$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: fCtKO1hEIznoMflMCHkYXR7fTOzKqGN9JKRY5ALSiGk= Subject key identifier: 8C:24:DC:8E:19:B5:89:B6:B6:BE:3C:A1:C4:2A:C1:EE:65:EB:FA:76 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 0A58 Signing time: Tue 04 Nov 2025 19:45:49 +0000 Manifest this update: Tue 04 Nov 2025 19:45:49 +0000 Manifest next update: Tue 11 Nov 2025 19:45:49 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: IXb+ZH8lpoUeJW+oZl7HeCR4jmJnorit8xg3Bf1upsM=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) 3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: oDjyKM5SNuLjv6Hcd551F4doAQus0w8X4mHseINWIyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Nov 4 19:45:49 2025 GMT Not After : Nov 11 19:45:49 2025 GMT Subject: CN=690a57ed-723c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:5d:d7:f4:f0:37:1d:26:85:97:ab:35:f5: 04:ed:32:9a:dd:f9:5e:67:13:ed:7e:f7:e2:2d:a4: c7:18:32:02:14:f4:34:d2:4a:2a:df:85:90:4f:7f: a3:a6:eb:46:b6:32:1a:db:e7:91:dd:47:77:44:1a: 73:50:18:f7:b9:62:6d:2e:dd:24:38:17:05:d5:ec: 88:96:9f:0e:6b:7d:a8:a3:4e:7f:39:56:86:92:2d: 5a:15:f3:e2:91:e1:46:ee:c1:33:64:e3:aa:76:7b: 66:c0:4b:a8:a6:e8:56:36:c8:7e:8b:53:98:d1:dd: fc:05:13:88:e0:b0:33:8d:e9:49:9d:08:7c:2f:d0: 5f:f8:22:51:53:47:fd:75:25:61:86:a7:27:2c:9e: 10:5d:a0:ea:4d:12:15:e3:4b:b3:af:f9:05:9a:c6: 55:5f:e7:af:c3:1b:7b:9c:16:6e:6f:3b:cb:7f:1f: a3:da:c0:af:2f:b0:9d:f0:52:77:9f:f1:9d:8e:5e: 6a:4e:10:6c:34:2f:cb:3b:27:81:fb:e4:97:bb:dd: 8f:a5:a0:09:d6:45:ab:42:4a:2e:d5:2d:f5:3c:ee: 9d:94:09:6e:63:29:4c:74:eb:be:99:01:63:93:1e: f1:ae:7b:0b:33:ae:9f:0d:5e:76:0f:71:4c:48:99: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:24:DC:8E:19:B5:89:B6:B6:BE:3C:A1:C4:2A:C1:EE:65:EB:FA:76 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:91:e9:ae:2e:46:ed:d1:31:fa:af:af:a0:fa:8f:2f:fc:b2: d0:d4:0d:98:f7:79:4e:ad:a8:29:6e:86:27:66:02:41:8c:0b: 08:7d:3f:ea:60:c0:64:23:a8:49:74:59:5d:d6:75:b7:1b:2c: 7f:55:8f:96:7c:4d:c0:d3:70:3c:c5:f1:f5:5b:7a:da:7d:af: c3:4e:32:84:38:9c:a3:61:ec:32:c8:7b:06:cf:c8:1c:93:be: 4e:c2:50:81:2d:c8:bb:99:47:b7:9c:0d:a6:96:99:5f:4d:f9: c8:f8:4d:e4:1e:19:78:54:75:73:fb:3f:68:fe:eb:cd:a1:84: f0:2a:4e:13:b0:b8:92:12:b7:a3:94:59:e8:28:a5:70:23:57: b5:d6:91:ad:5f:28:df:ad:dc:e7:68:27:67:20:2b:4b:68:02: a1:5c:1b:a0:d2:34:5c:07:05:e4:09:ef:b0:15:87:93:35:17: 9d:78:d7:ab:f4:72:a1:69:40:09:d2:7e:33:dc:26:ac:fb:c1: 99:9f:cf:b0:6c:19:aa:76:1f:38:94:68:0c:b8:0e:58:cc:82: 95:f3:d3:65:50:a7:73:9c:3a:6f:2f:0e:b3:ae:2d:d3:e8:5f: de:22:2b:4d:f2:d6:22:3b:1e:f6:7f:ee:b7:9c:b5:9a:26:b7: 32:27:e0:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUxMTA0MTk0NTQ5WhcNMjUxMTExMTk0NTQ5WjAYMRYwFAYD VQQDEw02OTBhNTdlZC03MjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFNd1/TwNx0mhZerNfUE7TKa3fleZxPtfvfiLaTHGDICFPQ00koq34WQT3+j putGtjIa2+eR3Ud3RBpzUBj3uWJtLt0kOBcF1eyIlp8Oa32oo05/OVaGki1aFfPi keFG7sEzZOOqdntmwEuopuhWNsh+i1OY0d38BROI4LAzjelJnQh8L9Bf+CJRU0f9 dSVhhqcnLJ4QXaDqTRIV40uzr/kFmsZVX+evwxt7nBZubzvLfx+j2sCvL7Cd8FJ3 n/Gdjl5qThBsNC/LOyeB++SXu92PpaAJ1kWrQkou1S31PO6dlAluYylMdOu+mQFj kx7xrnsLM66fDV52D3FMSJlRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwk3I4Z tYm2tr48ocQqwe5l6/p2MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkkemuLkbt0TH6r6+g+o8v/LLQ1A2Y93lOragpboYnZgJBjAsIfT/q YMBkI6hJdFld1nW3Gyx/VY+WfE3A03A8xfH1W3rafa/DTjKEOJyjYewyyHsGz8gc k75OwlCBLci7mUe3nA2mlplfTfnI+E3kHhl4VHVz+z9o/uvNoYTwKk4TsLiSErej lFnoKKVwI1e11pGtXyjfrdznaCdnICtLaAKhXBug0jRcBwXkCe+wFYeTNRedeNer 9HKhaUAJ0n4z3Cas+8GZn8+wbBmqdh84lGgMuA5YzIKV89NlUKdznDpvLw6zri3T 6F/eIitN8tYiOx72f+63nLWaJrcyJ+D0 -----END CERTIFICATE-----Generated at Wed Nov 5 13:38:08 2025 by rpki-client