$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: aV1ifRu/KeDDBDCB322PgoXnq3Ee2AGrVc/+nZY5l0w= Subject key identifier: 2E:39:84:2A:BE:5A:4D:D3:16:E6:65:CE:9C:36:3D:94:8A:E8:FC:30 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 19CA Signing time: Sun 02 Nov 2025 17:34:09 +0000 Manifest this update: Sun 02 Nov 2025 17:34:09 +0000 Manifest next update: Sun 09 Nov 2025 17:34:09 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: DrEyx4V4c3lt3aEInkk5CEiC9vZ2tG++FuQzJVcO3Cg=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Nov 2 17:34:09 2025 GMT Not After : Nov 9 17:34:09 2025 GMT Subject: CN=69079611-bcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:2b:d8:5c:83:26:f0:7e:06:c8:2c:b6:a9: b6:65:fc:59:17:89:8a:45:4d:a4:e0:12:6a:ad:1d: d0:60:9f:91:b7:d5:8e:62:2f:d5:78:9b:c3:8b:c8: fa:8f:9f:51:55:64:86:2b:22:01:90:68:1b:73:b0: f2:6b:b2:83:b6:9f:43:80:54:c3:73:82:de:76:c1: 82:ed:c2:79:ce:a0:1b:fe:d8:7d:c3:da:2c:40:e2: e3:63:b6:d4:56:ff:67:f1:51:e7:c5:c0:e1:e1:a6: 87:d4:b1:21:51:0d:34:30:63:28:bd:09:7c:03:0b: 46:0d:8d:bd:6e:5e:3b:fe:81:76:ea:65:1a:65:25: 93:a5:11:bd:45:58:11:c2:eb:a3:ac:3b:a7:72:80: 2c:3e:eb:66:b1:ae:fd:ce:6f:48:fb:fb:8e:16:ff: c2:d6:73:e3:f1:26:86:bb:64:6c:f7:9e:6a:0b:72: 07:44:fb:60:35:86:eb:20:98:e0:94:c7:c6:30:d0: 7f:7b:a5:78:99:63:da:b1:ac:64:a1:05:00:72:fc: 3c:bc:b9:db:22:96:68:48:f6:43:44:31:34:d7:53: b2:a7:b9:65:c5:9c:00:f3:12:b8:d7:b9:79:1b:3a: 84:d7:f4:5c:e3:28:a5:63:90:36:b0:ce:2b:3b:53: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:39:84:2A:BE:5A:4D:D3:16:E6:65:CE:9C:36:3D:94:8A:E8:FC:30 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:49:66:81:b4:3c:c6:80:24:2f:3c:44:c9:73:01:7c:71: e9:f2:f4:c6:f8:7a:f8:d6:c6:64:f1:d1:3c:23:7e:2d:25:a0: d3:cd:83:c1:85:7b:42:b6:ab:eb:f4:ed:2a:b7:82:f6:03:bf: cd:dd:10:d5:44:f0:6a:96:4f:ef:c4:02:79:a2:99:e4:fc:0c: 24:bb:e5:53:87:53:b7:74:61:51:cd:6f:f2:74:3d:40:a3:7f: e0:c2:e9:fc:9a:8a:84:44:11:9e:fe:b3:8b:82:57:2b:72:dc: a3:7b:9b:7f:f9:d7:25:84:0e:ab:4d:5a:58:7c:e2:fe:b8:e1: b3:6b:41:e5:f4:58:85:54:6f:8e:04:a4:be:4b:0d:59:75:4d: d4:09:61:9e:3d:18:ee:f0:9f:e0:1e:fd:37:6f:9b:6c:39:31: 67:11:bd:29:7e:fb:92:13:9b:93:7c:7f:c6:5c:e6:c2:ed:a6: eb:51:19:3f:6d:2a:b6:2d:0d:7d:75:5a:21:45:00:a1:3d:0c: 2b:38:52:20:4f:83:ed:2c:b4:82:27:c0:8d:e4:a9:12:82:01: 43:d1:2b:2a:e3:4e:d4:1c:12:9e:9f:24:bf:8f:b9:7d:aa:ff: 65:02:15:97:ad:8e:39:4d:ce:5c:4b:1e:ca:14:24:92:a3:7b: 90:de:35:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUxMTAyMTczNDA5WhcNMjUxMTA5MTczNDA5WjAYMRYwFAYD VQQDEw02OTA3OTYxMS1iY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFQr2FyDJvB+Bsgstqm2ZfxZF4mKRU2k4BJqrR3QYJ+Rt9WOYi/VeJvDi8j6 j59RVWSGKyIBkGgbc7Dya7KDtp9DgFTDc4LedsGC7cJ5zqAb/th9w9osQOLjY7bU Vv9n8VHnxcDh4aaH1LEhUQ00MGMovQl8AwtGDY29bl47/oF26mUaZSWTpRG9RVgR wuujrDuncoAsPutmsa79zm9I+/uOFv/C1nPj8SaGu2Rs955qC3IHRPtgNYbrIJjg lMfGMNB/e6V4mWPasaxkoQUAcvw8vLnbIpZoSPZDRDE011Oyp7llxZwA8xK417l5 GzqE1/Rc4yilY5A2sM4rO1PVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC45hCq+ Wk3TFuZlzpw2PZSK6PwwMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/ElmgbQ8xoAkLzxEyXMBfHHp8vTG+Hr41sZk8dE8I34tJaDTzYPB hXtCtqvr9O0qt4L2A7/N3RDVRPBqlk/vxAJ5opnk/Awku+VTh1O3dGFRzW/ydD1A o3/gwun8moqERBGe/rOLglcrctyje5t/+dclhA6rTVpYfOL+uOGza0Hl9FiFVG+O BKS+Sw1ZdU3UCWGePRju8J/gHv03b5tsOTFnEb0pfvuSE5uTfH/GXObC7abrURk/ bSq2LQ19dVohRQChPQwrOFIgT4PtLLSCJ8CN5KkSggFD0Ssq407UHBKenyS/j7l9 qv9lAhWXrY45Tc5cSx7KFCSSo3uQ3jXM -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:05 2025 by rpki-client