$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: q4/pdyGbZbzA3bWeBXezAXd6hsDhzB7z1J1B0uklzEc= Subject key identifier: 62:40:0C:FF:D5:6D:8E:07:06:82:E3:9F:54:12:D4:FD:21:92:7C:95 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 113D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0EEC Signing time: Tue 04 Nov 2025 08:38:05 +0000 Manifest this update: Tue 04 Nov 2025 08:38:04 +0000 Manifest next update: Tue 11 Nov 2025 08:38:04 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: Bgqk6od0O7GW1J3eFqO6QcoZxeGBeh7N6AYiv6uABEA=) 2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 3: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 4: 67B5F45CB94511F0837A1770C4F9AE02.roa (hash: IxfNgcZ/mX0x/ECOFa3alcqlaRt5+wlX2T++4t+A17g=) 5: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 08:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4413 (0x113d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Nov 4 08:38:04 2025 GMT Not After : Nov 11 08:38:04 2025 GMT Subject: CN=6909bb6c-604e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:e1:f8:1c:5b:3f:f8:84:d1:1e:3f:d5:fc: 9d:54:e1:cb:92:e5:71:f7:ce:42:6c:c6:c5:93:95: 68:8b:82:f9:d7:69:4a:bd:86:c3:49:99:3f:8e:c5: 22:d2:31:b9:3a:83:3b:fe:33:55:74:98:ea:16:46: 0c:5d:f4:a0:ea:bf:0c:f2:87:e7:2f:4a:9d:2d:2b: 39:56:42:43:9c:26:44:6b:09:15:66:37:fe:50:56: 42:29:c4:94:dd:10:ec:12:3c:d7:f1:4c:19:27:93: ed:2f:4a:83:e6:98:39:0c:df:be:b9:b0:e2:94:e9: 91:7a:41:43:a6:ea:9d:45:cf:2b:94:f8:54:fb:fa: 26:0e:73:7f:14:6c:e7:3d:96:fd:dd:01:c4:2d:34: a9:f3:29:e8:0b:48:ee:4b:e1:13:b3:b1:e0:60:15: 89:0f:76:98:3f:03:7c:51:0d:fd:4a:4c:4a:58:83: cc:89:1e:14:69:e8:d1:fa:74:97:fb:36:23:16:0c: b0:fb:e7:96:ea:23:09:df:e1:50:dc:4d:7a:3c:6c: 7a:38:8d:57:4f:8a:14:92:c5:36:e9:65:ae:a0:ad: dd:dc:4b:79:9e:9e:2a:b7:2f:76:85:24:69:58:a4: d9:6d:9a:ef:b2:67:53:53:f7:b9:47:b8:a9:db:81: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:0C:FF:D5:6D:8E:07:06:82:E3:9F:54:12:D4:FD:21:92:7C:95 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:dd:e8:a5:09:42:67:70:58:9f:36:d9:55:c7:32:c1:9b: 16:68:96:02:29:7a:91:68:d9:41:f1:f9:28:4b:65:80:38:57: a0:24:53:12:cb:40:d8:6a:1e:39:6f:e2:55:f3:69:ab:16:f3: 88:77:32:ec:82:38:6b:cf:98:94:bb:18:81:22:ac:b3:3c:6f: f7:9b:f4:9e:dc:a8:1c:e4:0c:16:43:be:d1:46:f0:ae:4f:aa: 39:c4:2e:07:14:b8:c9:26:85:af:f1:f4:62:d0:17:08:c4:04: 48:6a:f3:10:16:84:34:85:ad:9b:4e:54:6d:dd:1a:84:ca:05: cc:77:19:d7:93:d3:b2:fe:17:76:d3:28:d7:1e:75:bb:b2:43: 74:51:b5:5b:19:e3:50:33:1b:15:5e:69:b5:c2:8c:f7:37:50: 3a:36:20:e2:28:0f:9f:c1:9b:11:db:94:e3:6a:dd:aa:61:23: 45:d2:8e:a1:05:f2:5d:a9:73:8a:4e:f9:df:7b:80:0e:8d:64: 82:18:f4:b2:4e:a2:4f:55:ca:b9:39:40:d2:3e:7d:e2:c6:29: 5f:ac:05:ae:c9:55:39:4f:1f:b7:3d:52:70:3e:37:57:13:1d: 34:b1:81:9d:c5:81:55:7a:d9:67:2e:8f:de:a2:a2:e4:19:d8: f2:95:e7:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICET0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUxMTA0MDgzODA0WhcNMjUxMTExMDgzODA0WjAYMRYwFAYD VQQDEw02OTA5YmI2Yy02MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrvh+BxbP/iE0R4/1fydVOHLkuVx985CbMbFk5Voi4L512lKvYbDSZk/jsUi 0jG5OoM7/jNVdJjqFkYMXfSg6r8M8ofnL0qdLSs5VkJDnCZEawkVZjf+UFZCKcSU 3RDsEjzX8UwZJ5PtL0qD5pg5DN++ubDilOmRekFDpuqdRc8rlPhU+/omDnN/FGzn PZb93QHELTSp8ynoC0juS+ETs7HgYBWJD3aYPwN8UQ39SkxKWIPMiR4UaejR+nSX +zYjFgyw++eW6iMJ3+FQ3E16PGx6OI1XT4oUksU26WWuoK3d3Et5np4qty92hSRp WKTZbZrvsmdTU/e5R7ip24F5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJADP/V bY4HBoLjn1QS1P0hknyVMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+dt3opQlCZ3BYnzbZVccywZsWaJYCKXqRaNlB8fkoS2WAOFegJFMS y0DYah45b+JV82mrFvOIdzLsgjhrz5iUuxiBIqyzPG/3m/Se3Kgc5AwWQ77RRvCu T6o5xC4HFLjJJoWv8fRi0BcIxARIavMQFoQ0ha2bTlRt3RqEygXMdxnXk9Oy/hd2 0yjXHnW7skN0UbVbGeNQMxsVXmm1woz3N1A6NiDiKA+fwZsR25Tjat2qYSNF0o6h BfJdqXOKTvnfe4AOjWSCGPSyTqJPVcq5OUDSPn3ixilfrAWuyVU5Tx+3PVJwPjdX Ex00sYGdxYFVetlnLo/eoqLkGdjylech -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:54 2025 by rpki-client