$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: uQKcZLYKOWICtb+a8lyiDqJmWpy69/hIVns2yse5ZBc= Subject key identifier: 06:26:50:9F:25:B7:8C:96:7D:EA:9B:DD:94:89:39:44:52:AD:06:7F Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0CBA Signing time: Tue 04 Nov 2025 18:22:05 +0000 Manifest this update: Tue 04 Nov 2025 18:22:05 +0000 Manifest next update: Tue 11 Nov 2025 18:22:05 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: Zw4E+sUsQZ67vxkoosLjmVtLi+OMj5FDR4s2bxmnYtc=) 2: E8F85ED4EC5811EFA9B9C618C4F9AE02.roa (hash: ykoz29uCG/11xDnxQBhHvrkmfn5Ejy8eSvfC/XRGcV0=) 3: 47DADED8EC5211EFBF551F6DC4F9AE02.roa (hash: Ns3EqlAuypXsdC/A5rNqIcQNoK/ntkU/96rQkctaiRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Nov 4 18:22:05 2025 GMT Not After : Nov 11 18:22:05 2025 GMT Subject: CN=690a444d-1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:8b:18:d0:32:5d:57:99:13:a1:64:f2:99: 44:12:b4:fa:43:3e:9b:f5:a2:54:4c:39:38:f9:49: 6d:88:b6:87:ff:b2:ad:c8:ab:9b:82:05:41:31:5e: b2:6a:2d:e7:a7:0a:e5:ab:bc:02:48:39:41:3e:14: 00:dd:33:7e:77:05:86:42:36:c5:d0:ca:9b:7a:4f: 43:3e:bc:e4:31:97:b1:0d:a6:6c:1c:02:65:57:0e: ef:46:02:28:5e:2a:14:07:64:ba:de:d0:c1:8b:94: 9f:64:30:f9:38:9c:2b:d7:92:1a:fb:dc:ed:1d:fc: ee:a1:de:16:6d:d6:ba:bd:9b:eb:91:d4:ed:dc:de: 81:93:56:15:99:13:d0:cd:91:40:aa:79:69:46:fb: f0:fe:ce:4b:dc:4e:53:f2:d1:71:18:6d:60:e9:1a: f8:1e:4c:18:31:c3:9a:a3:79:f8:74:8d:24:74:36: 87:ab:2b:f6:c7:98:5b:d7:b5:49:15:e3:49:64:f5: 27:b4:3c:10:30:91:45:4f:0b:6a:27:a8:57:43:a4: bd:ca:88:94:ca:48:e9:d9:bf:c2:82:ad:5c:8a:57: 97:15:0f:bd:8f:2e:f6:9e:1f:f1:9a:09:e0:2f:b8: a4:5e:af:10:95:32:cc:96:e5:16:73:16:e2:b7:22: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:50:9F:25:B7:8C:96:7D:EA:9B:DD:94:89:39:44:52:AD:06:7F X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:5a:2d:37:e1:73:e4:f6:e3:0b:85:73:92:fd:0e:38:3c: ba:86:3f:fd:4b:42:aa:45:fe:a6:05:02:91:84:2a:c6:4a:5a: ac:d1:8a:f3:a6:4d:70:32:33:1a:59:30:da:2c:a1:af:26:c9: bb:e3:ec:38:da:96:bd:7e:5a:c1:72:54:56:ae:1e:e4:65:c7: 84:5c:fe:31:e4:24:ad:91:d8:cc:b9:1b:32:2c:e4:23:7b:03: 14:58:a1:7d:ab:2d:20:06:71:d9:91:93:18:b7:f8:2d:83:6f: 68:e6:85:ef:91:76:c6:c2:8c:e9:0b:5f:d0:e9:86:a3:4c:94: 6c:9d:58:73:3a:09:64:3c:bc:b8:8d:b8:a9:e4:6d:76:50:4a: d7:55:46:ce:52:87:27:ea:44:32:9a:80:55:5e:fc:f6:7d:b0: e4:82:dd:84:66:af:16:d4:40:8e:b9:32:fd:6b:5d:2c:22:ba: 31:d0:4b:00:be:77:60:1c:87:6b:95:24:65:bd:43:38:cc:15: 0e:03:95:d0:f8:39:1b:26:fa:9f:5d:0a:4b:8f:5f:49:fa:98: d4:0e:c1:dd:64:1f:06:3e:3d:37:9c:dd:86:6c:40:13:01:ca: 7f:8d:f7:83:e8:e1:da:93:e9:e8:3a:87:69:95:95:d7:3b:ec: 7e:62:4e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUxMTA0MTgyMjA1WhcNMjUxMTExMTgyMjA1WjAYMRYwFAYD VQQDEw02OTBhNDQ0ZC0xMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jWLGNAyXVeZE6Fk8plEErT6Qz6b9aJUTDk4+UltiLaH/7KtyKubggVBMV6y ai3npwrlq7wCSDlBPhQA3TN+dwWGQjbF0Mqbek9DPrzkMZexDaZsHAJlVw7vRgIo XioUB2S63tDBi5SfZDD5OJwr15Ia+9ztHfzuod4Wbda6vZvrkdTt3N6Bk1YVmRPQ zZFAqnlpRvvw/s5L3E5T8tFxGG1g6Rr4HkwYMcOao3n4dI0kdDaHqyv2x5hb17VJ FeNJZPUntDwQMJFFTwtqJ6hXQ6S9yoiUykjp2b/Cgq1cileXFQ+9jy72nh/xmgng L7ikXq8QlTLMluUWcxbityLtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYmUJ8l t4yWfeqb3ZSJOURSrQZ/MB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOclotN+Fz5PbjC4Vzkv0OODy6hj/9S0KqRf6mBQKRhCrGSlqs0Yrz pk1wMjMaWTDaLKGvJsm74+w42pa9flrBclRWrh7kZceEXP4x5CStkdjMuRsyLOQj ewMUWKF9qy0gBnHZkZMYt/gtg29o5oXvkXbGwozpC1/Q6YajTJRsnVhzOglkPLy4 jbip5G12UErXVUbOUocn6kQymoBVXvz2fbDkgt2EZq8W1ECOuTL9a10sIrox0EsA vndgHIdrlSRlvUM4zBUOA5XQ+DkbJvqfXQpLj19J+pjUDsHdZB8GPj03nN2GbEAT Acp/jfeD6OHak+noOodplZXXO+x+Yk67 -----END CERTIFICATE-----Generated at Thu Nov 6 00:25:59 2025 by rpki-client