$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json) Hash identifier: wDvBzy4fYKeq/N5Ub2K0Byk+f1Cb9EaDN+/dj1Cid9k= Subject key identifier: 5F:87:B3:E8:2A:8F:70:E2:AD:B9:0A:14:53:54:D2:8F:C2:BB:99:2F Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 0977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft Manifest number: 0962 Signing time: Sun 02 Nov 2025 20:06:36 +0000 Manifest this update: Sun 02 Nov 2025 20:06:36 +0000 Manifest next update: Sun 09 Nov 2025 20:06:36 +0000 Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: 9mOEVodsI4OoieOunmm1HrkofSELryabRIx5XhCjBAU=) 2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: p54CFofowbUbktzQ5l2cM2w3M6idGp06vDW+Qt3EoTM=) 3: B350B67E964611EDA10D8777C4F9AE02.roa (hash: dqgw7Vjah1kgl1Eb2Qsi3T+K4Ggh+1iUdEI4VBpnCIA=) 4: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: 69e6c/vHo1P1XZkYWN+UCZupbdC0oSmCyhIpttIVtDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Nov 2 20:06:36 2025 GMT Not After : Nov 9 20:06:36 2025 GMT Subject: CN=6907b9cc-410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:5d:5b:14:71:95:41:e5:44:07:10:81:52: d5:3e:50:e2:ea:5c:94:77:89:64:bd:bd:61:49:ee: 45:1f:75:95:f7:14:08:6d:63:20:b9:94:c4:c1:08: 6c:f7:18:5c:c6:00:a8:b5:94:cc:24:52:cc:62:35: 18:ba:97:c0:ca:8a:87:c8:8a:70:e1:37:f3:2a:a4: 5a:69:0e:32:d0:29:7b:44:90:24:1d:95:27:00:b4: 18:d4:de:38:14:ab:3e:f2:5b:0a:aa:96:de:74:c5: ba:03:85:5e:fc:43:aa:20:5b:5c:4f:0e:17:c6:0b: 62:1f:cf:a5:f5:ac:d7:a1:21:d1:aa:2b:82:90:39: d4:f9:79:9d:81:fe:ff:fe:6d:cb:8c:a0:de:80:1b: 0c:3f:f4:85:b7:a2:64:45:00:62:41:50:19:0e:8f: fb:79:c5:b7:34:47:75:37:85:4f:6c:83:62:f2:3a: ca:86:c9:df:65:d9:25:95:5a:bc:ca:8d:76:96:29: 6b:67:4f:57:56:81:23:c2:f5:b9:db:30:d0:cd:96: 6a:2f:e9:44:97:a0:b6:d5:13:49:50:7e:e1:12:d8: ed:6e:8b:44:e0:cf:2f:fa:95:8d:6b:93:78:16:82: 22:f0:89:a7:ac:d9:77:ed:d2:a9:6d:83:e5:02:c9: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:B3:E8:2A:8F:70:E2:AD:B9:0A:14:53:54:D2:8F:C2:BB:99:2F X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bd:9e:3e:08:a5:0c:70:80:8c:e1:24:ad:1b:7c:27:3f:b0: 30:98:40:58:de:57:24:67:84:28:47:0a:1b:0e:cd:6f:0c:e1: d4:bb:e0:39:6e:37:7b:ac:e7:fd:e6:fe:92:39:f4:1b:14:2e: 16:19:ed:ef:22:2a:96:be:6d:84:1c:85:86:b2:20:32:de:dd: 51:1f:b8:91:99:22:58:ef:fe:8d:f1:21:91:10:63:27:13:ac: f4:a8:2e:fd:25:bc:72:fd:00:98:64:ae:f3:48:e7:c1:36:6c: cc:c7:7b:04:ce:c2:38:1f:50:b8:7e:2b:e3:90:74:1c:0a:b4: 2b:1a:9b:8a:0c:c0:79:1f:19:78:a2:c8:28:d5:32:b9:67:71: 6f:90:fe:74:7b:05:08:d1:a1:04:f9:a5:17:87:20:0c:e3:d6: 44:48:47:df:70:37:42:e2:a0:c0:26:3b:f7:6b:da:0e:16:05: 54:91:d4:1a:45:9c:73:0b:18:bc:f0:a6:ad:7a:b0:e7:bc:7d: 92:6d:d8:bd:77:b8:0e:6d:4a:de:c3:a8:d7:8c:02:e8:dc:4d: a7:15:81:6f:96:60:41:7c:e5:37:2d:29:33:5a:00:b1:bc:ed: e1:76:a7:0e:c4:20:5b:c6:2e:3b:2c:e9:f8:e0:04:ac:b9:eb: c5:7f:9c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjUxMTAyMjAwNjM2WhcNMjUxMTA5MjAwNjM2WjAYMRYwFAYD VQQDEw02OTA3YjljYy00MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmFdWxRxlUHlRAcQgVLVPlDi6lyUd4lkvb1hSe5FH3WV9xQIbWMguZTEwQhs 9xhcxgCotZTMJFLMYjUYupfAyoqHyIpw4TfzKqRaaQ4y0Cl7RJAkHZUnALQY1N44 FKs+8lsKqpbedMW6A4Ve/EOqIFtcTw4XxgtiH8+l9azXoSHRqiuCkDnU+Xmdgf7/ /m3LjKDegBsMP/SFt6JkRQBiQVAZDo/7ecW3NEd1N4VPbINi8jrKhsnfZdkllVq8 yo12lilrZ09XVoEjwvW52zDQzZZqL+lEl6C21RNJUH7hEtjtbotE4M8v+pWNa5N4 FoIi8ImnrNl37dKpbYPlAslknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Hs+gq j3DirbkKFFNU0o/Cu5kvMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALvZ4+CKUMcICM4SStG3wnP7AwmEBY3lckZ4QoRwobDs1vDOHUu+A5 bjd7rOf95v6SOfQbFC4WGe3vIiqWvm2EHIWGsiAy3t1RH7iRmSJY7/6N8SGREGMn E6z0qC79Jbxy/QCYZK7zSOfBNmzMx3sEzsI4H1C4fivjkHQcCrQrGpuKDMB5Hxl4 osgo1TK5Z3FvkP50ewUI0aEE+aUXhyAM49ZESEffcDdC4qDAJjv3a9oOFgVUkdQa RZxzCxi88KaterDnvH2Sbdi9d7gObUrew6jXjALo3E2nFYFvlmBBfOU3LSkzWgCx vO3hdqcOxCBbxi47LOn44ASsuevFf5yV -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:52 2025 by rpki-client