9e:65:5b:4d:3a: 60:2a:2c:cb:96:a7:21:46:d9:37:84:f8:bc:e3:65: 20:f9:7f:51:2b:1f:29:4a:43:57:b3:bc:39:b0:72: af:99:b1:ff:fc:d7:f3:89:76:4a:62:e6:16:d9:62: b9:9b:f1:96:d1:40:80:9c:36:f5:6f:07:c1:42:d1: b9:3f:f5:6b:c6:20:54:91:aa:65:29:67:5a:ce:04: 95:3a:9e:5b:63:54:e2:e0:3a:6d:e3:20:28:ba:b5: 45:e6:bc:c4:1b:d1:f2:b4:e1:a9:d1:6a:c0:63:eb: 56:6e:e6:c6:4b:21:ac:5a:8b:f2:b5:86:ea:55:55: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:88:61:7F:0A:6F:49:C5:7F:D8:4B:3D:37:87:A3:CF:D6:A1:9A:D6 X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:61:7e:aa:2e:de:c0:43:79:a6:a9:4e:3d:49:2b:05:94: 8e:d0:40:f0:f3:74:5b:49:e6:59:af:ef:10:9b:05:5e:d3:d0: 36:0e:de:d9:9c:dc:d4:92:a9:4c:8a:69:11:e0:dd:89:b1:af: 2e:fb:7e:98:f4:d9:f9:28:83:18:be:ca:e3:f4:38:94:8f:14: 6c:d2:15:4f:80:8d:49:e2:76:f7:e0:d7:f5:d2:d5:cf:bc:58: 7b:43:da:2d:5c:56:22:18:68:a6:84:e1:08:72:84:3d:50:66: 09:17:f2:cf:1a:7f:fe:31:e2:c5:6f:44:2c:53:cc:9e:a5:f2: 32:d4:f2:c0:1b:31:32:57:f4:45:80:3b:5a:b5:32:1c:8f:77: 5c:43:4e:05:05:3a:b5:bf:a7:4d:9e:4f:23:9f:c3:4d:96:11: 91:93:25:89:58:f9:27:01:6e:f7:c8:cc:4c:a6:18:21:6f:f1: 4c:8f:89:30:4b:e6:92:4f:56:ec:25:c0:78:6a:da:d9:8a:46: 86:ec:f3:52:41:3b:91:50:a3:bc:e5:e4:c0:e9:99:63:f3:a5: 18:a0:ac:24:e5:c7:fe:cb:f4:b8:60:e1:e3:d3:8c:77:7e:40: a8:39:48:8b:9b:41:f2:02:e2:d1:d2:0a:ca:ec:11:27:76:2f: 21:68:ff:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjUxMTAyMTYyNTQ4WhcNMjUxMTA5MTYyNTQ4WjAYMRYwFAYD VQQDEw02OTA3ODYwYy02YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtywRSql9O1au5HJVE6POu7lY++0ngs30bw9lfrL3l8QVIBJ4Xu4vt/5fdRG NuhmRqtlGdrb5/oPEdQU+IugOzZ6T1wQ9ilMspbIU4p6Y60Xk9okL39y5mkPHcS3 MKID2vuu/60r+QGH1irYc2yPnmowT8g4CaGmQHB9+SNZFnGMnmVbTTpgKizLlqch Rtk3hPi842Ug+X9RKx8pSkNXs7w5sHKvmbH//NfziXZKYuYW2WK5m/GW0UCAnDb1 bwfBQtG5P/VrxiBUkaplKWdazgSVOp5bY1Ti4Dpt4yAourVF5rzEG9HytOGp0WrA Y+tWbubGSyGsWovytYbqVVXhxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCIYX8K b0nFf9hLPTeHo8/WoZrWMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZP2F+qi7ewEN5pqlOPUkrBZSO0EDw83RbSeZZr+8QmwVe09A2Dt7Z nNzUkqlMimkR4N2Jsa8u+36Y9Nn5KIMYvsrj9DiUjxRs0hVPgI1J4nb34Nf10tXP vFh7Q9otXFYiGGimhOEIcoQ9UGYJF/LPGn/+MeLFb0QsU8yepfIy1PLAGzEyV/RF gDtatTIcj3dcQ04FBTq1v6dNnk8jn8NNlhGRkyWJWPknAW73yMxMphghb/FMj4kw S+aST1bsJcB4atrZikaG7PNSQTuRUKO85eTA6Zlj86UYoKwk5cf+y/S4YOHj04x3 fkCoOUiLm0HyAuLR0grK7BEndi8haP9s -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:48 2025 by rpki-client