$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: FgHlPIA5WrJMp31j/9K8BWXZH8+rXHX3CiLBHAiexpI= Subject key identifier: E4:C3:E5:6F:23:6E:79:58:86:70:74:E3:16:D3:3B:87:0C:E2:87:E7 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 7C Signing time: Wed 05 Nov 2025 06:58:59 +0000 Manifest this update: Wed 05 Nov 2025 06:58:59 +0000 Manifest next update: Wed 12 Nov 2025 06:58:59 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: yInXYzb0sl9ha4CLvxt0A5ghR8xMvwRSQ++Gj1ON5RI=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Nov 5 06:58:59 2025 GMT Not After : Nov 12 06:58:59 2025 GMT Subject: CN=690af5b3-7ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:a7:d2:7c:01:ef:18:3d:4c:84:17:3c:96: 5f:37:2c:5d:0b:26:60:82:da:03:68:65:05:b1:12: 6a:a3:95:c1:f3:86:d0:a9:c9:b5:c9:e0:a6:b2:51: b4:6a:9a:01:e2:af:40:86:d6:d9:8c:b3:d6:27:f7: 6e:a7:13:f3:43:8b:a1:06:05:e1:9e:d0:4f:3d:97: f2:e7:7f:39:16:b3:ff:a4:b8:21:03:45:59:80:98: 5b:8a:e0:48:93:0d:7e:f4:46:e3:45:49:a4:4b:98: 99:42:6c:5a:f8:1a:c4:0a:bc:ea:5d:b2:cf:74:84: 97:9a:3b:ba:e7:de:b4:b8:f6:f1:78:d9:da:bf:5a: 94:62:70:84:a9:f3:1c:ed:4d:f6:0a:f6:c0:7f:e5: ba:a0:55:b5:f5:53:a1:44:0a:f4:0b:76:24:d1:8c: d2:c6:b2:3c:12:82:80:67:2e:04:6f:72:fd:3a:c1: cc:b0:d2:de:f2:d1:f7:1c:6a:de:6f:df:00:e6:fc: 91:f3:ae:d6:e9:6d:6d:06:e6:98:6e:59:b1:a5:41: 46:ea:97:6d:83:3f:16:29:02:ed:34:21:3c:0d:48: 73:fb:cd:dc:d5:b7:52:a5:13:4d:d4:e7:6f:78:28: b5:f0:59:0b:d7:21:3d:5b:a9:d4:76:3a:c1:c7:01: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C3:E5:6F:23:6E:79:58:86:70:74:E3:16:D3:3B:87:0C:E2:87:E7 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6b:67:27:db:69:88:99:02:e0:db:53:1a:fe:17:31:51:51: 87:2e:49:a6:4a:37:b9:20:25:58:cb:6c:f1:df:92:b0:1c:ef: cc:65:dc:3d:6b:1a:48:8c:9c:e0:df:73:16:30:4d:fc:5c:b7: d6:8b:9a:f1:07:ad:d1:78:bb:69:69:30:c3:10:92:36:79:c8: c6:34:ef:09:01:b1:cc:13:44:eb:3d:0a:89:f5:7a:f4:97:32: 1f:3d:f8:05:10:4a:a9:f6:51:f9:20:20:b3:43:d4:3b:ed:6d: d9:61:b7:62:4e:5c:eb:f7:ec:54:38:b4:d9:65:d3:8b:84:d7: a8:43:fb:23:f8:56:06:87:2a:fd:6d:fb:05:ff:88:ed:8e:da: 66:bc:9f:2b:44:65:00:cb:81:5d:da:cd:6a:79:4c:14:b6:16: 0f:2c:b4:7f:39:3c:52:75:47:4c:a0:3f:a8:74:b7:5d:f0:9c: 0a:64:05:b5:95:b9:96:f1:c6:60:29:6d:c5:27:5a:34:6c:20: 81:e2:dd:01:71:72:66:6f:e2:b0:a3:58:69:a2:e4:ee:54:d0: 94:ea:35:45:6e:0d:f5:e6:2d:cd:b3:c3:ac:c7:d3:b3:f8:83: 19:15:a5:bd:54:9c:c9:0a:a1:53:5a:d3:8c:98:d8:04:4f:6c: 87:f9:7a:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTExMDUwNjU4NTlaFw0yNTExMTIwNjU4NTlaMBgxFjAUBgNV BAMTDTY5MGFmNWIzLTdlYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9sKfSfAHvGD1MhBc8ll83LF0LJmCC2gNoZQWxEmqjlcHzhtCpybXJ4KayUbRq mgHir0CG1tmMs9Yn926nE/NDi6EGBeGe0E89l/LnfzkWs/+kuCEDRVmAmFuK4EiT DX70RuNFSaRLmJlCbFr4GsQKvOpdss90hJeaO7rn3rS49vF42dq/WpRicISp8xzt TfYK9sB/5bqgVbX1U6FECvQLdiTRjNLGsjwSgoBnLgRvcv06wcyw0t7y0fccat5v 3wDm/JHzrtbpbW0G5phuWbGlQUbql22DPxYpAu00ITwNSHP7zdzVt1KlE03U5294 KLXwWQvXIT1bqdR2OsHHAW0PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5MPlbyNu eViGcHTjFtM7hwzih+cwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QURFLzg5QTQ5M0UyRkU0RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xO Q2lrVDhmY29PTDNrSmQwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACxrZyfbaYiZAuDbUxr+FzFRUYcuSaZKN7kgJVjLbPHfkrAc78xl3D1r GkiMnODfcxYwTfxct9aLmvEHrdF4u2lpMMMQkjZ5yMY07wkBscwTROs9Con1evSX Mh89+AUQSqn2UfkgILND1Dvtbdlht2JOXOv37FQ4tNll04uE16hD+yP4VgaHKv1t +wX/iO2O2ma8nytEZQDLgV3azWp5TBS2Fg8stH85PFJ1R0ygP6h0t13wnApkBbWV uZbxxmApbcUnWjRsIIHi3QFxcmZv4rCjWGmi5O5U0JTqNUVuDfXmLc2zw6zH07P4 gxkVpb1UnMkKoVNa04yY2ARPbIf5eok= -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:44 2025 by rpki-client