$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: S4DisJcxEKW+0nkyxYRPQ4iU0R2++LqrGfLN0iJKWiM= Subject key identifier: FA:54:30:AE:D4:88:81:A9:6A:E8:B8:F1:43:F2:7F:F2:44:2E:4C:99 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C5A Signing time: Tue 04 Nov 2025 18:41:08 +0000 Manifest this update: Tue 04 Nov 2025 18:41:08 +0000 Manifest next update: Tue 11 Nov 2025 18:41:08 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: M+JxGvhbpKuOY7pruFSk51MWNseZ6DiFq/DrDud9F4E=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Nov 4 18:41:08 2025 GMT Not After : Nov 11 18:41:08 2025 GMT Subject: CN=690a48c4-ff3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:ae:cd:b3:45:7e:45:6b:35:fd:40:ce:ba: f4:8d:0e:9f:db:f0:3c:41:23:05:f8:c5:f5:9a:47: ae:d4:74:3d:d5:7d:0f:2a:65:73:fd:60:ba:e3:74: 6d:d4:fb:16:42:4d:fb:a0:88:1f:0e:fb:f2:c6:b3: 28:70:6e:34:f0:7c:e0:51:fb:a0:25:38:94:79:fe: f0:b4:3a:d0:4a:2e:d3:8e:a5:8e:d0:1a:5b:e7:5c: 41:75:1e:59:90:2c:2a:97:5c:10:7b:5a:6d:f3:3b: 4e:20:f9:06:b1:58:5d:b9:d3:c1:02:54:b6:36:c6: 55:c4:d5:c6:79:f4:76:15:a9:f2:e3:18:9d:3c:7d: 88:2c:57:ac:10:15:49:7b:6e:74:f3:2c:aa:02:f1: 6a:94:89:04:1d:44:ca:c3:b8:ee:6f:ee:11:c3:58: 26:53:ad:7a:e4:08:1c:95:43:14:2f:72:ce:2d:7c: fa:dd:f1:dc:16:55:4b:7c:11:42:fd:8e:35:71:b0: 5e:a9:f2:ee:86:fd:38:7a:2c:ec:93:b0:f4:4a:32: a3:3b:ab:a6:d0:b1:43:13:69:4f:5e:4c:6c:7c:01: cb:b9:60:80:4b:47:59:f2:67:f4:b0:31:33:1f:fe: 6b:04:cb:8e:e6:81:e6:9a:0d:cc:44:37:b0:d3:bb: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:30:AE:D4:88:81:A9:6A:E8:B8:F1:43:F2:7F:F2:44:2E:4C:99 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e9:0b:1a:53:40:45:89:56:4f:48:f6:8d:30:0a:35:df:03: 6c:09:5e:cd:a7:50:1c:04:b0:c2:6b:7f:e0:3c:2c:f2:4d:a0: 57:ba:a3:db:a2:f0:46:39:64:03:cc:1a:7d:03:fb:3d:d9:e3: 22:19:e6:1d:c6:21:36:ea:35:9a:1c:04:f3:68:aa:3e:8d:6e: 5b:ac:8b:04:93:bd:eb:8e:f9:5d:f5:9f:49:f3:8f:e8:f7:6a: f6:29:b5:a4:68:c6:84:f0:02:49:a1:b5:1f:ad:dc:d9:0c:1c: a0:00:cc:00:cb:bd:85:37:19:02:7c:a0:b3:b0:c3:9e:c7:9a: 48:a4:b1:f6:23:8c:97:c0:95:90:66:e3:1a:b6:d4:98:6f:15: dd:a7:94:f4:09:e6:cd:b0:1c:0b:74:88:cb:44:27:00:5e:0d: c6:54:90:5d:65:3a:a3:2c:fe:a1:14:58:36:a3:e8:b5:fe:73: b6:04:b5:44:ce:ae:61:4f:d6:d0:88:17:6d:51:a8:17:01:9b: b5:1d:ff:fd:11:5a:dc:58:19:0c:fa:6e:b3:57:95:ac:b0:9b: d2:4a:2d:38:01:da:f4:34:6c:69:b6:4d:18:1b:74:4b:c8:2f: 59:15:be:0c:40:d7:ae:47:45:ee:54:a7:a7:6c:0b:d6:e3:21: 2f:3c:48:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUxMTA0MTg0MTA4WhcNMjUxMTExMTg0MTA4WjAYMRYwFAYD VQQDEw02OTBhNDhjNC1mZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLyuzbNFfkVrNf1Azrr0jQ6f2/A8QSMF+MX1mkeu1HQ91X0PKmVz/WC643Rt 1PsWQk37oIgfDvvyxrMocG408HzgUfugJTiUef7wtDrQSi7TjqWO0Bpb51xBdR5Z kCwql1wQe1pt8ztOIPkGsVhdudPBAlS2NsZVxNXGefR2Fany4xidPH2ILFesEBVJ e2508yyqAvFqlIkEHUTKw7jub+4Rw1gmU6165AgclUMUL3LOLXz63fHcFlVLfBFC /Y41cbBeqfLuhv04eizsk7D0SjKjO6um0LFDE2lPXkxsfAHLuWCAS0dZ8mf0sDEz H/5rBMuO5oHmmg3MRDew07v8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpUMK7U iIGpaui48UPyf/JELkyZMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf6QsaU0BFiVZPSPaNMAo13wNsCV7Np1AcBLDCa3/gPCzyTaBXuqPb ovBGOWQDzBp9A/s92eMiGeYdxiE26jWaHATzaKo+jW5brIsEk73rjvld9Z9J84/o 92r2KbWkaMaE8AJJobUfrdzZDBygAMwAy72FNxkCfKCzsMOex5pIpLH2I4yXwJWQ ZuMattSYbxXdp5T0CebNsBwLdIjLRCcAXg3GVJBdZTqjLP6hFFg2o+i1/nO2BLVE zq5hT9bQiBdtUagXAZu1Hf/9EVrcWBkM+m6zV5WssJvSSi04Adr0NGxptk0YG3RL yC9ZFb4MQNeuR0XuVKenbAvW4yEvPEgN -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:00 2025 by rpki-client