$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json) Hash identifier: eoaxa5AsFEPgp93MryEd0zQ02g5T2JqLUVufUlTWAew= Subject key identifier: AE:02:DA:91:19:84:14:65:10:54:5E:66:A0:1D:D3:8B:AD:84:97:E5 Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft Manifest number: 98 Signing time: Wed 05 Nov 2025 06:37:31 +0000 Manifest this update: Wed 05 Nov 2025 06:37:31 +0000 Manifest next update: Wed 12 Nov 2025 06:37:31 +0000 Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: u+RHPMVjXM52L0U5uRvRL01tVCK8r3tce7Ok2ETGg3A=) 2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Validity Not Before: Nov 5 06:37:31 2025 GMT Not After : Nov 12 06:37:31 2025 GMT Subject: CN=690af0ab-0fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:4a:e1:c9:82:e7:7e:08:e5:cc:96:fc:68: 43:9c:be:9d:5c:97:01:7e:a0:42:93:91:f9:88:8f: af:a7:f4:d2:7c:13:59:3a:a1:42:3c:57:dc:85:fe: 84:b7:b4:44:bc:99:65:31:64:ac:be:c5:93:b6:c2: 29:d1:15:90:13:bf:e2:2e:ab:93:f2:80:39:6e:3a: db:91:47:5f:1a:d2:2d:29:7d:dc:47:8c:33:4a:84: a3:6b:af:94:c5:d9:fb:15:11:2e:07:84:30:39:d8: 80:c2:16:0f:39:a9:5c:58:81:18:ae:3e:5c:f2:f5: a2:e4:25:45:63:88:34:72:dc:c0:c2:a3:77:58:44: b9:7f:94:d2:f3:f4:98:c8:a7:bc:69:82:15:28:fa: c2:6c:57:8b:c0:d4:87:8a:82:15:e6:23:80:e2:1b: 0c:7c:4c:2b:d0:28:19:19:e0:98:01:3c:45:30:48: 8a:0a:17:44:c4:97:9a:a0:7e:a5:6a:02:72:81:3b: 1a:d5:f3:cd:06:72:f3:68:0d:22:35:e1:9c:78:31: c8:62:a4:01:50:d1:14:c3:a0:c9:ba:c5:05:86:04: 2a:4e:6d:f0:0b:05:6a:3a:67:61:64:98:cf:03:f3: f5:95:a6:1b:9c:5d:2e:4d:84:43:f5:a0:ff:30:c2: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:02:DA:91:19:84:14:65:10:54:5E:66:A0:1D:D3:8B:AD:84:97:E5 X509v3 Authority Key Identifier: keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c7:9c:30:f8:72:1d:3f:bb:a4:71:56:b3:80:ba:a2:0d:1d: 19:ba:ab:6d:fd:da:3c:11:7a:dc:d4:fe:9b:1d:1c:d8:61:9e: 37:ad:e7:0c:d1:a1:10:83:db:75:ab:ad:ea:41:92:f1:3b:64: 40:80:14:75:98:ef:9a:2d:fe:c9:9e:d8:88:c8:8b:a5:90:7b: 95:85:cb:9e:a2:ad:69:92:19:06:91:62:8d:25:ea:80:44:28: bc:1a:13:5c:51:f5:85:69:1c:22:e3:fb:8d:c4:f9:49:cb:31: 8c:d0:f6:d9:37:b4:e4:ac:a1:11:dd:e4:eb:90:da:b5:a8:6b: b6:11:67:4d:e0:95:89:3d:56:4d:ed:a6:74:e5:1d:8f:23:e0: fd:af:98:22:1c:70:75:1a:ce:f5:fb:42:ae:db:2c:00:30:f6: f1:52:f0:0b:b1:70:81:8f:dd:d7:fb:7c:63:05:52:4d:fc:dc: 8d:d5:17:f5:6b:30:52:5b:90:c1:25:d7:ce:d0:70:b6:68:0c: dd:8b:d7:f9:f7:88:0b:34:50:37:e0:94:fb:d9:40:81:46:db: a1:1e:8e:66:c1:bc:2c:99:a6:b8:3e:c6:69:1a:3b:23:8a:d0: b9:76:4b:f2:95:9b:8c:08:42:64:90:a4:d9:99:01:47:2c:21: c5:21:5c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NjAxMTAvBgNVBAUTKDRDQjBCOTVCNEJEQzIzMzE0RjI4M0VGNzM5QTk2QTdD NjU4QzBBNkMwHhcNMjUxMTA1MDYzNzMxWhcNMjUxMTEyMDYzNzMxWjAYMRYwFAYD VQQDEw02OTBhZjBhYi0wZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgJK4cmC534I5cyW/GhDnL6dXJcBfqBCk5H5iI+vp/TSfBNZOqFCPFfchf6E t7REvJllMWSsvsWTtsIp0RWQE7/iLquT8oA5bjrbkUdfGtItKX3cR4wzSoSja6+U xdn7FREuB4QwOdiAwhYPOalcWIEYrj5c8vWi5CVFY4g0ctzAwqN3WES5f5TS8/SY yKe8aYIVKPrCbFeLwNSHioIV5iOA4hsMfEwr0CgZGeCYATxFMEiKChdExJeaoH6l agJygTsa1fPNBnLzaA0iNeGceDHIYqQBUNEUw6DJusUFhgQqTm3wCwVqOmdhZJjP A/P1laYbnF0uTYRD9aD/MMJiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4C2pEZ hBRlEFReZqAd04uthJflMB8GA1UdIwQYMBaAFEywuVtL3CMxTyg+9zmpanxljAps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY2MC8wMUM1MkEzMEQy NDMxMUVGODhDNUJDMTFDNEY5QUUwMi9UTEM1VzB2Y0l6RlBLRDczT2FscWZHV01D bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY2MC8wMUM1MkEzMEQyNDMxMUVGODhDNUJDMTFDNEY5QUUwMi9UTEM1VzB2Y0l6 RlBLRDczT2FscWZHV01DbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmx5ww+HIdP7ukcVazgLqiDR0Zuqtt/do8EXrc1P6bHRzYYZ43recM 0aEQg9t1q63qQZLxO2RAgBR1mO+aLf7JntiIyIulkHuVhcueoq1pkhkGkWKNJeqA RCi8GhNcUfWFaRwi4/uNxPlJyzGM0PbZN7TkrKER3eTrkNq1qGu2EWdN4JWJPVZN 7aZ05R2PI+D9r5giHHB1Gs71+0Ku2ywAMPbxUvALsXCBj93X+3xjBVJN/NyN1Rf1 azBSW5DBJdfO0HC2aAzdi9f594gLNFA34JT72UCBRtuhHo5mwbwsmaa4PsZpGjsj itC5dkvylZuMCEJkkKTZmQFHLCHFIVw+ -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:46 2025 by rpki-client