$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json) Hash identifier: nrm/Iq1LGW5797YPtuPpgaXHuNmqFXwmam3yoUJYLuY= Subject key identifier: 32:90:D2:28:96:85:E5:EE:2B:E2:98:1C:8C:5A:9C:7C:6E:9E:B2:17 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 18CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft Manifest number: 1853 Signing time: Tue 04 Nov 2025 16:38:35 +0000 Manifest this update: Tue 04 Nov 2025 16:38:34 +0000 Manifest next update: Tue 11 Nov 2025 16:38:34 +0000 Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: AJxBbed5WR2Yg7++hagZmevJuBCZ+a5W37DnmE8FB/U=) 2: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: G2dT/aqsMx0KoCwmXvgkhmTnoPOvK+397UePsMgxeC8=) 3: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: Efx4cvLJwgDVDbTYOOkuaG1d46gN7cwEwLt6snlfZA0=) 4: 2F268460A40311EFBD995535C4F9AE02.roa (hash: Nc9fjbQQaQM2ngJvCwaCgEuj+SZKkpHjO1qgG0sZIHg=) 5: 2F903356A40311EFBD995535C4F9AE02.roa (hash: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ=) 6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: pLQhbQ0mTRBssMztKv86DK/TOvY561i4aTIXdGlEvzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6351 (0x18cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Nov 4 16:38:34 2025 GMT Not After : Nov 11 16:38:34 2025 GMT Subject: CN=690a2c0a-7333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:73:53:e5:ee:fd:7f:5a:25:61:4f:e9:30: 65:d1:a0:ff:0d:bb:1d:d7:1d:48:90:a1:88:2e:74: c2:df:a5:3e:bb:8e:9b:7f:72:a5:03:5f:a4:89:f5: 12:a3:61:2c:25:18:5a:2b:9f:5b:eb:9d:c2:88:92: e3:1a:81:ba:c4:2a:30:ba:f8:4f:ac:d5:cf:17:43: 46:07:2a:1f:a3:24:46:17:ca:87:34:f5:17:d9:f9: 5a:df:86:a6:b0:8b:14:9b:1b:7c:2b:3a:70:d6:5c: ea:9b:de:1b:1a:36:7f:fc:ae:d5:da:5d:ea:b1:93: 86:38:2f:4c:12:52:00:05:b9:cc:97:7b:93:64:12: dc:f7:63:9e:c4:f6:0e:e9:22:56:63:9b:20:d2:0f: c8:db:9c:60:3b:5f:e4:2f:21:5a:71:a5:0a:16:05: 96:d7:c2:3b:73:e5:cf:ce:28:4c:91:65:4a:d1:cc: cb:84:e3:5a:ae:52:f9:07:1f:fd:b0:9d:8a:38:20: 27:00:36:9d:86:fa:a0:de:25:29:ba:63:f4:ef:62: c0:fb:65:ff:02:33:43:e1:ed:3f:17:27:36:ef:05: a3:c0:bc:84:45:c1:99:ac:75:e6:e8:0d:5a:b4:ef: a4:5b:fd:fb:be:1d:d2:ed:2b:cc:7d:b8:0e:9d:29: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:D2:28:96:85:E5:EE:2B:E2:98:1C:8C:5A:9C:7C:6E:9E:B2:17 X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d8:6c:76:92:b7:81:b4:b4:e2:29:02:24:32:e8:46:20:df: 08:94:f5:ed:73:1d:70:c2:59:ce:b6:46:51:64:a6:6a:06:37: 80:8a:12:9a:83:c5:a3:c5:ac:ca:11:d3:3f:1e:9b:46:62:41: aa:fa:1a:66:9c:e8:7b:d4:54:bf:81:16:a3:0c:ac:06:a4:ce: f6:b5:de:c7:f6:f0:f0:b7:b3:00:29:53:15:99:b0:5b:81:bd: 4b:00:c5:d8:57:52:76:82:66:dd:b4:00:d3:a3:03:42:0c:d9: 02:ed:84:f2:23:ef:9e:0f:db:0a:8f:19:b6:78:cf:0e:cc:e7: 05:11:54:48:31:61:fa:c8:f9:19:e6:c9:ca:72:d2:8a:5a:c8: f8:50:49:c3:18:8d:36:21:bb:04:f8:8e:6e:3b:23:09:26:0e: e7:c5:c6:ed:06:da:e5:32:2b:53:b4:5b:4a:68:09:4b:c7:6a: b7:2a:0a:f0:01:ae:5e:4f:b3:a2:49:3b:c5:57:7a:87:1e:39: 21:a5:a8:7c:7a:e7:4e:e6:af:40:d0:bf:a5:36:64:f3:13:6e: 6f:c2:38:bd:d8:05:45:a9:a0:aa:68:88:ce:6c:9e:ae:99:00: db:06:5a:24:7a:fb:6d:f4:83:6a:42:bf:28:af:7c:f0:1f:2e: 8a:f6:b0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjUxMTA0MTYzODM0WhcNMjUxMTExMTYzODM0WjAYMRYwFAYD VQQDEw02OTBhMmMwYS03MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt1zU+Xu/X9aJWFP6TBl0aD/Dbsd1x1IkKGILnTC36U+u46bf3KlA1+kifUS o2EsJRhaK59b653CiJLjGoG6xCowuvhPrNXPF0NGByofoyRGF8qHNPUX2fla34am sIsUmxt8Kzpw1lzqm94bGjZ//K7V2l3qsZOGOC9MElIABbnMl3uTZBLc92OexPYO 6SJWY5sg0g/I25xgO1/kLyFacaUKFgWW18I7c+XPzihMkWVK0czLhONarlL5Bx/9 sJ2KOCAnADadhvqg3iUpumP072LA+2X/AjND4e0/Fyc27wWjwLyERcGZrHXm6A1a tO+kW/37vh3S7SvMfbgOnSmSEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKQ0iiW heXuK+KYHIxanHxunrIXMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUI0OS8wNzgwQjk5MEM5RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNf dllNYXZRSmdPMS13LTVSYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF2Gx2kreBtLTiKQIkMuhGIN8IlPXtcx1wwlnOtkZRZKZqBjeAihKa g8WjxazKEdM/HptGYkGq+hpmnOh71FS/gRajDKwGpM72td7H9vDwt7MAKVMVmbBb gb1LAMXYV1J2gmbdtADTowNCDNkC7YTyI++eD9sKjxm2eM8OzOcFEVRIMWH6yPkZ 5snKctKKWsj4UEnDGI02IbsE+I5uOyMJJg7nxcbtBtrlMitTtFtKaAlLx2q3Kgrw Aa5eT7OiSTvFV3qHHjkhpah8eudO5q9A0L+lNmTzE25vwji92AVFqaCqaIjObJ6u mQDbBlokevtt9INqQr8or3zwHy6K9rAx -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:55 2025 by rpki-client