$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: 2/0cBm8SGoy9IRbX6iKcTuYkc3/ZsBDkY738wBDFWwY= Subject key identifier: 4F:B1:DA:74:D5:2A:8D:AE:03:46:B7:38:B5:98:1D:3D:25:BE:6E:AB Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 0211 Signing time: Thu 23 Oct 2025 03:43:15 +0000 Manifest this update: Thu 23 Oct 2025 03:43:14 +0000 Manifest next update: Thu 30 Oct 2025 03:43:13 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: EjWYrHOLTOydALcShHT+MkPNVTUWc53tgvfLj0wP5Uc=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Oct 23 03:43:14 2025 GMT Not After : Oct 30 03:43:13 2025 GMT Subject: CN=68f9a452-abc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:4e:20:59:fa:d3:d7:a4:71:c9:f3:b1:02: 90:04:b7:44:3b:16:40:2f:42:aa:94:dc:e1:99:de: 82:fb:9b:c1:09:49:80:12:2f:d0:d7:2d:2c:51:bc: 90:95:58:d5:e7:43:ea:40:12:e3:28:56:c7:9f:1c: 51:ed:da:e5:5d:6a:ca:ee:5b:70:a4:70:45:02:0d: 5c:56:f3:86:11:27:2f:2d:ce:9d:d1:38:57:9c:f2: 2d:29:c1:b9:11:f0:04:bc:7c:79:20:b4:78:70:3f: 7e:dc:7e:0d:7b:61:f9:7e:d2:9d:b9:58:ab:59:14: 8c:28:fa:36:b3:f9:6f:0e:d7:5c:a9:d7:4a:f1:1d: 71:44:1b:9f:74:33:8d:53:a1:8c:91:9d:b4:11:50: ed:08:94:9b:1d:b7:10:d8:80:88:9f:27:fd:b4:dc: 8f:95:b0:58:86:02:ce:ef:4e:fa:76:64:60:cb:0a: fc:be:70:e9:71:16:6d:8b:8e:41:5a:dd:ab:d2:e8: e1:cb:46:d9:28:9a:b7:e0:f2:29:0f:8d:5a:27:38: 72:e2:8d:fd:51:91:12:68:43:17:bb:0f:a3:f9:ac: bd:6f:c0:09:3e:2b:cd:6a:d6:f4:d8:9e:00:52:6c: e5:bd:14:6e:9e:cf:03:fc:d6:73:21:5e:22:6e:6f: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B1:DA:74:D5:2A:8D:AE:03:46:B7:38:B5:98:1D:3D:25:BE:6E:AB X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:44:83:65:fa:0e:f7:06:ff:d5:c3:71:ca:a8:63:c9:ff: 7b:0c:52:ff:5a:11:fe:4b:d5:95:d4:99:28:ac:a0:88:58:10: 20:17:a7:a2:b6:92:f7:bf:fc:8c:32:4d:df:b7:98:00:7a:70: d1:41:09:b5:03:51:5c:87:f0:ed:fa:94:9b:f5:34:01:32:33: 21:6b:32:76:68:c2:0a:e6:d0:06:81:c5:6a:95:9f:47:75:55: 11:b5:5d:5b:29:64:c4:b5:6b:3a:d7:ed:6b:3f:21:97:d1:c9: 32:19:56:bc:10:b6:ac:01:3f:45:e2:6f:6b:13:56:c2:eb:d7: 7d:9a:d0:32:3e:1c:38:62:e6:d2:df:2d:e1:45:38:68:fc:28: 2f:df:b0:d0:1d:c4:64:40:38:5c:42:4f:14:c8:2c:47:7d:db: 5d:2e:d6:87:62:33:2e:07:aa:df:19:ae:dc:27:56:d4:42:79: 77:2f:fa:50:d4:e2:83:48:8c:00:96:94:d1:ea:35:2d:e2:22: 23:fb:2b:93:10:d7:ff:8e:7f:43:89:ab:ab:84:1d:d3:55:1e: fc:25:50:7a:aa:16:0d:a6:e8:f6:27:a9:56:5f:b9:de:7f:61: fd:e3:55:d3:0e:2b:1b:65:4d:37:e5:a1:72:9b:4c:6d:82:5b: 2d:8a:b2:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUxMDIzMDM0MzE0WhcNMjUxMDMwMDM0MzEzWjAYMRYwFAYD VQQDEw02OGY5YTQ1Mi1hYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMNOIFn609ekccnzsQKQBLdEOxZAL0KqlNzhmd6C+5vBCUmAEi/Q1y0sUbyQ lVjV50PqQBLjKFbHnxxR7drlXWrK7ltwpHBFAg1cVvOGEScvLc6d0ThXnPItKcG5 EfAEvHx5ILR4cD9+3H4Ne2H5ftKduVirWRSMKPo2s/lvDtdcqddK8R1xRBufdDON U6GMkZ20EVDtCJSbHbcQ2ICInyf9tNyPlbBYhgLO7076dmRgywr8vnDpcRZti45B Wt2r0ujhy0bZKJq34PIpD41aJzhy4o39UZESaEMXuw+j+ay9b8AJPivNatb02J4A UmzlvRRuns8D/NZzIV4ibm+uPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+x2nTV Ko2uA0a3OLWYHT0lvm6rMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMM0SDZfoO9wb/1cNxyqhjyf97DFL/WhH+S9WV1JkorKCIWBAgF6ei tpL3v/yMMk3ft5gAenDRQQm1A1Fch/Dt+pSb9TQBMjMhazJ2aMIK5tAGgcVqlZ9H dVURtV1bKWTEtWs61+1rPyGX0ckyGVa8ELasAT9F4m9rE1bC69d9mtAyPhw4YubS 3y3hRTho/Cgv37DQHcRkQDhcQk8UyCxHfdtdLtaHYjMuB6rfGa7cJ1bUQnl3L/pQ 1OKDSIwAlpTR6jUt4iIj+yuTENf/jn9DiaurhB3TVR78JVB6qhYNpuj2J6lWX7ne f2H941XTDisbZU035aFym0xtglstirLb -----END CERTIFICATE-----Generated at Thu Oct 23 20:05:45 2025 by rpki-client