$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: an07taRVBw5yDENScfKRMmHIjD+/FBmhkHxFj+vZSi8= Subject key identifier: 92:4D:93:34:50:94:61:22:04:F9:9F:F8:27:A2:AF:06:DD:0E:95:2C Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 049C Signing time: Wed 05 Nov 2025 00:05:15 +0000 Manifest this update: Wed 05 Nov 2025 00:05:14 +0000 Manifest next update: Wed 12 Nov 2025 00:05:14 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: mpVmM8coFbfRHRctLcPaFEwZQKZD/Vn/dVt2butBduc=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Nov 5 00:05:14 2025 GMT Not After : Nov 12 00:05:14 2025 GMT Subject: CN=690a94bb-95d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:8e:c1:b1:6b:41:63:d1:82:60:ad:4e:e2: c5:7d:03:3e:81:c7:19:db:2d:11:1c:97:3d:94:f0: 9f:eb:7b:26:19:77:47:84:ef:4f:f7:3f:46:5c:7e: a2:f6:02:91:e5:c6:54:38:06:31:05:bd:8e:a0:92: 69:6a:d1:ed:0b:ab:78:5f:ac:96:22:05:37:48:3c: bb:3c:32:27:53:51:6f:f5:92:51:8e:b3:74:c7:ef: 36:b4:7c:b9:4b:e5:89:0f:47:f1:1b:52:90:c2:2c: f7:df:17:5b:26:f9:92:e1:28:41:3a:64:cc:17:99: 06:51:99:fa:40:19:cd:65:38:8d:1b:9f:c0:35:4f: a2:db:e8:95:c6:51:1e:28:c9:85:ed:9d:13:21:90: 7f:6f:94:54:07:2b:be:99:6f:55:69:60:e8:98:82: 6e:98:ef:0c:28:b1:cc:8d:61:aa:57:07:79:a6:a1: 43:2c:d9:2a:c8:a5:d5:2b:61:a2:37:4f:ed:ea:80: c8:53:55:bc:a7:4b:15:92:76:b7:e0:e3:7c:35:4f: e1:8b:31:b3:02:c0:c7:13:ec:41:1f:38:94:2e:49: ae:89:a8:dd:34:ea:ff:30:a7:cf:38:ca:14:70:13: 89:5f:67:c9:03:b3:86:11:41:8d:0b:48:4f:db:99: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4D:93:34:50:94:61:22:04:F9:9F:F8:27:A2:AF:06:DD:0E:95:2C X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b2:91:62:59:af:13:30:e4:6e:0a:9a:dc:9b:e8:1d:13:7e: 0d:7e:2d:bd:ae:bb:95:ce:4a:b8:80:20:ff:dc:84:90:b7:ec: 66:f5:8b:19:fb:44:6c:59:2d:ea:dd:d9:db:66:de:16:c9:df: e4:34:6c:eb:c0:9c:6d:a1:f8:5a:8e:43:d1:f2:8e:ff:cd:4f: c2:bd:0e:3a:5e:ba:62:0b:14:9b:03:3c:f2:32:fa:09:47:18: 34:44:c1:b7:58:3a:a6:8a:fe:2a:3c:0b:bb:2c:32:d7:a3:22: 6f:c4:90:43:b2:8d:47:3d:f4:df:81:4e:1a:95:8a:b3:c6:f1: f6:78:c4:64:2b:37:b0:4c:87:0f:06:72:5c:c7:96:97:c5:18: 48:2b:11:08:68:de:25:8c:ee:52:ac:d0:8e:54:89:b2:af:9a: 6d:10:75:84:20:42:54:35:1c:b8:4d:37:1f:61:6c:92:9b:6e: d8:ed:6f:04:c3:0a:a1:1e:46:f6:cb:c9:10:e0:de:78:ea:a7: 70:82:2a:f8:b7:af:39:8e:9b:6f:96:c9:04:3c:fc:89:18:74: ef:e3:7a:08:4e:e8:1c:15:70:28:b7:a9:e0:15:f3:7b:d1:8b: 27:4c:2a:9b:66:25:4e:38:1e:2f:da:a3:92:07:31:8e:8d:3d: 1f:a0:c3:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUxMTA1MDAwNTE0WhcNMjUxMTEyMDAwNTE0WjAYMRYwFAYD VQQDEw02OTBhOTRiYi05NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8qOwbFrQWPRgmCtTuLFfQM+gccZ2y0RHJc9lPCf63smGXdHhO9P9z9GXH6i 9gKR5cZUOAYxBb2OoJJpatHtC6t4X6yWIgU3SDy7PDInU1Fv9ZJRjrN0x+82tHy5 S+WJD0fxG1KQwiz33xdbJvmS4ShBOmTMF5kGUZn6QBnNZTiNG5/ANU+i2+iVxlEe KMmF7Z0TIZB/b5RUByu+mW9VaWDomIJumO8MKLHMjWGqVwd5pqFDLNkqyKXVK2Gi N0/t6oDIU1W8p0sVkna34ON8NU/hizGzAsDHE+xBHziULkmuiajdNOr/MKfPOMoU cBOJX2fJA7OGEUGNC0hP25lIVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJNkzRQ lGEiBPmf+CeirwbdDpUsMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMspFiWa8TMORuCprcm+gdE34Nfi29rruVzkq4gCD/3ISQt+xm9YsZ +0RsWS3q3dnbZt4Wyd/kNGzrwJxtofhajkPR8o7/zU/CvQ46XrpiCxSbAzzyMvoJ Rxg0RMG3WDqmiv4qPAu7LDLXoyJvxJBDso1HPfTfgU4alYqzxvH2eMRkKzewTIcP BnJcx5aXxRhIKxEIaN4ljO5SrNCOVImyr5ptEHWEIEJUNRy4TTcfYWySm27Y7W8E wwqhHkb2y8kQ4N546qdwgir4t685jptvlskEPPyJGHTv43oITugcFXAot6ngFfN7 0YsnTCqbZiVOOB4v2qOSBzGOjT0foMP9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:56 2025 by rpki-client