$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: EP3PliPC/XNNH/H1P0gMosiR3aRnv4QbPJfghbWEt/U= Subject key identifier: B4:8A:DB:5E:86:E3:5C:E4:C1:53:91:50:99:E7:81:64:CF:28:A6:34 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0C8D Signing time: Tue 04 Nov 2025 18:30:58 +0000 Manifest this update: Tue 04 Nov 2025 18:30:57 +0000 Manifest next update: Tue 11 Nov 2025 18:30:57 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: kQmp9vzRQhfdATcLqPKVUwUEBPxULj49hkL6qnwpFAo=) 2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: 0bN6aa9LmlwzevTlnntKDv/hy63nRIyDPNtf4oHkk54=) 3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Nov 4 18:30:57 2025 GMT Not After : Nov 11 18:30:57 2025 GMT Subject: CN=690a4662-e896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:9e:30:5e:ac:fe:5a:af:f1:57:fd:c8:dc: 83:ce:d3:17:d2:ba:09:e4:b3:e8:df:ac:bf:bc:f1: e3:33:3e:63:a1:d2:63:6e:db:c4:9f:f8:70:68:b9: 28:7b:a8:bc:ee:d2:9d:fb:a6:54:9e:a4:5c:f9:14: ae:7d:c9:ba:3f:19:b6:d8:04:64:92:af:a5:5c:f2: a0:49:43:6b:bd:db:53:3e:47:2b:ff:58:0f:84:e5: bb:61:b9:da:53:83:76:02:27:ad:db:85:7a:e2:ff: 24:a6:91:e6:b5:dc:17:34:e6:27:e0:c4:43:59:5f: 95:c0:9d:95:2c:a6:1f:c0:72:77:4f:45:2f:f0:34: e2:e3:fd:3b:2a:db:0c:c0:91:8b:37:15:db:e2:a3: 5c:da:76:31:76:c9:5f:50:6f:d0:45:1b:55:51:66: 5e:47:2c:a8:7b:df:87:65:68:d5:a0:4a:61:a9:4d: f1:62:4b:09:9c:a8:2b:80:75:41:93:17:aa:84:93: c8:dc:b9:7a:61:40:ee:6b:bf:57:76:75:01:d2:e0: cc:d0:93:91:5f:c5:05:26:e8:f5:ec:ca:35:6f:46: b0:55:ee:a5:1c:02:b4:8f:fb:12:87:72:aa:d4:56: 5d:5c:dc:4e:ee:35:dc:84:ec:66:77:c3:20:41:3d: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:DB:5E:86:E3:5C:E4:C1:53:91:50:99:E7:81:64:CF:28:A6:34 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fb:2d:a8:1c:91:95:9d:aa:0c:23:06:5d:ee:b2:ff:f0:e3: 3c:d8:d2:c5:05:3c:a0:fe:cd:1e:35:9a:bf:17:58:2d:f7:15: ad:09:9e:a4:29:b5:20:9c:11:c2:16:71:95:8d:ac:a0:6e:41: d1:61:d0:1a:2e:ad:ad:d3:b9:2e:b0:65:a8:27:b3:fb:84:66: 73:a0:a2:4f:5c:9d:9f:90:8d:b2:35:4d:7b:39:ea:a2:35:8d: 83:bd:cb:7f:87:8c:cc:69:97:70:d3:8d:2f:56:a6:d4:41:c3: 8c:76:a5:b0:1a:01:63:a9:e5:21:f7:21:fe:25:a8:b5:3e:89: e0:b7:29:bf:14:db:ec:a6:e8:c7:7a:cb:35:2f:7b:fc:79:4e: 4b:5c:f5:28:35:af:3d:9e:7c:34:19:05:c7:bc:cd:a7:d9:b7: b3:a0:85:34:d4:63:1d:30:51:bc:4d:d8:91:92:56:50:f1:1f: 28:ba:33:ab:30:f3:79:d9:cf:c8:74:68:34:9c:4d:33:d1:5d: 52:62:83:9f:77:83:0c:7a:db:7e:8f:fd:07:f7:53:1b:80:e2: 42:36:8b:1d:ab:38:5d:56:19:23:07:22:5d:48:21:8a:1c:d9: da:e6:8b:61:66:44:eb:93:7b:8c:aa:6f:5c:90:3e:3c:87:3d: f0:b6:b1:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjUxMTA0MTgzMDU3WhcNMjUxMTExMTgzMDU3WjAYMRYwFAYD VQQDEw02OTBhNDY2Mi1lODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4yeMF6s/lqv8Vf9yNyDztMX0roJ5LPo36y/vPHjMz5jodJjbtvEn/hwaLko e6i87tKd+6ZUnqRc+RSufcm6Pxm22ARkkq+lXPKgSUNrvdtTPkcr/1gPhOW7Ybna U4N2Aiet24V64v8kppHmtdwXNOYn4MRDWV+VwJ2VLKYfwHJ3T0Uv8DTi4/07KtsM wJGLNxXb4qNc2nYxdslfUG/QRRtVUWZeRyyoe9+HZWjVoEphqU3xYksJnKgrgHVB kxeqhJPI3Ll6YUDua79XdnUB0uDM0JORX8UFJuj17Mo1b0awVe6lHAK0j/sSh3Kq 1FZdXNxO7jXchOxmd8MgQT1heQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSK216G 41zkwVORUJnngWTPKKY0MB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4+y2oHJGVnaoMIwZd7rL/8OM82NLFBTyg/s0eNZq/F1gt9xWtCZ6k KbUgnBHCFnGVjaygbkHRYdAaLq2t07kusGWoJ7P7hGZzoKJPXJ2fkI2yNU17Oeqi NY2Dvct/h4zMaZdw040vVqbUQcOMdqWwGgFjqeUh9yH+Jai1Pongtym/FNvspujH ess1L3v8eU5LXPUoNa89nnw0GQXHvM2n2bezoIU01GMdMFG8TdiRklZQ8R8oujOr MPN52c/IdGg0nE0z0V1SYoOfd4MMett+j/0H91MbgOJCNosdqzhdVhkjByJdSCGK HNna5othZkTrk3uMqm9ckD48hz3wtrEo -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:59 2025 by rpki-client