$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json) Hash identifier: 4jKR4r/JC08R1U5DllPBQKZ6r5hBAT6SfXYRuV/o4iI= Subject key identifier: 26:25:8C:36:49:B1:03:1D:E3:42:2B:D4:5E:92:51:8E:E8:28:7A:5B Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft Manifest number: 0B5F Signing time: Tue 04 Nov 2025 19:15:03 +0000 Manifest this update: Tue 04 Nov 2025 19:15:02 +0000 Manifest next update: Tue 11 Nov 2025 19:15:02 +0000 Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: PLBvCEBLBO4keOUpdZLvO5V2gu984s8m5APsf6QJUyc=) 2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: o16pooFHIEBYiC/U+8swfJroVM1JsQPPQfuyHDWfNA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538 Validity Not Before: Nov 4 19:15:02 2025 GMT Not After : Nov 11 19:15:02 2025 GMT Subject: CN=690a50b7-403b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:9b:1e:05:0a:29:a4:6c:48:43:89:d9:1c: 5c:56:17:38:4c:c9:a3:92:0d:4f:65:80:d6:1f:33: 93:cb:d5:5b:d4:16:17:02:51:ab:72:25:24:3c:58: dd:1f:db:05:95:20:ac:33:8f:ca:5c:96:67:c7:67: e7:b7:d4:23:a7:03:75:fd:dd:24:bf:e1:92:06:87: 20:d0:2f:d7:9c:33:15:30:73:01:61:15:5c:48:0c: af:8e:13:ff:9a:c8:63:6e:5e:f3:75:5e:94:d9:64: 4c:b8:2c:2a:39:da:cf:50:55:86:4c:ca:b3:96:6f: 62:78:df:6e:58:3b:ab:bf:94:54:fa:c3:7f:9a:ba: 64:39:ba:61:b6:29:42:66:50:2e:2a:83:a0:fa:6f: 7f:69:f0:c3:5f:a3:96:6c:85:0c:58:89:ff:b9:4d: e1:aa:26:f2:9c:dc:9f:5c:01:de:d4:cf:08:51:65: c4:cc:38:84:11:3b:cc:ed:95:b7:48:74:ea:c6:ee: a9:b8:5a:66:2b:a6:2e:42:fc:03:f8:9f:b1:8c:66: 9a:ec:43:46:0c:4e:e3:76:ad:5b:95:9e:12:1a:e1: 0a:f9:fe:0c:b8:bd:62:cc:fa:12:c0:b6:fd:fd:c2: 44:b4:33:2d:7a:c0:44:3b:36:61:86:66:83:15:26: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:8C:36:49:B1:03:1D:E3:42:2B:D4:5E:92:51:8E:E8:28:7A:5B X509v3 Authority Key Identifier: keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:16:bf:26:ca:e9:e8:cd:50:df:10:27:b5:db:21:2a:a7:ea: 34:73:76:20:cb:69:29:97:31:ba:55:9d:f6:f0:9e:34:5e:86: 55:f8:92:28:f0:35:82:db:e3:f0:b6:e8:cb:b7:ba:b2:fe:19: db:47:1e:c4:97:5a:34:cc:eb:7a:a4:22:12:c2:b7:b5:07:6f: 83:9d:32:0b:e5:20:3c:2f:69:3b:64:5e:78:89:99:73:e2:db: a8:e9:80:65:71:2a:08:ed:8a:90:d9:eb:ee:fc:f9:11:44:3b: 69:b8:1c:9b:5c:6b:4f:f5:db:1d:98:08:77:a7:16:bf:44:63: d6:59:5a:00:82:f1:c4:fb:94:9c:33:e5:c9:ff:7e:9b:b6:43: 0f:32:5f:ee:60:7a:ea:ca:bf:fc:cf:fa:93:53:c1:a5:96:a7: 9b:4c:57:44:e4:91:7e:29:3e:b1:3c:ac:ee:3d:9d:9c:6f:6b: c0:2e:91:b7:cb:5e:1b:9c:ec:2f:74:74:fb:1f:c2:6d:b2:5b: db:9a:de:e9:0c:81:8f:e7:67:2a:09:48:90:64:d8:95:05:3f: d8:ae:4b:ed:38:9f:f7:c0:5b:2d:9f:c2:66:f3:42:13:a1:8f: 34:9e:ad:f6:26:0f:5d:01:1a:ac:c0:f8:de:7a:62:c0:a2:f7: af:76:38:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1 RDc4M0Q1MzgwHhcNMjUxMTA0MTkxNTAyWhcNMjUxMTExMTkxNTAyWjAYMRYwFAYD VQQDEw02OTBhNTBiNy00MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD2bHgUKKaRsSEOJ2RxcVhc4TMmjkg1PZYDWHzOTy9Vb1BYXAlGrciUkPFjd H9sFlSCsM4/KXJZnx2fnt9QjpwN1/d0kv+GSBocg0C/XnDMVMHMBYRVcSAyvjhP/ mshjbl7zdV6U2WRMuCwqOdrPUFWGTMqzlm9ieN9uWDurv5RU+sN/mrpkObphtilC ZlAuKoOg+m9/afDDX6OWbIUMWIn/uU3hqibynNyfXAHe1M8IUWXEzDiEETvM7ZW3 SHTqxu6puFpmK6YuQvwD+J+xjGaa7ENGDE7jdq1blZ4SGuEK+f4MuL1izPoSwLb9 /cJEtDMtesBEOzZhhmaDFSaCjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYljDZJ sQMd40Ir1F6SUY7oKHpbMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25O MG5RbXlTZlJhSGRkZUQxVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnFr8myunozVDfECe12yEqp+o0c3Ygy2kplzG6VZ328J40XoZV+JIo 8DWC2+PwtujLt7qy/hnbRx7El1o0zOt6pCISwre1B2+DnTIL5SA8L2k7ZF54iZlz 4tuo6YBlcSoI7YqQ2evu/PkRRDtpuBybXGtP9dsdmAh3pxa/RGPWWVoAgvHE+5Sc M+XJ/36btkMPMl/uYHrqyr/8z/qTU8GllqebTFdE5JF+KT6xPKzuPZ2cb2vALpG3 y14bnOwvdHT7H8Jtslvbmt7pDIGP52cqCUiQZNiVBT/YrkvtOJ/3wFstn8Jm80IT oY80nq32Jg9dARqswPjeemLAovevdjh3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:03 2025 by rpki-client