$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: KVgncBoeKfhrJXATxLN16RjrmSgiEctHqlu2Nrwivns= Subject key identifier: D6:3C:AB:75:59:C4:FD:BE:95:0A:68:ED:C1:13:D5:7D:57:79:5C:D4 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0F96 Signing time: Wed 22 Oct 2025 22:03:49 +0000 Manifest this update: Wed 22 Oct 2025 22:03:48 +0000 Manifest next update: Wed 29 Oct 2025 22:03:48 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: tJMN+F+QgsEdW/MkCvI5V9lMjw8SFzbzJDiftNHWvBk=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Oct 22 22:03:48 2025 GMT Not After : Oct 29 22:03:48 2025 GMT Subject: CN=68f954c5-1332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:0b:cd:4c:df:34:7d:ab:2b:b6:60:ee:8c: 63:c5:15:77:95:32:87:bf:22:03:01:c3:5c:5b:67: 88:4a:90:09:d4:d4:06:81:af:d3:7e:b2:0f:e1:29: a3:1f:ba:e3:60:4e:91:20:29:42:1c:0b:36:7e:7d: 9d:21:38:35:c6:da:7b:ba:6a:a6:e7:86:42:2d:86: 0a:72:ee:4a:9d:10:02:29:a0:6a:0f:e8:db:05:05: 0e:c7:81:0e:dc:e3:24:88:84:06:30:09:50:48:c4: dd:d0:07:e6:62:0f:b2:d7:e6:c0:97:27:83:26:82: ea:5c:f3:2f:dd:12:e4:41:e3:cc:3e:19:4d:7f:c0: 9a:8d:26:c2:a4:6b:8c:41:4e:ae:3f:70:36:c4:88: f9:61:1f:2d:7c:19:e9:87:a4:e8:e9:d5:39:f4:7a: 8f:ac:0d:1b:22:c3:7c:77:e4:a9:0b:87:a7:f9:4f: 10:35:f0:df:48:01:b1:48:06:b0:d9:b6:1c:67:8d: 9b:c3:a7:f7:b3:dd:45:c4:f7:52:45:e4:c3:33:aa: 59:20:9e:65:17:68:9b:26:25:9e:c7:f9:e3:2c:76: 69:52:4f:e3:fe:87:d7:6a:91:72:68:87:c0:91:5d: 1c:01:65:1c:fe:86:f6:03:23:55:3d:2a:d3:0d:d7: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3C:AB:75:59:C4:FD:BE:95:0A:68:ED:C1:13:D5:7D:57:79:5C:D4 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:aa:36:00:71:5b:07:15:ec:8a:82:80:04:9b:b2:b4:f9: 0a:ee:8a:3b:a0:b2:ab:b3:bc:7c:c3:21:74:24:91:c1:6e:55: 27:97:5d:77:64:1e:2f:77:80:2f:e1:fe:1c:8a:98:9d:de:f5: 97:b0:2b:99:ba:ff:56:dd:8a:e0:4b:62:91:39:b9:b9:d5:3b: a8:c2:a5:f5:ab:2f:4e:4b:bc:f4:fd:b5:fd:21:03:ca:92:68: 1a:5a:dd:de:08:76:07:cf:a8:78:1d:e2:7b:6c:1f:61:64:ca: f0:57:23:f5:8c:21:6c:21:3a:7b:9a:7c:19:1d:0a:82:b7:6d: b2:db:2b:2a:56:d5:c7:5f:11:e2:c9:55:43:d6:f4:c8:a5:96: 48:fe:a9:d7:76:0f:44:85:c3:4f:c7:9f:d0:68:03:7d:72:ad: 57:de:77:65:88:d9:f9:0e:53:10:2e:ef:f7:f2:c4:43:7b:e5: dc:d6:ed:17:4b:1b:55:08:e3:3a:75:84:d5:c3:4e:66:5c:d3: 31:20:b8:c8:9e:d1:9b:03:d8:5e:d2:20:55:58:2d:97:c9:49: 2d:31:9a:49:07:ef:a0:bf:ac:84:51:3a:d5:1a:4a:3b:30:2a: 38:3b:b4:18:8a:84:b3:f2:be:ac:61:89:6e:93:ae:f7:81:7c: c4:25:12:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUxMDIyMjIwMzQ4WhcNMjUxMDI5MjIwMzQ4WjAYMRYwFAYD VQQDEw02OGY5NTRjNS0xMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfULzUzfNH2rK7Zg7oxjxRV3lTKHvyIDAcNcW2eISpAJ1NQGga/TfrIP4Smj H7rjYE6RIClCHAs2fn2dITg1xtp7umqm54ZCLYYKcu5KnRACKaBqD+jbBQUOx4EO 3OMkiIQGMAlQSMTd0AfmYg+y1+bAlyeDJoLqXPMv3RLkQePMPhlNf8CajSbCpGuM QU6uP3A2xIj5YR8tfBnph6To6dU59HqPrA0bIsN8d+SpC4en+U8QNfDfSAGxSAaw 2bYcZ42bw6f3s91FxPdSReTDM6pZIJ5lF2ibJiWex/njLHZpUk/j/ofXapFyaIfA kV0cAWUc/ob2AyNVPSrTDddvVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY8q3VZ xP2+lQpo7cET1X1XeVzUMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC8ao2AHFbBxXsioKABJuytPkK7oo7oLKrs7x8wyF0JJHBblUnl113 ZB4vd4Av4f4cipid3vWXsCuZuv9W3YrgS2KRObm51TuowqX1qy9OS7z0/bX9IQPK kmgaWt3eCHYHz6h4HeJ7bB9hZMrwVyP1jCFsITp7mnwZHQqCt22y2ysqVtXHXxHi yVVD1vTIpZZI/qnXdg9EhcNPx5/QaAN9cq1X3ndliNn5DlMQLu/38sRDe+Xc1u0X SxtVCOM6dYTVw05mXNMxILjIntGbA9he0iBVWC2XyUktMZpJB++gv6yEUTrVGko7 MCo4O7QYioSz8r6sYYluk673gXzEJRJy -----END CERTIFICATE-----Generated at Fri Oct 24 11:59:22 2025 by rpki-client