$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: /r7ubdW15YOLvnY12scuyrHIXyXoA1J+nt6R1xXGFSc= Subject key identifier: C0:CA:A2:D2:27:9A:CC:14:96:FA:F6:EE:29:ED:E1:AF:28:EC:28:09 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0C08 Signing time: Sun 02 Nov 2025 19:02:46 +0000 Manifest this update: Sun 02 Nov 2025 19:02:45 +0000 Manifest next update: Sun 09 Nov 2025 19:02:45 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: alw/agw3kw98jEqymhFDPkIGEk8m1P4AvL/QF7MgBbU=) 2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=) 3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=) 4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=) 5: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: dAr5iBEgksscApG/hnOmTYygVomN/E/w8I2tDgWWF54=) 6: 52636904771911F083181320C4F9AE02.roa (hash: 1KusZBNNW/qOCnR0kl7JmRQp5eJkrJEh2HYRqvBUy6w=) 7: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: IWHAsp5GSTIoMqNKo0F2rFXfmQxpgUta2Oi8tYKu1uo=) 8: B43088B457F311F099129754C4F9AE02.roa (hash: G/js9Bvm1ldv3EUjoboyUhcQNgg/29Bat68H2Q8xFls=) 9: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=) 10: 266FDBAE7CA811F099F0EC6BC4F9AE02.roa (hash: bzHe5eQXvAgJqQB53X3rSQRyXfwO/6bU3D4zIt0omyE=) 11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 2 19:02:45 2025 GMT Not After : Nov 9 19:02:45 2025 GMT Subject: CN=6907aad5-e7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:65:ce:9b:b6:ef:5c:c1:b4:60:dd:03:3a: 6f:6f:0c:e3:2c:29:01:c9:a2:6c:5b:0d:cb:9c:7e: 53:79:36:cf:90:a6:8a:dd:0e:a9:b9:5f:1c:40:e2: 76:d1:97:5c:fa:66:3d:f2:1d:81:62:70:76:33:f2: 1a:b9:a4:b9:2e:4a:bb:4d:93:24:6e:4d:6b:96:ef: 32:4a:39:04:9f:bd:63:38:2e:69:22:e4:cc:b7:d6: 0d:2f:db:66:08:0e:15:00:8c:ce:b0:05:14:6c:b1: 85:53:0f:15:64:7a:72:cb:12:48:46:98:03:86:63: 48:59:63:8b:7a:09:77:4c:12:a5:8b:8a:39:df:89: 0c:54:77:c6:4a:9b:49:2b:6b:06:49:fa:f7:9d:8a: 1d:76:e5:69:c8:4b:87:b4:50:ae:58:2e:d2:88:5d: 14:ea:4c:6b:4a:3b:4d:eb:a7:85:a6:24:75:50:1a: e1:f9:86:48:6f:68:5a:24:de:a6:ba:69:d3:5e:a2: 94:5f:36:75:98:e9:a3:61:ff:af:10:16:69:b9:f3: 06:fa:eb:0d:9b:7d:eb:bd:f8:3e:d7:03:fe:5d:61: b6:4b:74:5c:a0:51:41:8e:c8:de:6d:b2:b2:2c:05: 41:ed:ab:d9:7d:b3:e6:96:6a:53:91:8b:a6:e5:ac: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:A2:D2:27:9A:CC:14:96:FA:F6:EE:29:ED:E1:AF:28:EC:28:09 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:96:71:70:3f:0e:b0:a7:17:58:db:2f:b6:7c:52:04:13:82: c6:22:f9:1b:7b:1b:2d:a6:8e:97:cf:be:0b:ad:10:aa:03:9a: 3a:ac:e7:c6:00:79:4b:bf:ce:2d:85:8d:ff:7b:66:a6:8d:78: ec:1a:6b:a6:8c:bf:48:b3:5a:3e:9e:f4:f9:ab:f6:c5:06:51: ff:d1:f6:2e:d5:e3:e6:60:d5:64:61:dc:86:a3:2b:09:8d:4a: f3:b5:c1:38:c1:50:8d:c1:00:a0:08:98:1b:1e:10:89:58:a1: fe:cb:a0:ef:11:28:cf:c5:2f:bb:7d:5c:bc:11:c1:49:ca:9d: 3e:42:4e:a4:4d:68:99:fc:04:6c:c9:ec:92:8e:00:9c:58:0a: e3:75:20:61:46:c7:ab:b7:f9:e7:b4:42:66:40:93:9e:da:5b: b2:c0:01:ae:2a:7f:71:62:24:68:98:be:cf:0f:f2:c1:06:5b: 84:dd:28:4c:67:80:35:c1:58:7f:95:1c:c0:24:da:38:bc:49: 00:25:e1:55:ca:76:7b:2a:b0:37:92:fe:72:a3:7c:a8:71:be: ca:fb:eb:27:de:64:54:4b:b7:5d:c7:b5:d6:08:55:c5:b3:f1: 84:38:02:d0:23:74:e2:b3:c8:26:10:8f:0b:80:77:b0:f7:d6: dd:95:50:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMTAyMTkwMjQ1WhcNMjUxMTA5MTkwMjQ1WjAYMRYwFAYD VQQDEw02OTA3YWFkNS1lN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oNlzpu271zBtGDdAzpvbwzjLCkByaJsWw3LnH5TeTbPkKaK3Q6puV8cQOJ2 0Zdc+mY98h2BYnB2M/IauaS5Lkq7TZMkbk1rlu8ySjkEn71jOC5pIuTMt9YNL9tm CA4VAIzOsAUUbLGFUw8VZHpyyxJIRpgDhmNIWWOLegl3TBKli4o534kMVHfGSptJ K2sGSfr3nYodduVpyEuHtFCuWC7SiF0U6kxrSjtN66eFpiR1UBrh+YZIb2haJN6m umnTXqKUXzZ1mOmjYf+vEBZpufMG+usNm33rvfg+1wP+XWG2S3RcoFFBjsjebbKy LAVB7avZfbPmlmpTkYum5azQZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDKotIn mswUlvr27int4a8o7CgJMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAulnFwPw6wpxdY2y+2fFIEE4LGIvkbexstpo6Xz74LrRCqA5o6rOfG AHlLv84thY3/e2amjXjsGmumjL9Is1o+nvT5q/bFBlH/0fYu1ePmYNVkYdyGoysJ jUrztcE4wVCNwQCgCJgbHhCJWKH+y6DvESjPxS+7fVy8EcFJyp0+Qk6kTWiZ/ARs yeySjgCcWArjdSBhRsert/nntEJmQJOe2luywAGuKn9xYiRomL7PD/LBBluE3ShM Z4A1wVh/lRzAJNo4vEkAJeFVynZ7KrA3kv5yo3yocb7K++sn3mRUS7ddx7XWCFXF s/GEOALQI3Tis8gmEI8LgHew99bdlVBW -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:22 2025 by rpki-client