$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: IftWyBnNYlCNblyPyxIt/POzI6CBEt3NYjLRl0icMnU= Subject key identifier: FF:FB:E3:9B:3F:8E:7C:81:0D:2E:21:D2:00:C5:1E:3D:18:A4:99:C9 Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 0451 Signing time: Mon 03 Nov 2025 00:11:10 +0000 Manifest this update: Mon 03 Nov 2025 00:11:09 +0000 Manifest next update: Mon 10 Nov 2025 00:11:09 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: PjAEdf2GXqJTHJwxf3Qi4vd6JSRKAYbJ+nni8BqZr2o=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Nov 3 00:11:09 2025 GMT Not After : Nov 10 00:11:09 2025 GMT Subject: CN=6907f31d-f1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:be:40:bc:6a:33:02:6b:7a:09:e0:2a:4d: c0:68:6d:57:f8:d9:84:4a:80:42:de:2d:34:5a:7c: 86:d1:ca:8e:9e:b1:4c:77:df:13:8b:56:9d:ca:42: c3:da:3d:ca:b5:0f:ec:22:db:1f:c3:d0:ed:bd:cc: 99:91:f1:2f:73:8f:d8:d4:76:de:03:96:d2:9c:df: dc:5a:1f:69:91:d8:df:35:2a:4a:35:34:47:00:80: ef:6d:b0:85:5b:b1:df:4e:72:f2:3d:9d:97:aa:cc: ec:ec:a5:ff:27:e1:d2:c0:26:35:c8:35:27:75:b4: 5c:6a:a7:b2:54:fa:c4:b0:29:8a:7c:ca:56:50:1b: 5f:21:d9:3f:cd:1d:fa:dc:e7:c1:9f:56:c8:40:23: 78:51:a6:94:bd:68:5c:f1:5c:21:88:49:fd:10:f8: 35:ed:51:96:18:40:75:6d:8b:8e:6e:e2:4f:82:86: 1e:c8:13:0c:f5:60:68:71:93:54:f7:b2:51:48:5c: bd:40:47:4e:3e:52:e1:30:29:d9:e9:37:fb:64:89: 6d:28:ef:74:17:58:cd:b5:66:c8:2c:7c:c5:37:10: f9:5a:a0:2d:a9:43:83:2e:33:58:bd:0b:af:84:d4: 2f:82:63:1c:1d:df:41:51:ec:b3:a5:2f:6e:a7:9b: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FB:E3:9B:3F:8E:7C:81:0D:2E:21:D2:00:C5:1E:3D:18:A4:99:C9 X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4a:61:8c:f5:fb:86:bc:d7:e1:47:27:b8:e0:ff:ee:70:3b: 70:59:6f:fb:b6:4d:93:f9:27:d3:b7:36:00:14:d1:d6:29:24: 5a:69:45:b3:d1:1c:ae:91:1e:f4:2f:6b:ba:e2:a6:19:52:e7: 3e:11:c2:a1:6d:14:0a:bd:75:23:83:e5:29:05:3e:e4:88:f7: 6e:60:36:ee:a8:82:f2:b6:70:61:e0:0c:b2:54:9b:40:98:ed: 4a:06:37:40:30:3e:c8:ff:de:92:a2:0b:ba:a0:37:31:00:70: c2:40:cd:aa:8f:8c:b6:4d:fa:ae:85:41:c3:e0:7f:9f:13:95: 65:6b:e6:e3:e9:35:f3:fb:17:62:13:25:2a:a8:00:04:55:1e: 30:6b:0f:f0:f6:e9:66:ab:e0:37:57:c4:2c:e2:19:2b:18:0f: 6b:b9:b5:e5:69:9b:47:42:8d:16:f1:a6:06:4d:18:82:07:a6: c0:0a:e3:fa:34:f6:8e:b3:a2:c8:48:6b:37:43:35:fa:5d:87: 58:e2:ec:8f:d8:26:63:d7:a7:b4:91:9a:5c:35:12:6f:09:2d: b0:b6:22:dc:e6:ba:b3:94:52:d2:54:f0:b8:10:5b:5d:50:fb: 46:51:87:d7:7c:66:a6:5d:28:45:96:d0:58:12:56:98:65:30: f1:7b:a5:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUxMTAzMDAxMTA5WhcNMjUxMTEwMDAxMTA5WjAYMRYwFAYD VQQDEw02OTA3ZjMxZC1mMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo2+QLxqMwJregngKk3AaG1X+NmESoBC3i00WnyG0cqOnrFMd98Ti1adykLD 2j3KtQ/sItsfw9DtvcyZkfEvc4/Y1HbeA5bSnN/cWh9pkdjfNSpKNTRHAIDvbbCF W7HfTnLyPZ2Xqszs7KX/J+HSwCY1yDUndbRcaqeyVPrEsCmKfMpWUBtfIdk/zR36 3OfBn1bIQCN4UaaUvWhc8VwhiEn9EPg17VGWGEB1bYuObuJPgoYeyBMM9WBocZNU 97JRSFy9QEdOPlLhMCnZ6Tf7ZIltKO90F1jNtWbILHzFNxD5WqAtqUODLjNYvQuv hNQvgmMcHd9BUeyzpS9up5ti7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/745s/ jnyBDS4h0gDFHj0YpJnJMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBSmGM9fuGvNfhRye44P/ucDtwWW/7tk2T+SfTtzYAFNHWKSRaaUWz 0RyukR70L2u64qYZUuc+EcKhbRQKvXUjg+UpBT7kiPduYDbuqILytnBh4AyyVJtA mO1KBjdAMD7I/96Sogu6oDcxAHDCQM2qj4y2TfquhUHD4H+fE5Vla+bj6TXz+xdi EyUqqAAEVR4waw/w9ulmq+A3V8Qs4hkrGA9rubXlaZtHQo0W8aYGTRiCB6bACuP6 NPaOs6LISGs3QzX6XYdY4uyP2CZj16e0kZpcNRJvCS2wtiLc5rqzlFLSVPC4EFtd UPtGUYfXfGamXShFltBYElaYZTDxe6U4 -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:45 2025 by rpki-client