$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: XEyCANDhXq7sIqWRqXhPVA4JCC6mmAc/8v4nqz3GaRU= Subject key identifier: C5:31:D7:EA:79:8E:D8:79:0F:45:99:EE:01:5E:B1:63:2F:9D:5A:B3 Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 44 Signing time: Wed 05 Nov 2025 07:38:03 +0000 Manifest this update: Wed 05 Nov 2025 07:38:02 +0000 Manifest next update: Wed 12 Nov 2025 07:38:02 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: TUTgC8RIHyCEyozhimyfojbUnt9H6liI2b526stBpWM=) 2: C6047A6481A111F08CBC9741C4F9AE02.roa (hash: bgbW7xHV4YTAXMUDumTfB3UuK2rCir4YSQMN24IIGfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Nov 5 07:38:02 2025 GMT Not After : Nov 12 07:38:02 2025 GMT Subject: CN=690afeda-d1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:4e:14:5d:a8:28:68:cd:e0:4b:f0:1e:3b: 44:e6:42:55:d6:fa:21:c3:49:9d:74:91:0a:c6:7d: c8:b0:ab:50:f5:22:62:2b:71:18:34:23:48:48:ab: 63:6f:63:61:1d:c7:0d:8b:9f:5a:9a:a8:4d:5a:60: 7c:4e:b8:09:7c:1e:09:6a:80:b2:d9:8f:69:5b:dd: f8:87:61:be:a6:49:0f:7b:b5:44:d3:a1:3c:94:0c: cf:e3:cb:de:3e:cf:f1:40:15:06:6f:4b:d7:15:37: 8b:d9:53:14:b2:83:26:1c:89:60:70:df:63:52:9e: b0:79:5a:41:45:be:41:7f:b6:ce:4c:3f:ba:9d:5a: 7f:1f:00:44:3a:cb:72:80:0d:6f:ef:64:e9:29:45: 0e:63:a9:ff:2b:bc:fd:e2:56:b3:eb:29:9a:e2:36: cc:90:5b:89:7a:f4:6e:c4:88:ca:33:9f:18:c5:99: 56:18:d0:dc:04:c6:0f:3f:58:ef:70:b1:f1:ea:7a: 8b:ac:b3:04:d8:46:d8:8b:23:00:d1:ec:00:e3:2f: be:0b:48:1b:29:7f:ed:47:21:dd:b9:1b:ef:ff:8a: 25:0d:3e:4a:e2:da:74:90:c6:ab:5a:82:87:3e:3b: c9:c4:d7:d4:9b:31:69:c3:18:24:f3:9d:19:e2:a1: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:31:D7:EA:79:8E:D8:79:0F:45:99:EE:01:5E:B1:63:2F:9D:5A:B3 X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:de:a1:46:87:78:8b:62:50:e5:18:d6:a9:54:76:1c:ee:b6: 3b:1a:3f:79:3f:ea:02:e2:1c:5c:be:8b:af:05:a9:3a:c4:7a: 71:cc:f1:cf:08:38:65:d8:cd:d2:8e:fa:72:e3:3a:47:c0:af: 10:c5:17:9e:4e:61:d2:70:ff:83:8c:7c:42:35:56:ee:ee:2e: 87:54:6e:d9:77:90:0b:32:34:69:75:cc:02:b5:4d:91:37:1b: 07:3f:2c:09:04:67:e5:8e:f2:e7:7a:cc:46:9d:19:fc:08:54: 79:71:c9:dc:d2:94:c2:b8:34:4f:c4:7d:14:7b:a5:dc:eb:50: d1:a1:09:45:62:57:2b:49:2a:e8:03:d7:37:76:4f:09:e0:ea: 7e:1c:8e:6e:a3:90:78:ec:41:76:79:b4:94:56:c5:c6:4e:19: 39:22:58:95:ca:fa:b1:82:40:53:c0:bd:2e:f9:5d:31:5d:e8: de:d6:03:aa:27:65:ed:8d:af:08:7a:b9:e2:62:fa:f8:bb:c3: b8:3e:56:98:f2:b8:ba:7f:48:40:0a:d1:d4:21:f8:61:b8:00: 9c:a3:5a:fd:fa:3e:a7:c3:f8:e5:59:9c:29:04:00:1a:05:89: 60:14:6e:33:6c:1c:e5:78:bc:e7:93:61:d5:60:a0:28:eb:bb: 95:c0:98:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTExMDUwNzM4MDJaFw0yNTExMTIwNzM4MDJaMBgxFjAUBgNV BAMTDTY5MGFmZWRhLWQxYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQpE4UXagoaM3gS/AeO0TmQlXW+iHDSZ10kQrGfciwq1D1ImIrcRg0I0hIq2Nv Y2Edxw2Ln1qaqE1aYHxOuAl8HglqgLLZj2lb3fiHYb6mSQ97tUTToTyUDM/jy94+ z/FAFQZvS9cVN4vZUxSygyYciWBw32NSnrB5WkFFvkF/ts5MP7qdWn8fAEQ6y3KA DW/vZOkpRQ5jqf8rvP3iVrPrKZriNsyQW4l69G7EiMoznxjFmVYY0NwExg8/WO9w sfHqeousswTYRtiLIwDR7ADjL74LSBspf+1HId25G+//iiUNPkri2nSQxqtagoc+ O8nE19SbMWnDGCTznRnioa4zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxTHX6nmO 2HkPRZnuAV6xYy+dWrMwHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/eoUaHeItiUOUY1qlUdhzutjsaP3k/6gLiHFy+i68FqTrEenHM8c8I OGXYzdKO+nLjOkfArxDFF55OYdJw/4OMfEI1Vu7uLodUbtl3kAsyNGl1zAK1TZE3 Gwc/LAkEZ+WO8ud6zEadGfwIVHlxydzSlMK4NE/EfRR7pdzrUNGhCUViVytJKugD 1zd2Twng6n4cjm6jkHjsQXZ5tJRWxcZOGTkiWJXK+rGCQFPAvS75XTFd6N7WA6on Ze2Nrwh6ueJi+vi7w7g+VpjyuLp/SEAK0dQh+GG4AJyjWv36PqfD+OVZnCkEABoF iWAUbjNsHOV4vOeTYdVgoCjru5XAmFY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:02 2025 by rpki-client