$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json) Hash identifier: b+HL7Gr8269bCpPzt3tnBRs8ZnzjmWY35l3riufrTdA= Subject key identifier: D6:18:D1:F5:25:B5:D3:E2:52:06:B7:55:E6:8B:4C:23:0B:BE:B9:1D Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:43:56 +0000 Manifest this update: Wed 05 Nov 2025 07:43:56 +0000 Manifest next update: Wed 12 Nov 2025 07:43:56 +0000 Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: AoPjVmZA72/B7di6D9chalNygHjROOtM436B3sgBCbc=) 2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: n1d9JBQkYzZszHXWzHvHiVJmG5oLenIhoEtEgvVSpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Nov 5 07:43:56 2025 GMT Not After : Nov 12 07:43:56 2025 GMT Subject: CN=690b003c-1e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:ee:3c:1d:21:5b:4b:38:48:c5:6b:05:64: 4c:7c:bc:8f:d6:67:a7:2f:7c:86:4d:1e:d2:15:20: 7e:63:6a:1d:95:e8:c3:66:da:1b:66:d1:4e:ad:25: 15:4d:2f:4d:d7:49:e4:e6:0f:a1:31:47:bf:fb:ec: 28:5c:66:9f:99:70:3c:9a:41:1c:16:27:14:96:b0: 5d:b6:d6:19:ea:fa:13:f3:1c:47:ce:1f:65:8f:16: 7c:cc:35:b9:71:39:49:12:43:b5:6a:59:57:ef:20: e8:c0:f3:cc:80:b7:c7:d6:67:96:b5:66:d1:90:0a: 54:d5:aa:dd:c8:34:39:b5:2f:85:d5:5f:53:5f:ad: b4:8a:ce:bd:b9:0d:a1:43:02:38:a6:3a:b9:8e:fa: ab:b5:21:d1:91:76:48:71:41:72:12:cc:a1:4e:c3: 4a:d4:8a:a7:24:e1:88:6f:e5:de:d2:8a:d3:b9:6e: ad:81:62:51:07:58:31:9d:b9:e2:3e:4c:7d:4c:47: ad:c9:55:1e:c9:34:27:71:69:b0:c1:73:de:d7:ae: b9:8f:b2:b9:63:73:47:a4:ef:14:6c:d5:b8:ee:03: d5:a8:95:a3:9c:e2:79:20:3c:66:f0:8b:37:d8:3b: 81:e5:97:f5:97:f4:a6:8b:88:ae:5d:59:69:74:e6: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:18:D1:F5:25:B5:D3:E2:52:06:B7:55:E6:8B:4C:23:0B:BE:B9:1D X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:76:76:85:9f:df:a4:0a:5f:f0:ce:7c:3d:25:43:2e:fc:70: c2:13:21:10:67:4f:d3:d2:4c:2c:2e:27:d6:d1:2f:84:c6:e6: 08:1d:4d:a8:fc:26:f1:a4:2d:a6:61:98:71:15:66:95:c8:bc: 58:39:24:f5:1a:45:7a:56:59:f0:59:51:19:a4:95:40:a3:df: ae:25:a4:ed:db:9c:29:35:9b:e9:bb:1f:4d:5e:f0:ba:6a:d2: 34:7b:ab:32:20:b9:fc:88:1a:14:cc:5b:32:7b:ae:c9:35:93: 50:b2:56:4e:f6:a7:41:e8:4a:a0:c5:fa:56:96:7d:d8:f2:54: bb:b3:d0:c0:74:09:6b:9a:f2:e6:f2:ab:2c:05:d7:fc:fb:00: 3a:3e:1d:ee:cf:f7:68:76:50:05:be:b1:1a:33:9b:a7:ae:18: ba:b0:ce:fc:1b:04:e5:41:a9:5e:c8:84:c8:2d:af:cf:62:b3: a2:7b:d9:bf:2f:b0:62:d6:bd:e9:fc:e0:23:86:aa:88:3b:80: ce:1d:1a:d9:7a:d9:5c:94:45:dc:06:14:db:1f:83:3f:fc:07: e9:a4:ca:c9:50:f3:ca:a9:68:2b:12:35:ce:9a:a7:e0:63:1c: 7c:3a:06:a0:1c:be:f8:28:20:0a:2c:a0:6a:9d:df:a1:81:34: 5b:df:c2:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTExMDUwNzQzNTZaFw0yNTExMTIwNzQzNTZaMBgxFjAUBgNV BAMTDTY5MGIwMDNjLTFlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK4+48HSFbSzhIxWsFZEx8vI/WZ6cvfIZNHtIVIH5jah2V6MNm2htm0U6tJRVN L03XSeTmD6ExR7/77ChcZp+ZcDyaQRwWJxSWsF221hnq+hPzHEfOH2WPFnzMNblx OUkSQ7VqWVfvIOjA88yAt8fWZ5a1ZtGQClTVqt3INDm1L4XVX1NfrbSKzr25DaFD AjimOrmO+qu1IdGRdkhxQXISzKFOw0rUiqck4Yhv5d7SitO5bq2BYlEHWDGdueI+ TH1MR63JVR7JNCdxabDBc97XrrmPsrljc0ek7xRs1bjuA9WolaOc4nkgPGbwizfY O4Hll/WX9KaLiK5dWWl05iLTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1hjR9SW1 0+JSBrdV5otMIwu+uR0wHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzVCQjA3NDNDNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1Va OXVPb1BDTU1ScVcwN1A3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACt2doWf36QKX/DOfD0lQy78cMITIRBnT9PSTCwuJ9bRL4TG5ggdTaj8 JvGkLaZhmHEVZpXIvFg5JPUaRXpWWfBZURmklUCj364lpO3bnCk1m+m7H01e8Lpq 0jR7qzIgufyIGhTMWzJ7rsk1k1CyVk72p0HoSqDF+laWfdjyVLuz0MB0CWua8uby qywF1/z7ADo+He7P92h2UAW+sRozm6euGLqwzvwbBOVBqV7IhMgtr89is6J72b8v sGLWven84COGqog7gM4dGtl62VyURdwGFNsfgz/8B+mkyslQ88qpaCsSNc6ap+Bj HHw6BqAcvvgoIAosoGqd36GBNFvfwlM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:51 2025 by rpki-client