$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: fYvVXJ1PU6HBlFH4kW+log37l1bkPNnOx/OmHRfmkAs= Subject key identifier: B9:8F:55:4B:3C:4D:4B:5D:4D:73:BA:4F:D2:88:AC:F1:AB:F5:42:58 Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 127F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 1254 Signing time: Tue 04 Nov 2025 17:13:23 +0000 Manifest this update: Tue 04 Nov 2025 17:13:23 +0000 Manifest next update: Tue 11 Nov 2025 17:13:23 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: 9OHSNNV/RUZTM5EBrhBpTQWSVB8TYqPN0af55kWPgfk=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4735 (0x127f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Nov 4 17:13:23 2025 GMT Not After : Nov 11 17:13:23 2025 GMT Subject: CN=690a3433-bf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a5:c9:cc:b1:21:13:72:90:b2:d6:fe:3f:c6: 2f:69:69:0d:88:b2:5a:75:4b:a4:0f:2a:f2:9f:c7: 5f:4a:74:df:d2:9a:e4:8b:bc:96:af:f7:e4:34:8f: f5:1b:c7:9f:d2:00:0c:98:46:e6:fc:39:91:70:c3: 12:fe:fd:5f:5a:f5:d8:65:9e:4a:48:b0:ad:0c:28: b2:f8:23:b5:1b:1e:84:ee:b4:13:0d:83:42:b3:ed: 67:91:dc:0e:63:9b:0c:aa:78:0e:a2:67:6c:83:da: 99:47:34:24:04:1f:1c:7e:2f:33:9f:f7:2c:81:25: 7c:0e:ed:64:e3:37:93:05:85:67:ca:30:c2:81:08: 6a:e4:f2:fe:20:88:c1:b6:50:85:e0:e8:24:fd:d9: c8:df:81:b1:26:54:c3:57:0e:c0:c0:a6:88:dd:c4: 84:4e:64:4e:83:0e:f2:cb:5b:b3:f0:91:11:e3:ca: be:d8:11:97:82:24:75:9f:10:29:94:af:f0:19:77: 9e:5b:e2:4d:27:ed:7f:46:dd:a5:7e:8a:3d:bd:ee: 29:55:da:ce:70:51:51:ef:27:b6:d7:24:93:47:35: 98:10:df:a6:29:47:07:83:33:b3:70:83:f2:73:b8: 9b:12:66:8c:30:50:a4:41:ad:15:1d:70:b9:1b:2b: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:55:4B:3C:4D:4B:5D:4D:73:BA:4F:D2:88:AC:F1:AB:F5:42:58 X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:28:ff:8b:50:ba:ab:d5:ef:17:62:09:62:2c:35:55:4b:3f: af:8d:84:20:7c:35:23:2f:6e:ff:bd:8b:70:c4:6e:43:cd:28: bf:46:aa:a0:7c:70:13:d7:b2:07:4e:f1:35:ad:99:76:b1:6c: 47:ef:54:b9:9d:bb:c3:d5:ea:ad:78:aa:24:2e:78:77:d6:e0: 37:84:af:8f:8f:7f:d8:c1:37:c8:a7:20:84:80:8c:73:d3:ec: e2:8a:7f:a7:f5:1e:c8:d9:14:ff:99:e7:80:9e:76:39:0e:56: 9f:19:86:e6:4f:b2:03:ff:01:7b:7d:7a:e0:80:21:1a:b1:81: d7:82:dc:82:d0:3e:cc:de:40:4b:ec:37:a2:fb:e2:2c:09:24: cd:e8:55:8f:49:6c:06:3a:34:57:86:62:a3:9d:e3:cd:27:c3: 80:13:e4:28:82:97:71:1f:24:57:a2:49:03:31:31:f6:27:b7: 5e:54:f2:fa:2b:4e:53:2f:e6:65:40:2f:56:c9:ab:5a:62:c6: 28:ab:33:13:74:19:36:a5:a4:0f:e1:86:b2:ff:a4:3b:5b:00: b5:fa:ec:6d:c5:c1:e3:73:98:3e:09:67:07:88:f0:fb:af:81: f6:5b:37:36:bd:c5:b3:b4:d7:b7:97:33:d1:62:4f:93:7d:17: a8:39:99:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUxMTA0MTcxMzIzWhcNMjUxMTExMTcxMzIzWjAYMRYwFAYD VQQDEw02OTBhMzQzMy1iZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46XJzLEhE3KQstb+P8YvaWkNiLJadUukDyryn8dfSnTf0prki7yWr/fkNI/1 G8ef0gAMmEbm/DmRcMMS/v1fWvXYZZ5KSLCtDCiy+CO1Gx6E7rQTDYNCs+1nkdwO Y5sMqngOomdsg9qZRzQkBB8cfi8zn/csgSV8Du1k4zeTBYVnyjDCgQhq5PL+IIjB tlCF4Ogk/dnI34GxJlTDVw7AwKaI3cSETmROgw7yy1uz8JER48q+2BGXgiR1nxAp lK/wGXeeW+JNJ+1/Rt2lfoo9ve4pVdrOcFFR7ye21ySTRzWYEN+mKUcHgzOzcIPy c7ibEmaMMFCkQa0VHXC5GytZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmPVUs8 TUtdTXO6T9KIrPGr9UJYMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBKP+LULqr1e8XYgliLDVVSz+vjYQgfDUjL27/vYtwxG5DzSi/Rqqg fHAT17IHTvE1rZl2sWxH71S5nbvD1eqteKokLnh31uA3hK+Pj3/YwTfIpyCEgIxz 0+ziin+n9R7I2RT/meeAnnY5DlafGYbmT7ID/wF7fXrggCEasYHXgtyC0D7M3kBL 7Dei++IsCSTN6FWPSWwGOjRXhmKjnePNJ8OAE+QogpdxHyRXokkDMTH2J7deVPL6 K05TL+ZlQC9WyataYsYoqzMTdBk2paQP4Yay/6Q7WwC1+uxtxcHjc5g+CWcHiPD7 r4H2Wzc2vcWztNe3lzPRYk+TfReoOZmQ -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:49 2025 by rpki-client