$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json) Hash identifier: kziNnDoPww1dqGTXvVY/MM74AyyZpaO1AwDSeNEc07Q= Subject key identifier: A9:A9:F2:04:64:D1:2F:D5:77:8D:D4:06:2D:2E:35:9C:EB:ED:AE:40 Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft Manifest number: 04B0 Signing time: Mon 03 Nov 2025 00:14:42 +0000 Manifest this update: Mon 03 Nov 2025 00:14:41 +0000 Manifest next update: Mon 10 Nov 2025 00:14:41 +0000 Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: 2surWs2h5C5NJ8R+YcAxOMXMpT9KQJAGvkR3wDFHTNQ=) 2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: Cd7XZiHe1qVaHcpx6zxYlqRsLTSHLcGFR7Jjk7pxmLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Validity Not Before: Nov 3 00:14:41 2025 GMT Not After : Nov 10 00:14:41 2025 GMT Subject: CN=6907f3f2-2b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:11:9f:b4:10:04:f5:50:8c:2b:70:5d:7b: ec:e7:07:85:5e:b0:67:49:24:8e:de:b4:bc:4d:86: b2:4d:52:ea:48:9b:2f:0d:56:3d:cd:67:9c:be:9f: 16:79:a0:d9:2f:59:dc:f0:4e:3b:eb:cd:6a:18:e5: 0a:df:18:fd:e7:20:44:5c:06:4e:07:91:52:70:c1: c9:55:77:a3:ab:7a:22:5e:22:ce:ce:de:85:55:a2: 3e:23:7d:cc:65:7c:f9:a8:52:da:d2:94:86:e8:cf: 1f:e2:f0:f7:1a:84:5d:7d:e9:a6:0c:65:e2:70:0a: 68:52:8a:79:10:a6:3f:86:9d:d1:5e:12:d9:c4:d7: ba:e6:81:7a:2c:9c:df:e5:87:f2:3f:60:99:bf:9b: 6c:9d:2e:9d:df:11:50:02:0a:65:53:8e:93:5b:8e: 33:9d:d2:a8:3f:3f:5a:c7:36:d9:c7:04:8d:a1:47: 6d:a7:9a:a4:80:ba:13:18:f8:1e:fb:47:8e:8d:f1: 6d:32:70:b9:fe:50:ca:87:a0:eb:ea:e0:63:9b:6c: 0e:fb:77:e8:62:fa:5c:d7:8a:ff:08:4f:df:16:0e: f1:5a:50:b1:99:aa:72:3d:69:2e:7f:56:69:86:97: 4e:8a:2a:55:b1:bd:a4:0d:dc:75:3d:75:de:e3:79: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A9:F2:04:64:D1:2F:D5:77:8D:D4:06:2D:2E:35:9C:EB:ED:AE:40 X509v3 Authority Key Identifier: keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:f2:8f:1e:72:32:f4:f6:1b:c2:a0:4b:79:98:7d:05:71:53: 33:44:4a:8e:19:23:3b:bd:7b:c7:15:01:83:d5:94:64:91:3d: f0:e6:91:90:66:52:79:99:52:18:b4:d3:71:9c:60:94:4d:59: b4:88:4e:f0:8f:d5:4d:ee:84:50:f8:ff:94:44:28:bf:c6:b4: 78:13:27:e9:39:c1:ab:3b:50:2c:de:5e:4a:79:77:2a:96:0a: 39:0e:4e:f7:cf:a5:1f:63:75:df:1a:f2:32:b7:66:ce:a3:a8: 8e:90:7b:57:d5:6b:d3:f5:f0:c0:71:ce:ff:60:af:5b:b4:90: 72:e0:eb:b9:40:f7:b6:4d:4a:41:dd:ff:9d:23:ea:5c:fd:23: 2b:23:24:c8:02:f6:6a:40:d9:bd:31:24:f5:06:3b:db:00:16: 7d:1f:27:1c:c3:be:e4:da:56:b4:61:b8:50:69:70:0f:bc:6e: e9:3c:22:f1:98:f4:b1:3e:77:a1:10:93:c0:a1:9a:68:1c:4f: 10:68:7d:71:08:21:60:ed:a2:ee:cd:bd:1f:17:9e:41:a9:e0: dd:fb:7b:a6:dc:3e:e5:cd:3b:1d:e9:28:ee:25:2d:e4:28:7c: 93:e3:db:e6:51:ad:c6:06:74:59:e4:a0:72:34:ba:66:79:02: c9:a8:84:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1 NTgwRUUwMzEwHhcNMjUxMTAzMDAxNDQxWhcNMjUxMTEwMDAxNDQxWjAYMRYwFAYD VQQDEw02OTA3ZjNmMi0yYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlp4Rn7QQBPVQjCtwXXvs5weFXrBnSSSO3rS8TYayTVLqSJsvDVY9zWecvp8W eaDZL1nc8E47681qGOUK3xj95yBEXAZOB5FScMHJVXejq3oiXiLOzt6FVaI+I33M ZXz5qFLa0pSG6M8f4vD3GoRdfemmDGXicApoUop5EKY/hp3RXhLZxNe65oF6LJzf 5YfyP2CZv5tsnS6d3xFQAgplU46TW44zndKoPz9axzbZxwSNoUdtp5qkgLoTGPge +0eOjfFtMnC5/lDKh6Dr6uBjm2wO+3foYvpc14r/CE/fFg7xWlCxmapyPWkuf1Zp hpdOiipVsb2kDdx1PXXe43nv4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmp8gRk 0S/Vd43UBi0uNZzr7a5AMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080 REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDlFNi9CNjE2Qzg2QTRGNzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2 NFJLLXhUV2NNY2xWZ080REUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR8o8ecjL09hvCoEt5mH0FcVMzREqOGSM7vXvHFQGD1ZRkkT3w5pGQ ZlJ5mVIYtNNxnGCUTVm0iE7wj9VN7oRQ+P+URCi/xrR4EyfpOcGrO1As3l5KeXcq lgo5Dk73z6UfY3XfGvIyt2bOo6iOkHtX1WvT9fDAcc7/YK9btJBy4Ou5QPe2TUpB 3f+dI+pc/SMrIyTIAvZqQNm9MST1BjvbABZ9Hyccw77k2la0YbhQaXAPvG7pPCLx mPSxPnehEJPAoZpoHE8QaH1xCCFg7aLuzb0fF55BqeDd+3um3D7lzTsd6SjuJS3k KHyT49vmUa3GBnRZ5KByNLpmeQLJqISs -----END CERTIFICATE-----Generated at Tue Nov 4 08:15:43 2025 by rpki-client