$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: /U8hcWuCwJz8tUzJzn/+ay8cLwgVbU+nELxZS7ehf98= Subject key identifier: 66:15:5B:38:11:D4:D9:51:5F:4B:60:FA:AD:49:B7:52:12:02:03:16 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 39 Signing time: Wed 05 Nov 2025 07:48:16 +0000 Manifest this update: Wed 05 Nov 2025 07:48:15 +0000 Manifest next update: Wed 12 Nov 2025 07:48:15 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: OrMzAqogDtZ60tzqH7H1HwdeQ4zPEdBZyedErV/Rtv8=) 2: 02272F2E896711F0B42EC968C4F9AE02.roa (hash: rm/ey7rx0cPi5GCGr0/kJPWz5Y07ETlHSyUfOYZc1xo=) 3: F060118A896511F085932767C4F9AE02.roa (hash: NflGB5cG6iDGEXLAgTMkx8GjKVI5zeUepUeNC6PCvow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Nov 5 07:48:15 2025 GMT Not After : Nov 12 07:48:15 2025 GMT Subject: CN=690b0140-9f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:3e:e1:f6:e0:5e:f8:93:b8:8f:9b:f8:63: 19:2d:1a:64:80:4c:14:1c:13:0d:5e:04:2f:d9:13: 32:da:9f:a4:be:ef:f6:e0:1a:a4:cb:59:f7:53:17: 17:36:c6:07:8c:43:71:29:9b:12:35:d0:17:97:30: 53:1a:d3:d1:92:89:7a:b7:c4:10:4c:fa:aa:8c:fb: a8:0f:cb:54:8d:64:53:06:ce:81:92:bd:42:4d:40: cd:f8:7f:5a:45:c3:0e:eb:7e:6f:ff:50:6a:cb:f9: e9:ff:3f:5f:8a:95:7a:7c:df:79:be:4a:7d:7a:c8: de:e7:4e:0e:3e:09:d9:54:a7:fc:50:cb:c3:d4:03: 2f:08:b6:27:0c:16:64:6b:57:4f:be:0f:39:4d:2f: 68:d3:b2:08:c0:30:5a:e5:e3:d9:5f:8c:b5:c8:00: ac:7a:b0:bf:a0:46:ff:94:7a:ec:8f:11:19:7c:39: 82:7d:1a:f4:1b:c2:8a:bd:30:40:4a:c5:20:ff:c1: fd:ce:75:81:93:a5:99:5a:19:76:67:fb:16:9f:4e: 9f:2a:f1:c9:d6:66:77:fe:b9:03:03:bb:29:29:14: 89:9b:73:ff:08:9a:e4:09:b4:3c:75:ee:8e:88:41: 2d:b3:45:55:ef:75:d3:b5:e6:77:77:15:6b:6e:6b: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:15:5B:38:11:D4:D9:51:5F:4B:60:FA:AD:49:B7:52:12:02:03:16 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ec:cc:f7:ee:9a:1a:49:d6:e4:c1:cb:ff:15:4b:43:2f:1f: 9b:ca:95:11:76:25:05:fe:0a:6f:34:b2:3d:72:69:40:42:70: 30:66:48:90:5f:b2:a1:4b:a3:db:af:bc:c7:67:76:d6:5d:36: e9:71:42:df:83:13:99:db:30:b6:37:53:8a:9b:5d:aa:e9:de: 57:ff:45:db:f7:82:c1:4d:5a:14:31:09:fb:f5:0c:e6:79:67: 55:17:76:9c:dc:0f:16:5f:a1:76:b8:f6:a5:42:d4:f9:17:bf: e6:9e:18:4a:64:3a:d5:0f:64:bf:49:ad:a0:31:88:7a:7f:e4: 01:7a:ca:02:31:a0:28:e0:26:46:b9:26:86:47:53:6c:23:82: bc:f2:7d:86:c9:16:d7:94:d5:cd:dc:30:9b:6d:d1:34:cd:49: 50:ac:5c:9d:11:13:71:e1:d8:0f:47:02:64:c0:c7:34:ac:b9: 79:60:04:8f:23:cf:87:38:49:38:98:61:a4:51:49:df:27:5b: 72:5f:7a:b0:92:88:f3:06:ac:e4:cd:f1:14:f4:f7:cc:53:eb: e7:51:34:ff:2b:fc:b1:11:eb:36:e8:a9:ec:b9:e6:f6:ee:7e: db:2c:19:ff:af:ee:f0:fa:8e:8f:da:97:0b:0f:f4:c9:ac:1f: 80:5e:76:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTExMDUwNzQ4MTVaFw0yNTExMTIwNzQ4MTVaMBgxFjAUBgNV BAMTDTY5MGIwMTQwLTlmOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzMT7h9uBe+JO4j5v4YxktGmSATBQcEw1eBC/ZEzLan6S+7/bgGqTLWfdTFxc2 xgeMQ3EpmxI10BeXMFMa09GSiXq3xBBM+qqM+6gPy1SNZFMGzoGSvUJNQM34f1pF ww7rfm//UGrL+en/P1+KlXp833m+Sn16yN7nTg4+CdlUp/xQy8PUAy8IticMFmRr V0++DzlNL2jTsgjAMFrl49lfjLXIAKx6sL+gRv+UeuyPERl8OYJ9GvQbwoq9MEBK xSD/wf3OdYGTpZlaGXZn+xafTp8q8cnWZnf+uQMDuykpFImbc/8ImuQJtDx17o6I QS2zRVXvddO15nd3FWtua3TdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZhVbOBHU 2VFfS2D6rUm3UhICAxYwHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPszPfumhpJ1uTBy/8VS0MvH5vKlRF2JQX+Cm80sj1yaUBCcDBmSJBf sqFLo9uvvMdndtZdNulxQt+DE5nbMLY3U4qbXarp3lf/Rdv3gsFNWhQxCfv1DOZ5 Z1UXdpzcDxZfoXa49qVC1PkXv+aeGEpkOtUPZL9JraAxiHp/5AF6ygIxoCjgJka5 JoZHU2wjgrzyfYbJFteU1c3cMJtt0TTNSVCsXJ0RE3Hh2A9HAmTAxzSsuXlgBI8j z4c4STiYYaRRSd8nW3JferCSiPMGrOTN8RT098xT6+dRNP8r/LER6zboqey55vbu ftssGf+v7vD6jo/alwsP9MmsH4Bedhk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:07 2025 by rpki-client