$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: FdFfQkb+dPbBiAdsNY0twq72z0VtQXu/RDLycPWV+Gw= Subject key identifier: 73:61:B7:34:F9:76:5F:49:C7:F4:F5:4D:4B:92:68:48:84:17:22:7A Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 01C2 Signing time: Wed 05 Nov 2025 03:03:35 +0000 Manifest this update: Wed 05 Nov 2025 03:03:34 +0000 Manifest next update: Wed 12 Nov 2025 03:03:34 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: gnM9/+9Z6AkBGydA5YI9fI2gTONtcXyswwSsdP6x1kg=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Nov 5 03:03:34 2025 GMT Not After : Nov 12 03:03:34 2025 GMT Subject: CN=690abe86-76f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:51:74:84:96:2b:63:c6:de:b7:75:ab:59: 0c:a1:50:34:45:27:58:86:ee:e7:6c:b6:0a:26:90: 2f:79:69:05:a2:ad:14:42:18:9e:e3:71:58:3f:1f: 77:0f:65:cf:7a:c0:76:cb:95:68:d0:0f:f2:42:d2: 25:e5:65:10:8d:b1:da:f9:e2:ac:d7:76:43:c6:f4: 48:40:da:2c:8f:b0:56:9e:dd:b9:f5:f9:47:83:9e: 98:a3:87:14:32:3f:f2:91:88:41:54:49:8e:dc:5b: 88:f8:dc:67:c8:97:50:e3:7f:b9:86:b3:b5:75:20: d2:d8:25:e6:2f:ed:29:c6:f4:95:b4:ab:fb:62:02: 2f:ee:a8:2e:b8:62:cd:da:81:8d:12:71:bd:a8:82: 46:8e:4a:1c:9b:e9:f5:0a:21:78:e7:f7:14:37:2d: 23:2f:30:0d:74:e6:c5:93:d2:58:88:b0:e5:19:f3: 75:3d:e3:79:ea:ac:b1:b4:18:47:ed:4d:38:5c:f0: 26:2c:2d:b9:f3:c9:a3:71:ac:e6:8f:7e:69:49:79: 8d:05:15:64:e3:05:b2:5f:ff:43:76:b5:ff:8b:3a: d5:f0:5b:87:19:35:ce:b1:aa:e5:ac:3c:7d:e6:99: 4d:84:9b:52:4c:db:c4:69:16:07:df:e5:7f:aa:96: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:B7:34:F9:76:5F:49:C7:F4:F5:4D:4B:92:68:48:84:17:22:7A X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9e:d7:5b:d0:f7:ca:2f:46:c2:c3:91:f4:f9:75:a5:dc:91: 9e:9f:8f:c6:b8:e5:cd:5a:83:4c:19:72:07:c4:33:37:71:de: 2b:9e:ce:ea:b8:60:e8:1a:f6:04:de:75:6c:15:7d:3b:40:e2: 74:02:90:3e:77:d8:c4:ee:4a:d8:80:e6:59:5d:15:ae:dd:28: 83:d5:42:e7:84:5e:0c:df:87:77:53:d6:b6:f9:7b:4e:8e:52: 6c:f8:6a:7b:3a:02:cd:e5:96:85:fd:20:f9:b8:bb:de:70:e2: 1c:b5:5f:7c:38:32:a5:54:8a:62:d7:1e:3e:89:79:ab:cb:32: 1b:5b:3b:c6:eb:09:49:f2:05:22:be:05:a6:e6:d6:45:7d:05: ff:f3:e7:85:1b:73:c0:92:32:05:43:7d:c0:70:c2:d0:fc:26: 16:fe:59:40:a4:14:2e:dd:f0:10:3e:41:73:4f:59:9f:f4:84: 75:03:be:c3:94:42:51:60:fe:c6:d7:7b:bb:e2:ec:a4:aa:90: 6a:92:f0:dc:5f:0f:0a:b5:89:da:1f:d3:61:53:73:a2:91:50: d4:da:e4:66:05:8e:bc:60:aa:77:15:3a:3f:e8:2a:05:15:66: a7:6e:0f:a0:eb:46:99:1b:c9:a0:d2:7d:18:c5:0a:11:d7:25: 53:51:db:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUxMTA1MDMwMzM0WhcNMjUxMTEyMDMwMzM0WjAYMRYwFAYD VQQDEw02OTBhYmU4Ni03NmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zNRdISWK2PG3rd1q1kMoVA0RSdYhu7nbLYKJpAveWkFoq0UQhie43FYPx93 D2XPesB2y5Vo0A/yQtIl5WUQjbHa+eKs13ZDxvRIQNosj7BWnt259flHg56Yo4cU Mj/ykYhBVEmO3FuI+NxnyJdQ43+5hrO1dSDS2CXmL+0pxvSVtKv7YgIv7qguuGLN 2oGNEnG9qIJGjkocm+n1CiF45/cUNy0jLzANdObFk9JYiLDlGfN1PeN56qyxtBhH 7U04XPAmLC2588mjcazmj35pSXmNBRVk4wWyX/9DdrX/izrV8FuHGTXOsarlrDx9 5plNhJtSTNvEaRYH3+V/qpb9YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNhtzT5 dl9Jx/T1TUuSaEiEFyJ6MB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASntdb0PfKL0bCw5H0+XWl3JGen4/GuOXNWoNMGXIHxDM3cd4rns7q uGDoGvYE3nVsFX07QOJ0ApA+d9jE7krYgOZZXRWu3SiD1ULnhF4M34d3U9a2+XtO jlJs+Gp7OgLN5ZaF/SD5uLvecOIctV98ODKlVIpi1x4+iXmryzIbWzvG6wlJ8gUi vgWm5tZFfQX/8+eFG3PAkjIFQ33AcMLQ/CYW/llApBQu3fAQPkFzT1mf9IR1A77D lEJRYP7G13u74uykqpBqkvDcXw8KtYnaH9NhU3OikVDU2uRmBY68YKp3FTo/6CoF FWanbg+g60aZG8mg0n0YxQoR1yVTUdsb -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:43 2025 by rpki-client