$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: UJqk8xMdxaIWJTxvpSYUYM1SZ9HN85hBtYBDPTwH6g4= Subject key identifier: 2E:9C:BE:E7:D1:BA:0C:27:9A:CD:DF:FD:F6:A2:51:01:53:31:BB:FD Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0CB9 Signing time: Thu 18 Sep 2025 18:21:55 +0000 Manifest this update: Thu 18 Sep 2025 18:21:54 +0000 Manifest next update: Thu 25 Sep 2025 18:21:54 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: DFsqkJ3gvQFMp1puMYTVN8gHOjlAp6oCUjeGj7xul3M=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Sep 18 18:21:54 2025 GMT Not After : Sep 25 18:21:54 2025 GMT Subject: CN=68cc4dc3-3591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:8a:36:39:cb:ff:76:a5:e8:92:ab:b7:8d: 9f:22:22:b1:52:8b:3d:4c:a0:41:db:b0:60:71:a2: f0:0a:10:08:10:1b:c8:f9:85:08:37:69:61:bd:d0: 4a:2a:b0:a7:d1:70:ed:bd:8d:60:da:01:1c:0e:f9: 77:29:17:96:b1:11:95:13:3d:9a:25:0a:d0:8f:71: 28:93:fe:1b:4a:1d:81:bc:11:b1:ce:bd:64:fe:a3: 84:91:68:82:b9:7c:00:82:1c:3d:23:f7:bc:4a:76: e9:81:64:31:5c:94:5b:e5:7a:52:34:6a:56:b2:f6: ac:97:4d:a6:5c:db:45:18:fe:e1:79:45:53:2a:fc: 08:32:f4:6d:6d:9e:d2:77:90:a2:06:78:08:e6:4c: d2:36:4f:11:64:2f:ed:13:c9:65:ed:29:d8:2a:ee: 8f:07:1a:6b:c8:34:d9:ef:80:a5:07:bc:ae:1a:ec: 2e:e1:d7:e5:9e:17:d9:f6:1b:ba:3c:9d:b4:df:fa: ce:db:0d:16:05:95:ca:e4:76:bf:d4:cc:b0:96:8b: 9c:41:3b:e5:32:fa:dc:0c:90:0c:7d:ff:cf:a0:95: d8:ae:07:1f:58:38:fb:84:87:39:82:d7:cf:0d:0c: 42:98:d6:cc:dc:16:df:b4:c3:5d:80:b2:f6:89:c3: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:BE:E7:D1:BA:0C:27:9A:CD:DF:FD:F6:A2:51:01:53:31:BB:FD X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9c:75:f4:58:e0:9d:01:ae:5e:53:c9:1e:6e:21:8f:59:74: f8:7c:39:3b:8f:bc:95:7c:28:a5:90:1b:63:5b:e3:73:75:45: ae:c1:98:eb:6b:ca:6c:39:8b:44:1f:ea:d8:55:e6:3e:32:b7: 8d:b0:b0:69:98:aa:72:77:96:f4:1a:2c:2c:b7:ce:e0:ad:df: 36:ef:90:06:0e:6c:13:1a:69:54:b7:3d:14:c9:1d:6a:bf:aa: c5:a6:ab:bf:39:47:ba:fd:71:df:eb:2a:53:9b:d1:93:bb:04: bf:2d:91:8a:7d:3f:c1:01:57:64:b5:97:f6:30:f4:99:78:18: 3d:54:59:3f:14:82:50:63:8d:67:c7:72:80:60:80:8c:74:13: f6:54:cf:d4:16:65:55:6a:12:ff:96:94:7b:58:b5:13:4e:70: 04:22:86:96:9c:09:fa:2d:ab:7a:3e:6c:be:61:fa:a1:e5:a3: 30:12:45:4e:77:67:5d:41:e9:88:8e:81:1e:74:23:c6:65:a9: 57:49:2f:71:2d:7f:f6:08:c7:a8:ef:48:e8:3d:8f:1e:7a:6a: 3b:c8:bd:8b:56:9f:9c:6a:47:77:37:ab:df:48:7b:cd:f6:be: 29:b8:ad:eb:eb:c9:d0:9c:dd:9a:d2:d7:c9:70:19:fb:5b:76: f8:da:05:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUwOTE4MTgyMTU0WhcNMjUwOTI1MTgyMTU0WjAYMRYwFAYD VQQDEw02OGNjNGRjMy0zNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgiKNjnL/3al6JKrt42fIiKxUos9TKBB27BgcaLwChAIEBvI+YUIN2lhvdBK KrCn0XDtvY1g2gEcDvl3KReWsRGVEz2aJQrQj3Eok/4bSh2BvBGxzr1k/qOEkWiC uXwAghw9I/e8SnbpgWQxXJRb5XpSNGpWsvasl02mXNtFGP7heUVTKvwIMvRtbZ7S d5CiBngI5kzSNk8RZC/tE8ll7SnYKu6PBxpryDTZ74ClB7yuGuwu4dflnhfZ9hu6 PJ203/rO2w0WBZXK5Ha/1MywloucQTvlMvrcDJAMff/PoJXYrgcfWDj7hIc5gtfP DQxCmNbM3BbftMNdgLL2icPglwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6cvufR ugwnms3f/faiUQFTMbv9MB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2nHX0WOCdAa5eU8kebiGPWXT4fDk7j7yVfCilkBtjW+NzdUWuwZjr a8psOYtEH+rYVeY+MreNsLBpmKpyd5b0Giwst87grd8275AGDmwTGmlUtz0UyR1q v6rFpqu/OUe6/XHf6ypTm9GTuwS/LZGKfT/BAVdktZf2MPSZeBg9VFk/FIJQY41n x3KAYICMdBP2VM/UFmVVahL/lpR7WLUTTnAEIoaWnAn6Lat6Pmy+Yfqh5aMwEkVO d2ddQemIjoEedCPGZalXSS9xLX/2CMeo70joPY8eemo7yL2LVp+cakd3N6vfSHvN 9r4puK3r68nQnN2a0tfJcBn7W3b42gWX -----END CERTIFICATE-----Generated at Thu Sep 18 22:15:57 2025 by rpki-client