$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json) Hash identifier: zxFZSvY2UoHWPJhoa1y0Lf4M0JiyJ6tIUnzgDJaz1TQ= Subject key identifier: D8:9D:53:F1:D2:F7:FA:32:C9:42:E6:98:E8:B0:41:48:1F:A4:9B:17 Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Certificate serial: 1556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft Manifest number: 1522 Signing time: Tue 04 Nov 2025 16:55:41 +0000 Manifest this update: Tue 04 Nov 2025 16:55:40 +0000 Manifest next update: Tue 11 Nov 2025 16:55:40 +0000 Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: KiEi9F1slcrZbrPfcfOqSLgaNVKD/laQcEEUs3pzGeA=) 2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=) 3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5462 (0x1556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Validity Not Before: Nov 4 16:55:40 2025 GMT Not After : Nov 11 16:55:40 2025 GMT Subject: CN=690a300d-bfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:1f:81:0b:ce:72:4b:20:ca:b2:ed:76:97: b8:86:26:7a:c7:2a:17:d5:00:21:6b:a6:ea:ed:47: 7f:dc:73:7d:15:f2:eb:17:06:51:26:73:e9:1a:d1: 82:95:01:d0:7e:a3:87:5b:6b:15:9c:1c:6b:6d:ed: ad:46:8c:66:1a:19:59:d6:82:6f:31:18:77:cd:c1: 00:ae:73:c0:7c:bd:a5:aa:04:14:86:8c:f6:a5:74: 9c:1b:cc:20:c9:e9:7d:1b:f6:50:2f:81:a1:6b:08: b4:ae:99:f3:1b:fb:4e:50:6b:13:c5:59:d2:18:e8: 7c:24:1d:85:bd:a3:fa:0c:3c:c5:c8:67:64:84:16: f6:27:aa:ed:16:65:5d:7c:f5:69:c9:a8:36:98:6a: c7:7b:02:b6:8f:e5:fe:b4:ad:27:a0:84:28:38:8d: 56:b0:f8:9e:14:ad:1e:2c:4b:70:a6:15:1b:db:e0: dd:9c:05:e3:45:3b:4c:2e:26:5f:9f:d2:cf:7e:c8: 7f:40:6a:0f:25:f2:67:b2:62:73:82:0d:0b:e3:62: b2:7b:6c:1f:e1:eb:bc:57:21:99:92:46:b0:7f:82: ce:29:7b:c6:22:96:46:b4:6f:20:de:01:8a:6a:f8: b5:c9:ce:aa:20:e4:1e:2d:a5:79:24:75:35:3a:80: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:53:F1:D2:F7:FA:32:C9:42:E6:98:E8:B0:41:48:1F:A4:9B:17 X509v3 Authority Key Identifier: keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:50:a8:11:fd:d1:16:20:d4:5b:bc:13:b2:16:ce:ba:21:af: bf:26:ce:59:25:96:ea:17:96:6d:f0:a0:6f:43:30:ef:18:75: 5d:eb:4b:21:d8:f0:2c:f6:86:e4:15:38:01:4e:74:cd:6f:05: 45:f4:86:a1:41:de:10:b4:7f:0a:9c:7d:7f:98:65:1a:6e:84: 90:f5:a4:fe:4a:84:03:b2:d6:c6:44:73:3f:0a:f4:6d:e7:98: 1e:af:14:29:72:c3:65:59:22:27:09:58:fb:df:36:56:29:d9: c3:25:84:b1:09:4f:48:35:79:9d:31:04:f5:71:c9:cd:54:85: 58:ef:09:f3:ce:e7:fc:65:a6:fd:26:5a:a5:fd:4b:91:44:a5: 5e:1c:5a:1d:9c:74:38:f0:e5:20:75:37:4b:36:db:71:97:93: 00:88:42:ae:bf:73:7e:70:da:47:f0:89:e1:29:69:a5:7b:d6: 74:97:2b:7b:35:9f:c9:08:67:5e:d9:dd:93:2d:ee:74:e7:44: d3:d5:7d:c4:7b:76:3e:29:79:44:90:46:f4:c8:6f:5a:96:2d: bf:1f:dd:23:db:36:49:04:5c:a4:e1:89:25:d9:ba:a0:29:3a: 18:46:d1:74:73:1e:43:97:55:8c:a4:96:85:27:75:eb:34:98: 53:ba:a4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE RTU0QjA5M0UwHhcNMjUxMTA0MTY1NTQwWhcNMjUxMTExMTY1NTQwWjAYMRYwFAYD VQQDEw02OTBhMzAwZC1iZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtAfgQvOcksgyrLtdpe4hiZ6xyoX1QAha6bq7Ud/3HN9FfLrFwZRJnPpGtGC lQHQfqOHW2sVnBxrbe2tRoxmGhlZ1oJvMRh3zcEArnPAfL2lqgQUhoz2pXScG8wg yel9G/ZQL4Ghawi0rpnzG/tOUGsTxVnSGOh8JB2FvaP6DDzFyGdkhBb2J6rtFmVd fPVpyag2mGrHewK2j+X+tK0noIQoOI1WsPieFK0eLEtwphUb2+DdnAXjRTtMLiZf n9LPfsh/QGoPJfJnsmJzgg0L42Kye2wf4eu8VyGZkkawf4LOKXvGIpZGtG8g3gGK avi1yc6qIOQeLaV5JHU1OoA08wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNidU/HS 9/oyyULmmOiwQUgfpJsXMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFMC81MTU0QTExMDVGRkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVl bUhqc0JyOGtmM3JlVkxDVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCUKgR/dEWINRbvBOyFs66Ia+/Js5ZJZbqF5Zt8KBvQzDvGHVd60sh 2PAs9obkFTgBTnTNbwVF9IahQd4QtH8KnH1/mGUaboSQ9aT+SoQDstbGRHM/CvRt 55gerxQpcsNlWSInCVj73zZWKdnDJYSxCU9INXmdMQT1ccnNVIVY7wnzzuf8Zab9 Jlql/UuRRKVeHFodnHQ48OUgdTdLNttxl5MAiEKuv3N+cNpH8InhKWmle9Z0lyt7 NZ/JCGde2d2TLe5050TT1X3Ee3Y+KXlEkEb0yG9ali2/H90j2zZJBFyk4Ykl2bqg KToYRtF0cx5Dl1WMpJaFJ3XrNJhTuqQ9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:51 2025 by rpki-client