$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: FJtSZ0Ghb0ykZP9yTrtPCFP084U4KOlbWvQ3RhMjU+k= Subject key identifier: 4E:9F:25:87:60:8F:25:01:46:45:CE:0B:77:99:5E:F8:C9:93:F0:71 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A5F Signing time: Tue 04 Nov 2025 19:44:08 +0000 Manifest this update: Tue 04 Nov 2025 19:44:07 +0000 Manifest next update: Tue 11 Nov 2025 19:44:07 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: nhfAgWsGGL4NaUFkXRzrpe7pbKqwZERSH3n7HyjYqME=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: vP35qnvMRkTdLfqeDMEWgBW1aiyRovnKXuS0v/3gyT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Nov 4 19:44:07 2025 GMT Not After : Nov 11 19:44:07 2025 GMT Subject: CN=690a5788-f76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:41:6f:b5:c8:1c:a7:66:e6:41:7f:d1:69: 77:d1:9e:23:5c:5e:0f:bb:30:4e:5c:e7:5d:a9:27: f5:90:bd:b6:55:f0:aa:03:4a:2d:b9:08:78:3a:27: 33:21:a6:50:a0:ee:5b:a9:8f:8e:4c:48:22:5b:0a: 4f:d0:ee:fe:c7:3d:11:7e:9f:82:2d:4d:70:da:f6: a5:46:18:a4:37:8e:62:8f:4e:41:04:01:cc:c6:a0: 87:fa:fd:97:79:42:d0:64:0c:92:e7:0d:c0:32:34: c8:d6:50:f3:02:c9:ac:de:0b:a1:92:76:c2:73:b1: 85:27:af:49:56:e5:fd:9a:ee:78:af:fe:52:02:9c: 81:d8:7e:5d:3f:74:13:f7:47:15:1a:08:ae:fe:72: b9:73:06:c5:71:e4:b8:14:9f:82:49:33:fd:99:3a: 62:87:8d:89:d1:bf:93:a0:77:e9:6f:0f:86:81:d9: 52:1c:ee:0a:d3:ec:16:1b:95:58:7a:58:ee:ed:45: e5:32:c8:26:1c:79:07:30:fc:33:22:5b:a1:c6:d1: 75:53:ef:b3:de:9a:a2:59:93:a7:fc:62:2c:f5:ad: 6b:9d:c3:6e:ff:b2:4c:5f:04:23:ea:bc:d2:47:38: 90:c4:11:be:9a:a3:d2:1e:a5:a2:83:c5:f9:40:60: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9F:25:87:60:8F:25:01:46:45:CE:0B:77:99:5E:F8:C9:93:F0:71 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:84:d3:2e:8c:d5:d6:53:88:88:b5:fb:a0:81:03:d5:5b:86: 72:cf:06:5e:c1:48:89:e2:21:73:75:70:4b:0c:8d:03:c5:60: df:07:ad:0b:01:da:4d:b0:05:8c:b7:c6:87:99:bb:d6:60:e9: 3e:56:58:59:d4:40:90:8b:21:e1:e4:65:a7:90:a0:07:b1:01: 48:09:fa:b5:36:05:39:36:91:a7:a3:c7:13:c2:e9:73:cd:89: 29:cf:c2:41:a3:2d:fd:d4:82:a3:0c:52:0b:6e:5e:2e:3e:2f: 00:1e:69:a0:64:3d:ac:1f:ee:f7:f4:ae:8f:b0:a2:39:17:7e: 11:8a:5c:09:df:8e:05:76:e4:3d:14:b5:03:9d:4c:9d:ed:9a: c9:f0:90:e0:6d:7d:74:6d:08:6b:23:48:cf:4f:2e:8a:53:2f: 45:d2:09:51:53:66:03:6e:93:03:74:b5:02:9d:00:f3:94:83: 5b:26:ca:e3:2e:79:62:81:53:5c:b0:90:e0:d6:29:13:3d:7f: c3:c8:fb:36:10:7a:6b:0d:ce:d1:33:66:d1:aa:a6:8b:18:c9: 99:ec:d9:ad:e0:04:26:5c:77:84:e8:3f:56:a8:7b:b1:44:60: 9f:b7:07:3a:05:0c:58:5d:60:5f:39:34:63:06:8b:0a:5e:62: 1e:84:4f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUxMTA0MTk0NDA3WhcNMjUxMTExMTk0NDA3WjAYMRYwFAYD VQQDEw02OTBhNTc4OC1mNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTNBb7XIHKdm5kF/0Wl30Z4jXF4PuzBOXOddqSf1kL22VfCqA0otuQh4Oicz IaZQoO5bqY+OTEgiWwpP0O7+xz0Rfp+CLU1w2valRhikN45ij05BBAHMxqCH+v2X eULQZAyS5w3AMjTI1lDzAsms3guhknbCc7GFJ69JVuX9mu54r/5SApyB2H5dP3QT 90cVGgiu/nK5cwbFceS4FJ+CSTP9mTpih42J0b+ToHfpbw+GgdlSHO4K0+wWG5VY elju7UXlMsgmHHkHMPwzIluhxtF1U++z3pqiWZOn/GIs9a1rncNu/7JMXwQj6rzS RziQxBG+mqPSHqWig8X5QGBdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6fJYdg jyUBRkXOC3eZXvjJk/BxMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkhNMujNXWU4iItfuggQPVW4ZyzwZewUiJ4iFzdXBLDI0DxWDfB60L AdpNsAWMt8aHmbvWYOk+VlhZ1ECQiyHh5GWnkKAHsQFICfq1NgU5NpGno8cTwulz zYkpz8JBoy391IKjDFILbl4uPi8AHmmgZD2sH+739K6PsKI5F34RilwJ344FduQ9 FLUDnUyd7ZrJ8JDgbX10bQhrI0jPTy6KUy9F0glRU2YDbpMDdLUCnQDzlINbJsrj LnligVNcsJDg1ikTPX/DyPs2EHprDc7RM2bRqqaLGMmZ7Nmt4AQmXHeE6D9WqHux RGCftwc6BQxYXWBfOTRjBosKXmIehE9/ -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:10 2025 by rpki-client