$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: c1VelxZ8427YJ8rgy9gXiXqqIm2pCovF4+aEwVtN0FA= Subject key identifier: B7:BD:05:3F:49:DA:E1:BF:FE:44:8F:34:D1:A8:40:3E:B2:2D:33:25 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 53 Signing time: Wed 05 Nov 2025 07:34:11 +0000 Manifest this update: Wed 05 Nov 2025 07:34:10 +0000 Manifest next update: Wed 12 Nov 2025 07:34:10 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: gObu6xUYgpSyJnfBR1/7pJY7uOblE8MkHy4CwfkRzKU=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Nov 5 07:34:10 2025 GMT Not After : Nov 12 07:34:10 2025 GMT Subject: CN=690afdf2-8548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:fc:43:7d:5d:85:1f:69:ea:6e:56:e4:81: 44:c2:84:76:4a:8e:e8:48:c3:3b:d7:c3:0b:c0:e0: 8c:2c:cf:83:72:b6:6b:b6:ad:3c:bb:5b:a7:99:9d: 3b:5b:4d:f2:9b:e2:44:99:3b:ff:e5:ce:a4:52:a7: 49:2e:d8:f4:cd:75:f4:01:78:22:89:ac:a7:54:4f: 31:d2:8a:1c:92:99:c1:59:48:71:4b:e9:93:0c:5e: aa:88:14:88:9e:71:f5:f3:e7:9b:e9:b6:a8:a1:a1: b7:d2:6a:fc:5d:19:82:75:3f:b3:75:99:dc:f4:13: 1c:ad:94:d9:81:07:9b:50:8f:a5:70:5c:77:65:4b: 30:96:a4:00:4a:1d:78:32:77:d6:40:de:1d:43:3e: 3a:44:de:46:55:89:ae:ce:4c:a4:d8:c6:53:68:50: 71:50:9b:f2:09:eb:a7:fc:fe:56:45:f7:3a:63:d8: 8d:f5:cc:af:a5:ac:7a:9c:5c:87:e9:4d:dd:16:8a: 4d:4f:bf:0d:2b:3f:12:e8:f8:42:b3:5f:3f:0b:d8: c9:cf:27:a3:8d:23:b7:50:17:b6:6d:0b:62:44:54: 65:dc:30:27:67:c1:43:f9:cd:9d:87:76:c7:cf:15: b0:a5:95:d8:3d:b8:47:4b:62:30:1b:56:7b:16:93: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BD:05:3F:49:DA:E1:BF:FE:44:8F:34:D1:A8:40:3E:B2:2D:33:25 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:78:ed:22:03:71:6d:ae:64:05:38:76:27:50:94:d9:b1: 4d:26:10:cb:6d:a6:7e:4b:f0:14:4f:8d:88:3b:0f:47:a9:d6: a2:ea:7f:ed:f0:1e:83:10:78:85:80:5c:c4:d5:8a:37:28:64: 8e:41:87:f8:d8:00:12:43:1c:a5:64:bc:a1:77:c6:d6:22:b2: 53:8b:3b:11:93:20:c4:3c:7d:3b:6f:ca:76:9e:b6:0b:fc:31: 30:29:00:da:b5:94:9c:c0:dc:5a:4d:8c:10:55:40:a7:fe:e1: 1b:0d:07:08:53:a8:3a:24:d4:69:97:2b:5a:20:19:9f:4a:d0: 8f:a0:8a:55:e1:25:8f:24:e3:43:61:6a:d7:4b:bf:49:ba:ab: 89:c6:bd:72:68:40:36:20:5e:3a:17:d2:f2:ec:00:c7:b6:2b: 49:42:42:bb:9b:f8:ac:c5:4f:32:37:09:70:39:7e:80:93:f1: 37:1a:17:48:7b:e7:65:97:9b:e1:c7:be:d3:35:f6:03:80:ec: 19:c7:a8:28:7c:1c:4d:3d:e4:8a:b7:e2:67:df:57:3c:8a:1f: 4b:df:cd:aa:7f:7a:2b:e5:c1:f4:be:73:67:54:df:3b:e1:84: cd:97:c5:79:5b:a0:66:3c:1d:89:8a:6a:30:4c:3e:de:44:4b: 1c:14:f9:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoQjQwMzhBQjY0MDM5RjMxNDU2MjJBMjBGRjcwRUQ3QkUx RDRFN0Y5MTAeFw0yNTExMDUwNzM0MTBaFw0yNTExMTIwNzM0MTBaMBgxFjAUBgNV BAMTDTY5MGFmZGYyLTg1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDchvxDfV2FH2nqblbkgUTChHZKjuhIwzvXwwvA4Iwsz4Nytmu2rTy7W6eZnTtb TfKb4kSZO//lzqRSp0ku2PTNdfQBeCKJrKdUTzHSihySmcFZSHFL6ZMMXqqIFIie cfXz55vptqihobfSavxdGYJ1P7N1mdz0ExytlNmBB5tQj6VwXHdlSzCWpABKHXgy d9ZA3h1DPjpE3kZVia7OTKTYxlNoUHFQm/IJ66f8/lZF9zpj2I31zK+lrHqcXIfp Td0Wik1Pvw0rPxLo+EKzXz8L2MnPJ6ONI7dQF7ZtC2JEVGXcMCdnwUP5zZ2HdsfP FbClldg9uEdLYjAbVnsWk4drAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt70FP0na 4b/+RI800ahAPrItMyUwHwYDVR0jBBgwFoAUtAOKtkA58xRWIqIP9w7Xvh1Of5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzY0OUJDM0IyNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEFPS3RrQTU4eFJXSXFJUDl3N1h2aDFPZjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzY0OUJDM0IyNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhS V0lxSVA5dzdYdmgxT2Y1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9feO0iA3FtrmQFOHYnUJTZsU0mEMttpn5L8BRPjYg7D0ep1qLqf+3w HoMQeIWAXMTVijcoZI5Bh/jYABJDHKVkvKF3xtYislOLOxGTIMQ8fTtvynaetgv8 MTApANq1lJzA3FpNjBBVQKf+4RsNBwhTqDok1GmXK1ogGZ9K0I+gilXhJY8k40Nh atdLv0m6q4nGvXJoQDYgXjoX0vLsAMe2K0lCQrub+KzFTzI3CXA5foCT8TcaF0h7 52WXm+HHvtM19gOA7BnHqCh8HE095Iq34mffVzyKH0vfzap/eivlwfS+c2dU3zvh hM2XxXlboGY8HYmKajBMPt5ESxwU+dU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:58 2025 by rpki-client