$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: Dd7L4pghz1jTTgQmI5aBZd7eScgTHYxHaa6LQnOZUSo= Subject key identifier: 7F:53:84:BE:58:1F:6B:2E:B6:0A:5C:70:C5:B8:D7:41:0B:8B:B0:B8 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 01ED Signing time: Wed 05 Nov 2025 02:40:38 +0000 Manifest this update: Wed 05 Nov 2025 02:40:38 +0000 Manifest next update: Wed 12 Nov 2025 02:40:38 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: H1aCaQo26ZZ0wBBwQHHiFxKl+Kdt7YRJTBFRQCEzgQA=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Nov 5 02:40:38 2025 GMT Not After : Nov 12 02:40:38 2025 GMT Subject: CN=690ab926-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:79:03:fc:c4:4b:03:97:8d:14:52:70:7d: 81:ee:50:fc:72:83:c1:02:61:4f:2a:95:c2:d2:01: f6:5c:72:2b:da:39:44:ec:98:1f:f1:19:a7:58:1d: 88:7a:f6:8b:f8:a4:33:d1:66:cc:e2:9b:21:1f:45: 6a:c4:57:4f:16:8f:ea:f8:2d:6a:ed:5d:00:07:35: 9c:2c:3d:35:18:a4:f4:8c:56:79:14:50:67:21:ec: b9:82:cd:28:30:fd:2e:a3:14:ad:88:dd:15:89:4b: dd:11:c0:64:54:ba:90:92:30:48:bb:be:69:0f:09: b0:6d:b5:33:e0:1d:81:c0:00:0c:9a:1f:12:e3:95: 1a:6e:ea:2b:19:c3:4d:0c:6d:73:5e:25:cc:db:6d: 2a:50:ec:97:d9:75:b1:a8:95:83:7b:93:a9:8f:e0: 70:fb:a3:a6:22:ba:56:7e:a0:8c:19:bc:9a:d7:41: e1:31:19:64:8f:f6:98:12:1d:7a:0d:4d:6b:7f:e2: fd:a4:b1:9f:9e:27:b3:a1:1c:1b:d7:76:cb:1d:d2: e4:a4:c4:b3:44:10:75:bf:96:cc:8d:9a:88:63:2a: 4a:87:74:71:cb:27:12:18:c6:c9:ea:66:71:14:81: 7d:d6:11:e7:29:e0:6f:a5:93:16:5b:24:4c:3f:32: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:84:BE:58:1F:6B:2E:B6:0A:5C:70:C5:B8:D7:41:0B:8B:B0:B8 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:40:83:70:4d:15:07:d8:52:12:fa:18:b3:ec:e7:5a:f0: 20:58:6e:97:96:71:06:43:d0:d3:f3:48:0b:5e:f9:00:f3:72: 4e:47:98:a2:ac:67:08:7b:f9:1e:2e:98:6b:e8:c4:04:d7:8c: dd:d9:31:38:2a:0e:c7:08:b0:39:d9:bf:46:90:94:9a:9e:aa: f1:9c:76:02:1b:1a:4d:1b:9d:30:e4:7c:55:6e:9e:e3:36:8f: c3:63:cf:f2:45:c2:a1:35:11:21:b1:1d:ab:c1:9e:61:56:e0: c6:c2:03:59:e0:43:9a:41:10:52:c2:13:72:ef:19:66:bb:21: b0:16:52:6f:a0:c0:ff:d9:83:e2:36:56:0b:97:26:e0:7d:b6: be:ab:a9:99:06:20:b8:15:90:2e:09:cc:d6:a7:1b:bc:ac:87: aa:4d:18:75:72:ed:c5:a0:b9:bb:91:60:84:8a:80:fa:7f:b1: 61:32:b6:5f:67:fc:ed:32:46:57:01:53:71:f1:95:97:38:b8: ea:ea:5f:06:ab:e1:2e:7e:d5:dd:bf:3d:eb:60:60:11:72:0f: 25:87:13:82:de:c9:6f:ef:0d:74:c2:15:da:26:ed:d4:2d:df: af:34:23:3d:0a:fe:7a:ae:ec:47:9b:fd:54:96:4f:aa:a4:e6: 05:13:f7:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUxMTA1MDI0MDM4WhcNMjUxMTEyMDI0MDM4WjAYMRYwFAYD VQQDEw02OTBhYjkyNi05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr795A/zESwOXjRRScH2B7lD8coPBAmFPKpXC0gH2XHIr2jlE7Jgf8RmnWB2I evaL+KQz0WbM4pshH0VqxFdPFo/q+C1q7V0ABzWcLD01GKT0jFZ5FFBnIey5gs0o MP0uoxStiN0ViUvdEcBkVLqQkjBIu75pDwmwbbUz4B2BwAAMmh8S45UabuorGcNN DG1zXiXM220qUOyX2XWxqJWDe5Opj+Bw+6OmIrpWfqCMGbya10HhMRlkj/aYEh16 DU1rf+L9pLGfniezoRwb13bLHdLkpMSzRBB1v5bMjZqIYypKh3RxyycSGMbJ6mZx FIF91hHnKeBvpZMWWyRMPzI5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9ThL5Y H2sutgpccMW410ELi7C4MB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAATUCDcE0VB9hSEvoYs+znWvAgWG6XlnEGQ9DT80gLXvkA83JOR5ii rGcIe/keLphr6MQE14zd2TE4Kg7HCLA52b9GkJSanqrxnHYCGxpNG50w5HxVbp7j No/DY8/yRcKhNREhsR2rwZ5hVuDGwgNZ4EOaQRBSwhNy7xlmuyGwFlJvoMD/2YPi NlYLlybgfba+q6mZBiC4FZAuCczWpxu8rIeqTRh1cu3FoLm7kWCEioD6f7FhMrZf Z/ztMkZXAVNx8ZWXOLjq6l8Gq+EuftXdvz3rYGARcg8lhxOC3slv7w10whXaJu3U Ld+vNCM9Cv56ruxHm/1Ulk+qpOYFE/ek -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:16 2025 by rpki-client