$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: HE56Kuh2st+ojfdnGXdgwl2nMMK6iO4CMR+cgawrh2I= Subject key identifier: 6E:4C:D5:25:EA:02:6F:36:C8:6A:E1:C6:77:3C:4E:F2:83:A9:15:C2 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 0A1E Signing time: Wed 22 Oct 2025 20:29:27 +0000 Manifest this update: Wed 22 Oct 2025 20:29:27 +0000 Manifest next update: Wed 29 Oct 2025 20:29:27 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: adjKCnAeXyuGls3bIklGiKo97DXIGGIkOiPTHdeccCk=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Oct 22 20:29:27 2025 GMT Not After : Oct 29 20:29:27 2025 GMT Subject: CN=68f93ea7-3bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:35:a9:ee:2c:51:d9:45:43:09:be:80:40: c0:7e:88:c8:b3:48:df:9f:d5:4f:cd:7f:68:41:95: 81:0f:c9:55:68:05:3b:60:a7:f9:d0:66:2f:54:89: af:cf:14:13:1d:d2:b9:ea:e0:3e:e5:df:f8:4a:10: 4d:49:65:9e:38:42:b9:ef:84:b4:6d:ba:23:82:f8: 3c:23:4d:e1:cd:56:ec:cb:ce:c5:96:2d:1f:88:0d: 44:78:d0:c0:dd:64:bd:e2:9e:63:07:3b:01:6a:5d: f5:6c:0c:d5:79:7a:b6:cc:5d:c7:ba:f1:69:17:9b: e4:8c:3b:cd:6c:21:97:da:e8:5c:6d:6e:49:d0:d3: b2:f5:5d:dd:63:74:b9:56:0e:f3:7d:83:de:b2:c5: c6:b1:2d:e6:5e:69:ce:07:ea:83:fe:81:da:3e:29: 66:9a:08:e1:4a:8f:79:73:90:c0:2f:00:28:23:3d: e3:db:7f:b7:a6:f8:9c:05:7d:cd:15:fc:c3:ca:87: 5b:75:c6:f9:a5:47:d6:80:6b:c6:ca:f6:bb:9d:6a: 4a:73:08:ef:21:d7:f4:01:c8:e9:44:c6:60:bd:d5: 6e:a2:f8:78:a8:ca:a9:a1:c7:29:d2:a7:70:19:f8: 16:21:80:25:a8:0e:32:6e:15:92:2e:85:f5:92:ed: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:D5:25:EA:02:6F:36:C8:6A:E1:C6:77:3C:4E:F2:83:A9:15:C2 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b0:ce:1a:bd:cc:b4:a3:f2:d8:22:f2:42:bd:92:2a:16:6b: 48:59:c9:71:e3:4a:c3:e5:88:cc:6f:70:3d:29:b7:f4:eb:05: d3:72:f1:c8:57:b8:4d:47:41:60:f1:b3:78:d5:44:60:4a:ac: 72:0b:61:f1:57:0a:fa:51:aa:c5:f6:34:c8:cf:94:2c:ee:2e: fe:fe:09:c7:20:b4:3b:83:1b:52:43:29:60:ee:2a:25:77:62: da:b2:9a:a9:4f:5e:6b:4f:a5:75:80:10:aa:15:a4:9d:da:20: bc:fb:ac:00:d3:48:fb:5c:2b:d0:4e:e9:95:ee:29:31:58:d7: e0:32:ac:a1:27:80:1a:84:37:3f:59:f6:d4:f0:dd:35:07:d2: 02:06:df:fc:a4:19:57:2e:fd:aa:94:e0:cb:5b:22:c8:dc:11: eb:ab:fe:5d:b9:99:1c:c9:d4:5e:b8:60:82:50:bf:64:8c:06: e8:45:c1:56:20:4f:e2:13:da:3a:8f:df:16:e5:d1:bc:09:71: 75:cb:81:d9:6c:c7:b7:eb:77:90:6c:88:c1:39:8c:ea:86:d7: 80:e6:07:a6:8f:be:78:eb:22:14:bb:02:42:a2:e8:97:94:fa: d4:3a:0e:e0:ef:b6:f6:4e:09:01:bc:0d:58:8a:78:8a:4f:b5: e7:7a:15:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUxMDIyMjAyOTI3WhcNMjUxMDI5MjAyOTI3WjAYMRYwFAYD VQQDEw02OGY5M2VhNy0zYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fI1qe4sUdlFQwm+gEDAfojIs0jfn9VPzX9oQZWBD8lVaAU7YKf50GYvVImv zxQTHdK56uA+5d/4ShBNSWWeOEK574S0bbojgvg8I03hzVbsy87Fli0fiA1EeNDA 3WS94p5jBzsBal31bAzVeXq2zF3HuvFpF5vkjDvNbCGX2uhcbW5J0NOy9V3dY3S5 Vg7zfYPessXGsS3mXmnOB+qD/oHaPilmmgjhSo95c5DALwAoIz3j23+3pvicBX3N FfzDyodbdcb5pUfWgGvGyva7nWpKcwjvIdf0AcjpRMZgvdVuovh4qMqpoccp0qdw GfgWIYAlqA4ybhWSLoX1ku22swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5M1SXq Am82yGrhxnc8TvKDqRXCMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDsM4avcy0o/LYIvJCvZIqFmtIWclx40rD5YjMb3A9Kbf06wXTcvHI V7hNR0Fg8bN41URgSqxyC2HxVwr6UarF9jTIz5Qs7i7+/gnHILQ7gxtSQylg7iol d2LaspqpT15rT6V1gBCqFaSd2iC8+6wA00j7XCvQTumV7ikxWNfgMqyhJ4AahDc/ WfbU8N01B9ICBt/8pBlXLv2qlODLWyLI3BHrq/5duZkcydReuGCCUL9kjAboRcFW IE/iE9o6j98W5dG8CXF1y4HZbMe363eQbIjBOYzqhteA5gemj7546yIUuwJCouiX lPrUOg7g77b2TgkBvA1YiniKT7XnehV1 -----END CERTIFICATE-----Generated at Thu Oct 23 12:09:18 2025 by rpki-client