$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: OmI1W3xUfNtReunRrfgmCGON+w/sRcwvbk4IUKesnns= Subject key identifier: D7:4A:B7:4B:72:F2:C8:57:E6:5F:5B:78:0F:16:E1:09:69:95:76:E8 Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:11:32 +0000 Manifest this update: Mon 03 Nov 2025 07:11:31 +0000 Manifest next update: Mon 10 Nov 2025 07:11:31 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: VuwcyuQsdyG+TptVTcUpSIwe7sxV0NS+tAu0R8wtGlw=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Nov 3 07:11:31 2025 GMT Not After : Nov 10 07:11:31 2025 GMT Subject: CN=690855a4-ddb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:e8:a4:1a:0d:cd:07:3b:da:22:35:4a:49: ae:fa:89:8f:d6:2d:3b:67:84:7d:5a:f8:f8:46:bf: 9e:9f:59:e0:a1:6f:c3:02:81:80:60:77:8c:33:93: d8:70:cd:0b:51:86:dd:01:ed:f4:ae:62:39:00:54: 59:7d:f9:3f:18:17:a8:8f:6a:65:38:b7:20:17:71: ef:12:05:f0:88:00:00:0e:98:64:eb:73:0a:40:a6: b3:17:03:27:f8:47:67:43:06:39:83:29:4f:3e:bd: b8:ba:39:26:f6:6d:ee:b2:0e:ac:13:2d:2d:7a:d8: a8:7f:38:f2:9d:b3:28:9e:bf:1e:12:0c:53:2a:0d: a1:9e:56:44:64:bd:4c:72:bb:cc:ac:c5:58:0f:9f: 31:f3:66:2b:dc:1b:12:80:55:a9:d3:d0:4f:50:7b: 01:29:38:44:ca:3c:86:89:ff:f8:17:58:4e:c4:fd: 3a:4a:f9:ad:05:0e:e4:e9:47:21:bf:df:bb:a5:7c: 05:99:d9:68:8d:f6:c2:21:41:e3:f9:e8:04:86:94: 0d:cd:ef:47:98:48:9c:ff:27:a4:4a:e3:7b:39:c8: df:8b:7f:b2:6d:73:e9:c9:63:37:f3:13:ff:31:07: 24:2d:2a:9a:45:95:48:e9:ab:bc:7e:33:6e:dd:d8: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:B7:4B:72:F2:C8:57:E6:5F:5B:78:0F:16:E1:09:69:95:76:E8 X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:ae:d5:7d:99:1a:ab:cc:de:6b:cb:c9:39:11:81:62:01: 65:55:7b:ad:c6:72:08:06:d5:b0:6c:a8:7b:32:d7:7f:41:d1: 3d:25:f8:7f:8b:d3:73:9f:2a:1e:58:5f:26:89:18:98:76:2a: 87:11:bc:e0:f1:59:31:21:65:6a:66:30:60:d7:c7:71:89:6c: 3a:5d:24:43:5c:20:55:1f:35:ea:7f:87:96:f3:bc:bf:8e:58: 13:18:9b:05:8d:3d:66:7b:20:c0:79:71:2d:86:16:20:2e:d7: 02:ca:8f:e8:52:c0:40:d6:7f:24:75:b6:74:86:e2:89:48:52: 49:ba:ce:ee:23:1d:2e:7f:c9:71:51:16:6a:08:39:f6:ba:08: d7:0e:b0:06:7b:93:f2:9f:cd:86:98:b3:c5:68:05:9e:a5:01: 90:bb:52:b8:6d:a2:58:55:5e:d4:97:6d:62:a8:16:b2:66:e8: 87:f2:c3:dd:36:e4:64:29:4b:23:b0:b1:e4:07:6c:2f:0c:82: 39:c2:5f:08:dc:b3:be:9b:e4:a8:a1:cc:a7:8b:50:09:5c:34: 7a:ad:93:d5:50:1a:9b:38:db:df:6d:90:94:da:07:4c:4f:0b: 0e:d0:fb:3a:91:9f:61:ad:fe:5e:e6:99:0e:c3:25:6a:86:01: 63:ed:ab:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTExMDMwNzExMzFaFw0yNTExMTAwNzExMzFaMBgxFjAUBgNV BAMTDTY5MDg1NWE0LWRkYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/keikGg3NBzvaIjVKSa76iY/WLTtnhH1a+PhGv56fWeChb8MCgYBgd4wzk9hw zQtRht0B7fSuYjkAVFl9+T8YF6iPamU4tyAXce8SBfCIAAAOmGTrcwpAprMXAyf4 R2dDBjmDKU8+vbi6OSb2be6yDqwTLS162Kh/OPKdsyievx4SDFMqDaGeVkRkvUxy u8ysxVgPnzHzZivcGxKAVanT0E9QewEpOETKPIaJ//gXWE7E/TpK+a0FDuTpRyG/ 37ulfAWZ2WiN9sIhQeP56ASGlA3N70eYSJz/J6RK43s5yN+Lf7Jtc+nJYzfzE/8x ByQtKppFlUjpq7x+M27d2I/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU10q3S3Ly yFfmX1t4DxbhCWmVdugwHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsKrtV9mRqrzN5ry8k5EYFiAWVVe63GcggG1bBsqHsy139B0T0l+H+L 03OfKh5YXyaJGJh2KocRvODxWTEhZWpmMGDXx3GJbDpdJENcIFUfNep/h5bzvL+O WBMYmwWNPWZ7IMB5cS2GFiAu1wLKj+hSwEDWfyR1tnSG4olIUkm6zu4jHS5/yXFR FmoIOfa6CNcOsAZ7k/KfzYaYs8VoBZ6lAZC7UrhtolhVXtSXbWKoFrJm6Ifyw902 5GQpSyOwseQHbC8MgjnCXwjcs76b5KihzKeLUAlcNHqtk9VQGps4299tkJTaB0xP Cw7Q+zqRn2Gt/l7mmQ7DJWqGAWPtqz0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:04:43 2025 by rpki-client