$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: MQqrRzCB8p20rK/bUtIDRiXo2gkyJsHiQ4PvWIWu36Y= Subject key identifier: DD:F0:E6:12:43:F4:B6:29:5F:2D:6F:E3:7A:7C:88:9E:A4:88:B7:D3 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01D9 Signing time: Wed 05 Nov 2025 03:06:12 +0000 Manifest this update: Wed 05 Nov 2025 03:06:12 +0000 Manifest next update: Wed 12 Nov 2025 03:06:12 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: pfZkppCeVlbz5f44BG0YQY+nPkaXjAdQj8KCzw6680g=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Nov 5 03:06:12 2025 GMT Not After : Nov 12 03:06:12 2025 GMT Subject: CN=690abf24-d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:58:33:4d:43:1d:49:b1:41:23:fc:96:a4: 4d:85:a9:93:0a:7f:93:ad:86:a8:b8:24:48:01:58: f5:bc:58:07:eb:58:14:89:19:72:df:2b:99:4d:64: 3b:1f:1d:05:d0:b1:6e:15:f3:e9:df:f3:63:53:39: 82:b7:a1:c6:14:b9:97:34:4f:d7:4f:f9:4b:96:0a: 50:c1:ff:36:f4:e8:69:4b:7c:b8:58:d7:04:6b:8c: 74:bf:85:cd:e9:b0:f9:1f:f9:8a:0c:47:36:ce:21: f8:29:d3:56:f8:92:8c:1f:b2:1f:1c:93:c3:48:65: 72:65:5d:26:4a:d7:0e:e6:85:db:d8:4c:a4:90:37: 0f:e7:a6:f7:bb:49:cb:fc:3b:49:fe:22:85:fa:b6: 2a:b0:27:6c:7b:33:7b:22:97:f2:4c:8d:27:b7:3a: 36:6e:a3:09:32:73:db:52:0d:31:4d:80:a5:45:87: 1e:ec:19:e6:bf:6c:b8:ce:7a:cd:ef:9f:26:bc:95: 72:e7:32:72:8a:dc:1f:49:23:f1:c0:97:db:e1:4a: ea:3a:5c:63:f2:a3:ff:8d:b4:f8:31:26:a0:14:bb: 54:b5:3b:75:2c:1a:38:3c:94:50:2f:75:d8:58:22: 98:f0:41:c2:95:55:91:ca:5b:47:ed:f1:4d:0c:2d: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:E6:12:43:F4:B6:29:5F:2D:6F:E3:7A:7C:88:9E:A4:88:B7:D3 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7c:b9:6a:28:6c:f2:33:84:6c:6d:f3:91:f0:dd:da:23:bb: ce:54:bf:e5:39:bf:0c:f4:ee:98:42:52:63:a7:70:b4:e3:cc: e2:f3:f7:35:c0:09:2c:2a:de:34:d8:34:88:c9:0f:cb:2b:b6: 96:2e:d4:ff:8e:1e:c1:4f:54:bc:f3:29:3c:ff:b4:41:01:02: 11:0c:0b:30:f7:da:7c:6d:04:bf:aa:2b:4f:b9:74:13:74:29: 44:55:ce:41:9d:42:35:dc:c1:40:ce:1a:4d:dd:27:1e:8f:a4: d5:cd:5c:bc:ac:15:f0:1f:dc:7d:fb:d2:c0:02:60:ee:8b:3c: de:17:6d:45:50:c2:5b:9f:0f:39:76:4c:80:9a:ae:e2:f0:70: 4a:ae:83:5a:a1:95:f0:92:f8:f4:37:53:7e:13:90:d1:e3:6a: 07:fd:c9:83:4b:44:e8:f6:18:51:61:1b:b4:b3:f6:26:51:0a: 70:c5:d9:9b:c4:d8:e2:30:4f:40:3b:24:21:f2:7b:83:40:3c: b8:70:7f:c7:b5:47:52:0e:b3:4c:43:6a:fe:b1:f1:ff:c6:15: 6d:2d:7b:c6:db:fa:48:f6:c0:f8:73:e4:f5:9b:a4:52:08:25: 60:57:94:fd:c8:bc:4c:16:54:94:16:09:07:01:19:16:2a:6f: 8c:3a:fe:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMTA1MDMwNjEyWhcNMjUxMTEyMDMwNjEyWjAYMRYwFAYD VQQDEw02OTBhYmYyNC1kM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfBYM01DHUmxQSP8lqRNhamTCn+TrYaouCRIAVj1vFgH61gUiRly3yuZTWQ7 Hx0F0LFuFfPp3/NjUzmCt6HGFLmXNE/XT/lLlgpQwf829OhpS3y4WNcEa4x0v4XN 6bD5H/mKDEc2ziH4KdNW+JKMH7IfHJPDSGVyZV0mStcO5oXb2EykkDcP56b3u0nL /DtJ/iKF+rYqsCdsezN7IpfyTI0ntzo2bqMJMnPbUg0xTYClRYce7Bnmv2y4znrN 758mvJVy5zJyitwfSSPxwJfb4UrqOlxj8qP/jbT4MSagFLtUtTt1LBo4PJRQL3XY WCKY8EHClVWRyltH7fFNDC2i9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3w5hJD 9LYpXy1v43p8iJ6kiLfTMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgfLlqKGzyM4RsbfOR8N3aI7vOVL/lOb8M9O6YQlJjp3C048zi8/c1 wAksKt402DSIyQ/LK7aWLtT/jh7BT1S88yk8/7RBAQIRDAsw99p8bQS/qitPuXQT dClEVc5BnUI13MFAzhpN3Scej6TVzVy8rBXwH9x9+9LAAmDuizzeF21FUMJbnw85 dkyAmq7i8HBKroNaoZXwkvj0N1N+E5DR42oH/cmDS0To9hhRYRu0s/YmUQpwxdmb xNjiME9AOyQh8nuDQDy4cH/HtUdSDrNMQ2r+sfH/xhVtLXvG2/pI9sD4c+T1m6RS CCVgV5T9yLxMFlSUFgkHARkWKm+MOv6r -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:40 2025 by rpki-client