$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: 3DJQInlr+XRgQJflFN2Z+C3ecptHwW/sU3l9Jg01O3M= Subject key identifier: AB:B2:56:AB:2D:1A:77:FD:4D:5F:05:2C:60:27:B9:47:0F:CA:02:78 Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: FB Signing time: Wed 05 Nov 2025 05:20:52 +0000 Manifest this update: Wed 05 Nov 2025 05:20:52 +0000 Manifest next update: Wed 12 Nov 2025 05:20:52 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: 4Qhde2WWVQ8mkqDKuSMKbmm4nmeazPgUocaAs+y+g7o=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: RTDmiAUTa+6e7BNeD1q7cr5hG3t1MJJWblXaDUXHJew=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: ZlBqKGquKmDZSHNnRJSZITSYuAIz8r1LwmFTYmRFcj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Nov 5 05:20:52 2025 GMT Not After : Nov 12 05:20:52 2025 GMT Subject: CN=690adeb4-65ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:27:99:83:38:47:09:58:12:cc:21:c3:6c: 66:97:d0:c0:c1:5d:df:ae:7f:8a:36:c9:fd:3b:b5: af:d9:eb:8b:1c:6e:3f:1d:d1:c2:f8:b7:ed:1f:ec: f3:62:81:ae:44:70:77:64:80:d8:c3:7a:d4:be:1b: 82:a4:bd:17:ab:eb:90:58:cc:af:f6:c6:18:34:3c: 57:36:05:00:f5:11:23:25:9e:ea:c0:ca:9a:13:c3: f5:00:dd:4c:1c:dd:c3:46:38:e0:24:60:11:c7:77: 44:f8:ec:46:ce:ed:98:27:b3:70:5f:2d:18:c9:ed: 80:a4:87:d9:db:e6:64:8c:41:3a:87:b8:03:ac:2a: 21:db:84:5f:1c:af:f0:d8:1d:5f:59:04:93:b6:a3: b7:1d:6e:d1:46:b5:d0:a5:aa:8c:27:89:b0:75:f4: 0b:9c:d3:62:4d:08:9c:57:a3:6f:cc:2b:24:3d:a4: de:c7:07:22:3e:2d:b4:3b:53:02:e8:1b:d3:5c:b0: a9:5d:03:6b:d9:97:61:11:64:f5:a1:e1:7b:70:db: 6a:d5:f9:c5:16:3c:ee:48:0c:48:12:7e:a1:a9:4a: b3:3f:0c:9d:6e:35:aa:6f:cb:ee:f5:14:89:fb:3d: 38:96:7b:8f:45:7e:91:63:bd:e7:6d:21:0c:f9:6c: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:56:AB:2D:1A:77:FD:4D:5F:05:2C:60:27:B9:47:0F:CA:02:78 X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7a:0c:82:ca:8c:44:5c:5d:ed:dc:d5:dc:e5:5d:98:dc:86: 1a:04:12:27:18:0d:e8:15:d0:50:b4:2f:b2:64:8f:62:27:ec: a2:ec:54:e3:67:0b:50:3d:d8:9f:81:b5:5a:13:d5:1c:98:d1: 0e:6c:c9:dc:74:ee:33:c8:c8:dc:6b:d7:db:38:c5:86:4c:86: bd:f7:5e:a0:17:d7:63:d0:f6:9f:f4:02:c0:9b:73:c5:cf:77: 74:a4:bc:af:e7:07:ea:b2:0f:cc:19:67:d7:9f:e2:9a:b3:8e: ec:ad:5c:43:2c:ab:16:c5:31:74:40:b5:63:01:b5:14:f4:42: ba:de:f9:ef:a2:a2:4e:00:81:cc:b0:c8:0e:fa:06:ca:e7:e4: 1c:66:90:01:a3:da:90:72:76:98:46:7d:34:06:6d:1f:fd:58: 1e:54:fc:83:6e:c6:84:8d:c2:d5:76:fd:0e:8e:4d:10:ef:d4: e5:29:8c:3d:86:15:b8:e4:1f:fd:ea:30:07:fa:05:67:52:11: 90:81:01:ab:0c:a6:1d:69:10:7a:d1:8d:22:c9:97:7e:f4:ce: a7:cb:07:d0:63:cf:b2:6a:82:fe:2c:77:b6:b5:b4:91:d7:39: f5:53:4a:e6:84:17:2a:25:7f:9a:57:c9:63:1a:cb:13:26:c8: 24:09:62:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjUxMTA1MDUyMDUyWhcNMjUxMTEyMDUyMDUyWjAYMRYwFAYD VQQDEw02OTBhZGViNC02NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2YnmYM4RwlYEswhw2xml9DAwV3frn+KNsn9O7Wv2euLHG4/HdHC+LftH+zz YoGuRHB3ZIDYw3rUvhuCpL0Xq+uQWMyv9sYYNDxXNgUA9REjJZ7qwMqaE8P1AN1M HN3DRjjgJGARx3dE+OxGzu2YJ7NwXy0Yye2ApIfZ2+ZkjEE6h7gDrCoh24RfHK/w 2B1fWQSTtqO3HW7RRrXQpaqMJ4mwdfQLnNNiTQicV6NvzCskPaTexwciPi20O1MC 6BvTXLCpXQNr2ZdhEWT1oeF7cNtq1fnFFjzuSAxIEn6hqUqzPwydbjWqb8vu9RSJ +z04lnuPRX6RY73nbSEM+Ww0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuyVqst Gnf9TV8FLGAnuUcPygJ4MB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjegyCyoxEXF3t3NXc5V2Y3IYaBBInGA3oFdBQtC+yZI9iJ+yi7FTj ZwtQPdifgbVaE9UcmNEObMncdO4zyMjca9fbOMWGTIa9916gF9dj0Paf9ALAm3PF z3d0pLyv5wfqsg/MGWfXn+Kas47srVxDLKsWxTF0QLVjAbUU9EK63vnvoqJOAIHM sMgO+gbK5+QcZpABo9qQcnaYRn00Bm0f/VgeVPyDbsaEjcLVdv0Ojk0Q79TlKYw9 hhW45B/96jAH+gVnUhGQgQGrDKYdaRB60Y0iyZd+9M6nywfQY8+yaoL+LHe2tbSR 1zn1U0rmhBcqJX+aV8ljGssTJsgkCWLb -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:10 2025 by rpki-client