$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: zKrQyPpH/+d1GiDE0Gkx+V34r3Ek4aDjLOh2tYAjbDQ= Subject key identifier: 1D:0B:7A:7A:66:6C:73:21:B5:3B:4C:64:7D:D1:4E:68:52:EE:92:E1 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 1466 Signing time: Sun 02 Nov 2025 18:33:50 +0000 Manifest this update: Sun 02 Nov 2025 18:33:50 +0000 Manifest next update: Sun 09 Nov 2025 18:33:50 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: mUxpMIvT57Bv7nun8eX+uOzB9bfhSXb9LnWoLvtbFyE=) 2: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: k142c1mhkeL45x3p2n9As909+kYuHAEo9TNndwZMKuc=) 3: 81A55E3629E711F08823E620C4F9AE02.roa (hash: hX5dpHGXTGcDiyEWkvOCWSK7VdcIwU2X7lTjxGfS0x8=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: LHvxfj3VCNmuKnrLv2NsZrToWYHoHHWWd+F8Qkfp44A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Nov 2 18:33:50 2025 GMT Not After : Nov 9 18:33:50 2025 GMT Subject: CN=6907a40e-b6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:c1:54:ce:b4:70:87:a3:85:67:09:3e:46: 95:c7:a4:99:3a:16:16:6f:4e:98:0c:e3:32:96:21: 55:3b:97:e3:4c:75:83:6c:be:42:21:4b:c6:8c:d7: 0e:9e:4d:71:42:73:6e:73:30:ae:b1:37:1d:10:41: 4f:c2:63:46:2d:6c:93:d6:e2:b8:dd:ed:8e:53:a5: df:d8:67:83:5c:38:7e:3e:04:67:f1:ec:5a:a1:71: d9:61:3b:8a:52:d5:93:2d:f7:b3:0b:f5:81:f3:e3: dc:ef:1a:8d:8d:9c:fe:c8:43:ff:fe:b8:dd:62:95: 46:08:8a:8c:1d:99:33:92:61:03:f3:59:7f:be:6d: 23:e9:0f:ee:78:0b:43:d4:d1:b1:94:87:13:32:5f: a8:f8:3b:f2:54:92:63:20:04:f0:f5:4d:7c:03:62: 50:bb:6a:49:cf:72:c2:ec:e1:bf:be:81:b4:23:87: 40:af:2b:50:8d:ce:a9:66:e2:96:3d:9a:f2:48:0d: ee:3f:64:a4:21:bb:f8:45:bf:9b:b8:8f:04:d9:e2: f1:b8:5b:72:d6:ce:43:e7:13:f9:f0:86:1c:24:ea: f1:aa:4b:2b:77:1a:01:c4:d4:a1:8e:67:8d:c3:d9: 7c:c4:6f:b1:a4:8b:2d:56:6a:37:38:7b:76:5c:1d: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:7A:7A:66:6C:73:21:B5:3B:4C:64:7D:D1:4E:68:52:EE:92:E1 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:21:d6:50:ed:3a:f9:70:a4:8d:37:32:a7:35:9e:80:a0:d9: 4f:ac:09:02:d7:0a:6a:5b:7b:3a:3e:12:a6:ec:50:a3:b2:a8: 87:43:d6:71:06:d1:5d:23:fc:2a:36:17:52:9d:b3:0b:2d:eb: 2c:a6:a7:75:d0:2d:42:54:d9:84:88:55:80:ad:c0:19:6b:49: 6a:27:9d:db:af:1b:39:40:94:97:27:f0:35:d5:09:b3:28:f3: 9d:bd:40:0a:6d:6b:68:8b:be:d7:fb:1c:d9:7d:ba:93:4d:56: 09:8f:32:dd:22:8d:77:b6:75:7e:7b:cc:2b:46:68:be:fc:6b: c6:55:46:f8:fb:7e:b7:83:4b:c9:91:b1:4a:47:a1:b3:3a:0a: 3d:e0:c8:ff:18:50:bd:2d:3e:ba:68:e6:b4:9b:95:ff:73:3d: 8c:34:93:ca:57:ba:93:9e:e8:ac:2b:df:4f:60:80:89:5a:81: 06:32:26:cd:99:c0:47:2a:ee:71:b8:3e:c1:b1:c1:12:d6:12: 28:79:10:f2:8a:9e:c3:95:c9:b6:c1:54:2c:f6:ef:14:9b:fa: 1c:b2:a3:9d:12:e0:70:05:20:c7:34:97:a7:d7:6d:4f:a6:e3: 98:10:a7:b6:d5:01:78:d8:75:1d:37:06:29:55:a7:25:05:53: 11:5c:34:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUxMTAyMTgzMzUwWhcNMjUxMTA5MTgzMzUwWjAYMRYwFAYD VQQDEw02OTA3YTQwZS1iNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybDBVM60cIejhWcJPkaVx6SZOhYWb06YDOMyliFVO5fjTHWDbL5CIUvGjNcO nk1xQnNuczCusTcdEEFPwmNGLWyT1uK43e2OU6Xf2GeDXDh+PgRn8exaoXHZYTuK UtWTLfezC/WB8+Pc7xqNjZz+yEP//rjdYpVGCIqMHZkzkmED81l/vm0j6Q/ueAtD 1NGxlIcTMl+o+DvyVJJjIATw9U18A2JQu2pJz3LC7OG/voG0I4dArytQjc6pZuKW PZrySA3uP2SkIbv4Rb+buI8E2eLxuFty1s5D5xP58IYcJOrxqksrdxoBxNShjmeN w9l8xG+xpIstVmo3OHt2XB3jBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0Lenpm bHMhtTtMZH3RTmhS7pLhMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDIdZQ7Tr5cKSNNzKnNZ6AoNlPrAkC1wpqW3s6PhKm7FCjsqiHQ9Zx BtFdI/wqNhdSnbMLLesspqd10C1CVNmEiFWArcAZa0lqJ53brxs5QJSXJ/A11Qmz KPOdvUAKbWtoi77X+xzZfbqTTVYJjzLdIo13tnV+e8wrRmi+/GvGVUb4+363g0vJ kbFKR6GzOgo94Mj/GFC9LT66aOa0m5X/cz2MNJPKV7qTnuisK99PYICJWoEGMibN mcBHKu5xuD7BscES1hIoeRDyip7Dlcm2wVQs9u8Um/ocsqOdEuBwBSDHNJen121P puOYEKe21QF42HUdNwYpVaclBVMRXDT2 -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:04 2025 by rpki-client