$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: tY+qbMYHxlQYYPi1dcwBMdCKb4bB/OyEQ1tM5t/htPY= Subject key identifier: 59:70:0E:7D:12:A5:AC:42:CD:78:15:0D:89:1B:70:B3:8B:4E:AE:0D Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0291 Signing time: Wed 05 Nov 2025 01:41:41 +0000 Manifest this update: Wed 05 Nov 2025 01:41:40 +0000 Manifest next update: Wed 12 Nov 2025 01:41:40 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: SQOm7fWwHlmL0P7au9r9VuCJc89uK4/2ghJQx+pyoTg=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: Gd3YdHnjs3GomfsLXB7V2s5MnsZ5Cz1aSKAf6PWppgE=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: sW/xU2xd7gm9tlqUAnfY9Als6pZN4jL2w2smoAHwp6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Nov 5 01:41:40 2025 GMT Not After : Nov 12 01:41:40 2025 GMT Subject: CN=690aab54-4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:d3:2f:6a:2c:0a:07:f3:0b:7e:4e:26:b9: ff:67:98:b5:3e:e1:ee:58:e8:36:82:50:13:56:cc: c3:de:63:d9:c4:a1:68:3e:83:40:d4:b8:6a:2a:30: 6c:7b:bd:bd:2e:1e:b2:d2:56:46:40:f1:4f:82:7b: 72:21:28:89:b9:89:46:67:d3:0a:33:f5:b1:3e:e8: bb:a1:e6:78:2f:c4:9b:bb:0a:ab:82:4c:4e:9a:10: 55:f9:17:a9:fb:32:3e:13:51:c5:0a:b1:6b:41:63: 8e:6f:53:85:93:57:33:78:88:2f:f8:5a:6d:dc:88: 84:07:f7:c2:3b:aa:9a:62:13:ab:81:77:c5:f3:15: b1:95:84:d0:62:37:eb:5f:00:1d:bf:9e:b9:59:9f: 71:7c:ff:95:17:f3:54:c3:d0:cf:4a:cc:ab:45:94: b6:ac:9b:d2:84:8e:0d:22:bf:b3:83:49:aa:3e:89: b1:d6:8b:31:a2:92:b8:4d:a3:95:19:49:22:2d:41: 4d:d2:51:3a:87:97:a8:19:85:a8:5e:2a:0a:0d:f8: 94:20:f2:50:f3:8a:5c:b6:9e:e1:0a:21:df:ef:46: 2c:c9:64:99:60:25:31:3f:d3:0a:52:74:a9:ad:b8: 74:6d:3f:a6:4f:c5:6d:a2:35:39:90:d7:05:f7:f3: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:0E:7D:12:A5:AC:42:CD:78:15:0D:89:1B:70:B3:8B:4E:AE:0D X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ff:af:41:82:b1:59:21:df:07:db:14:b4:54:8c:7c:fc:b7: 95:20:32:35:e8:4a:94:46:c5:e5:d1:02:08:5e:12:8d:67:5d: 38:c6:ae:18:b5:c1:18:5c:15:ce:bc:35:20:c8:5c:02:9c:c6: 36:19:6f:17:9f:64:d2:e8:53:6d:06:b5:1f:7a:8a:8a:93:71: 65:bb:2f:fb:83:1c:a2:63:b8:dc:45:0c:0c:fb:09:29:79:53: 9a:96:90:7a:68:78:3a:30:9f:8c:f7:62:1d:4f:34:9e:99:9e: ff:56:9c:36:64:14:b4:6f:57:b0:75:4f:11:6b:cf:00:77:c8: 97:0f:2b:18:e7:cf:0d:dc:ea:d6:c0:a1:a0:5c:9c:91:f5:da: 89:13:cd:00:dd:a7:29:97:0a:f9:34:79:b4:41:94:9d:32:97: bb:38:90:46:2d:ff:27:93:4c:b0:c5:a8:e2:54:94:82:12:3b: 74:5d:89:27:50:f0:1a:f9:b2:01:67:64:4e:d6:f3:44:26:01: 75:bf:38:6e:49:67:b9:51:a4:c1:9c:e3:6d:3d:eb:81:ac:5f: 5b:7a:3c:30:13:6e:96:3a:d2:b6:14:6f:d3:72:f8:5a:ef:34: c8:d7:7b:1f:24:a9:69:73:c3:2e:95:4d:b3:80:98:cf:a3:03: 6f:47:ce:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUxMTA1MDE0MTQwWhcNMjUxMTEyMDE0MTQwWjAYMRYwFAYD VQQDEw02OTBhYWI1NC00MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdDTL2osCgfzC35OJrn/Z5i1PuHuWOg2glATVszD3mPZxKFoPoNA1LhqKjBs e729Lh6y0lZGQPFPgntyISiJuYlGZ9MKM/WxPui7oeZ4L8SbuwqrgkxOmhBV+Rep +zI+E1HFCrFrQWOOb1OFk1czeIgv+Fpt3IiEB/fCO6qaYhOrgXfF8xWxlYTQYjfr XwAdv565WZ9xfP+VF/NUw9DPSsyrRZS2rJvShI4NIr+zg0mqPomx1osxopK4TaOV GUkiLUFN0lE6h5eoGYWoXioKDfiUIPJQ84pctp7hCiHf70YsyWSZYCUxP9MKUnSp rbh0bT+mT8VtojU5kNcF9/PaBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlwDn0S paxCzXgVDYkbcLOLTq4NMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl/69BgrFZId8H2xS0VIx8/LeVIDI16EqURsXl0QIIXhKNZ104xq4Y tcEYXBXOvDUgyFwCnMY2GW8Xn2TS6FNtBrUfeoqKk3Fluy/7gxyiY7jcRQwM+wkp eVOalpB6aHg6MJ+M92IdTzSemZ7/Vpw2ZBS0b1ewdU8Ra88Ad8iXDysY588N3OrW wKGgXJyR9dqJE80A3acplwr5NHm0QZSdMpe7OJBGLf8nk0ywxajiVJSCEjt0XYkn UPAa+bIBZ2RO1vNEJgF1vzhuSWe5UaTBnONtPeuBrF9bejwwE26WOtK2FG/Tcvha 7zTI13sfJKlpc8MulU2zgJjPowNvR86x -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:29 2025 by rpki-client