$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: osb6DzWe/d/P8sZk9MxmEMAM4kFpN0k80ppz8ydE2eM= Subject key identifier: 18:46:4D:26:46:D8:50:AE:52:67:6C:85:C7:66:28:34:89:5C:13:B2 Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 013B Signing time: Mon 03 Nov 2025 04:51:16 +0000 Manifest this update: Mon 03 Nov 2025 04:51:15 +0000 Manifest next update: Mon 10 Nov 2025 04:51:15 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: Srl89rUyZqJD4xQlgAIAIM8mjpSpHPsFsDEXdOPWNmM=) 2: 59E4E2A415BA11F084EFBB7CC4F9AE02.roa (hash: HZDyu1joYX+dxKnFptiA5xky7OHNJkIOKQTmsVfZf5A=) 3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Nov 3 04:51:15 2025 GMT Not After : Nov 10 04:51:15 2025 GMT Subject: CN=690834c4-f32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:8a:eb:0c:77:c6:09:49:5a:86:c4:fd:53: 03:81:b3:12:4d:3b:5e:96:1e:50:38:3d:4f:23:6e: f9:d4:3a:98:e4:f6:72:c0:9a:3a:60:0a:ea:b2:d0: d4:74:3d:ba:9d:5f:25:8d:cf:a3:17:80:56:19:9c: cf:5d:94:03:05:ae:76:56:1f:05:92:93:63:aa:13: be:32:01:84:b9:4c:5d:06:a4:d0:bf:48:82:2e:4c: b2:04:ea:b2:d7:89:72:bb:a9:78:ca:ac:3b:5c:fd: 31:d1:ae:d6:64:2f:ac:40:e7:c5:e2:a6:07:01:ef: d8:03:78:94:e9:bd:0a:dd:dc:57:ff:b4:e8:f1:e8: a0:2e:21:0a:a4:b5:d7:1c:5f:78:2e:5f:b5:93:9c: 92:1d:58:3e:73:0e:33:e4:65:54:9e:be:c3:40:67: 81:8f:4b:f3:57:56:41:87:02:4b:9b:d9:c1:bd:94: bf:f7:ad:d8:2c:0b:c1:7a:e2:af:5b:0b:75:9a:2d: c1:b4:86:aa:f9:8b:11:0d:1a:3b:c2:fd:8e:b5:17: 06:a8:6d:f5:d3:ee:ff:36:e0:79:cf:a0:04:19:47: 84:67:b7:70:b6:a1:a3:aa:1e:dd:5f:f1:02:2f:75: 85:84:e1:c4:76:e6:d3:23:c8:10:fd:ec:dd:b7:71: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:46:4D:26:46:D8:50:AE:52:67:6C:85:C7:66:28:34:89:5C:13:B2 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8e:b2:32:c7:ac:cc:20:0f:e9:3c:f7:e4:78:27:27:66:3e: b3:e2:ee:98:97:a0:1d:6e:7e:44:9e:a4:98:d8:59:22:72:62: 11:23:8a:98:e9:08:c5:8b:fd:5b:9c:2a:73:52:87:6b:49:83: 1e:ad:c4:a9:74:76:68:b9:63:5c:7c:5b:3b:2b:0c:83:cc:8c: 17:3c:dc:a6:7d:9c:6a:d5:97:eb:41:4f:17:42:ba:d6:ad:a4: f4:a9:5f:4e:17:e9:ee:eb:4a:87:2c:90:31:ca:d9:ea:a1:1b: 50:b6:ea:7d:9f:55:db:d3:95:9e:b5:c3:a1:b8:bb:1a:8d:41: d1:99:02:a1:d7:87:42:ec:dc:9a:e9:28:46:67:4e:d3:e3:06: 1e:94:c9:18:8e:70:a9:14:08:b6:f1:39:1b:c7:3b:d1:d4:49: 93:0c:bc:bb:13:53:58:d5:a4:2e:74:d1:0b:89:f1:42:db:2b: 1c:64:58:9e:b2:02:97:aa:f7:32:67:ef:b1:1e:0a:13:66:b8: e2:d3:67:c7:a6:54:4d:60:00:50:51:cd:47:7a:d8:b8:f8:d5: 5f:5b:6f:17:58:3c:82:8f:0e:8a:88:f0:98:97:51:9a:c2:b6: ef:af:5b:11:17:40:87:a2:dd:d9:af:d3:58:ad:ce:3b:8e:06: 2b:8f:cf:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUxMTAzMDQ1MTE1WhcNMjUxMTEwMDQ1MTE1WjAYMRYwFAYD VQQDEw02OTA4MzRjNC1mMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1uK6wx3xglJWobE/VMDgbMSTTtelh5QOD1PI2751DqY5PZywJo6YArqstDU dD26nV8ljc+jF4BWGZzPXZQDBa52Vh8FkpNjqhO+MgGEuUxdBqTQv0iCLkyyBOqy 14lyu6l4yqw7XP0x0a7WZC+sQOfF4qYHAe/YA3iU6b0K3dxX/7To8eigLiEKpLXX HF94Ll+1k5ySHVg+cw4z5GVUnr7DQGeBj0vzV1ZBhwJLm9nBvZS/963YLAvBeuKv Wwt1mi3BtIaq+YsRDRo7wv2OtRcGqG310+7/NuB5z6AEGUeEZ7dwtqGjqh7dX/EC L3WFhOHEdubTI8gQ/ezdt3F/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhGTSZG 2FCuUmdshcdmKDSJXBOyMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4jrIyx6zMIA/pPPfkeCcnZj6z4u6Yl6Adbn5EnqSY2FkicmIRI4qY 6QjFi/1bnCpzUodrSYMercSpdHZouWNcfFs7KwyDzIwXPNymfZxq1ZfrQU8XQrrW raT0qV9OF+nu60qHLJAxytnqoRtQtup9n1Xb05WetcOhuLsajUHRmQKh14dC7Nya 6ShGZ07T4wYelMkYjnCpFAi28TkbxzvR1EmTDLy7E1NY1aQudNELifFC2yscZFie sgKXqvcyZ++xHgoTZrji02fHplRNYABQUc1Heti4+NVfW28XWDyCjw6KiPCYl1Ga wrbvr1sRF0CHot3Zr9NYrc47jgYrj89H -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:06 2025 by rpki-client