$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: ydfAD4AB+DLjrrtwdiJ5gmozvEwn72xn+7L1WuHRmZQ= Subject key identifier: 51:1C:83:B4:B0:56:D3:C7:FC:5A:42:45:1D:66:83:D4:87:BC:75:92 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0A07 Signing time: Tue 04 Nov 2025 19:57:38 +0000 Manifest this update: Tue 04 Nov 2025 19:57:37 +0000 Manifest next update: Tue 11 Nov 2025 19:57:37 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 4WeHoQTir6BqXaLacOBT89BS3tlSnXydnhx0Ls04TW4=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Uf8LYTZNddjyS9MPn91LjVgsJA/mrFvn5q0EDwmn+i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Nov 4 19:57:37 2025 GMT Not After : Nov 11 19:57:37 2025 GMT Subject: CN=690a5ab2-1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:89:db:74:26:fc:86:46:f4:11:41:69:eb: f4:d5:bb:7a:7c:0d:a6:7f:70:31:fe:d0:0e:c9:8d: 2a:0d:1c:ff:55:c8:39:23:02:68:dd:6e:bd:a1:b3: 66:b9:98:c2:52:30:f2:05:26:b7:38:fc:9d:e7:e8: 81:a4:0a:4a:3d:9e:c0:aa:46:aa:48:10:74:5f:3b: 58:42:cd:c1:88:9a:10:7c:5a:63:dc:c9:34:ff:45: d0:e8:7b:aa:da:c5:ee:75:a6:b4:2a:2c:7d:06:2f: de:05:84:61:82:76:26:82:87:fb:b6:ae:6b:a3:79: 39:bf:cf:f7:6d:67:c2:5b:78:77:67:b7:47:4c:2a: 1f:ba:f1:ac:fd:ec:1e:e4:cb:03:21:f1:2d:1d:80: db:96:5b:8a:c4:5f:5f:02:cb:b9:dd:2f:1a:93:5a: ed:02:f9:1d:cb:e9:21:b4:a2:67:8d:b1:87:87:62: 30:93:a1:de:0e:03:20:52:a9:2e:d5:90:d1:72:c0: f5:31:74:08:ea:9b:83:3b:8e:eb:47:2e:cf:17:ed: 8c:7b:68:90:8d:c2:00:e5:de:2b:f7:82:1b:c1:14: 2a:33:a3:29:2e:0d:60:09:0e:a9:15:ed:9a:16:70: 71:41:82:31:ca:8d:e6:98:b9:54:9d:21:60:45:3f: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1C:83:B4:B0:56:D3:C7:FC:5A:42:45:1D:66:83:D4:87:BC:75:92 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3e:17:95:8a:2c:a7:47:03:85:b8:0c:2f:29:5d:7b:e3:ca: 98:83:27:b8:78:b3:87:ae:8a:fa:1c:8b:d9:63:1f:d2:f5:60: 98:8b:4d:ed:75:89:93:6a:54:8d:bb:4d:16:7a:a6:f2:6b:2f: 1c:11:a1:b2:9a:4b:c4:50:65:ff:9c:d3:54:57:51:ee:37:e8: 52:c9:57:56:a2:37:04:26:05:6e:1c:d9:3c:68:8f:2a:cf:25: 74:02:e9:ac:1b:1b:7f:c1:c6:70:78:b8:ef:54:fd:24:49:a6: e0:0d:1b:9c:2a:8d:c7:c8:9f:2a:73:bf:a5:b0:0d:69:36:3c: 0a:ee:5e:69:6a:83:b9:72:3e:61:ae:1d:3b:1c:9c:8f:d5:ee: 15:0e:b2:a5:c4:1c:0f:01:e6:cd:b9:f0:79:62:1c:e9:cc:c0: 3e:13:45:4e:d3:6a:bb:9c:43:04:92:80:d9:7c:72:52:95:b6: 13:d7:31:28:5c:5a:86:1a:74:b1:a2:2c:e2:67:a9:d8:4b:cd: d3:7c:87:8a:08:1c:6f:81:54:87:f2:5c:7c:e5:ee:35:ed:33: a4:bb:73:13:94:ba:20:7a:b8:76:40:a8:ea:3f:16:e5:ef:7d: ce:73:5c:12:73:6e:7e:2f:0a:73:eb:7c:b3:79:55:0e:65:d4: c6:65:94:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUxMTA0MTk1NzM3WhcNMjUxMTExMTk1NzM3WjAYMRYwFAYD VQQDEw02OTBhNWFiMi0xMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2auJ23Qm/IZG9BFBaev01bt6fA2mf3Ax/tAOyY0qDRz/Vcg5IwJo3W69obNm uZjCUjDyBSa3OPyd5+iBpApKPZ7AqkaqSBB0XztYQs3BiJoQfFpj3Mk0/0XQ6Huq 2sXudaa0Kix9Bi/eBYRhgnYmgof7tq5ro3k5v8/3bWfCW3h3Z7dHTCofuvGs/ewe 5MsDIfEtHYDblluKxF9fAsu53S8ak1rtAvkdy+khtKJnjbGHh2Iwk6HeDgMgUqku 1ZDRcsD1MXQI6puDO47rRy7PF+2Me2iQjcIA5d4r94IbwRQqM6MpLg1gCQ6pFe2a FnBxQYIxyo3mmLlUnSFgRT+8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEcg7Sw VtPH/FpCRR1mg9SHvHWSMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvPheViiynRwOFuAwvKV1748qYgye4eLOHror6HIvZYx/S9WCYi03t dYmTalSNu00Weqbyay8cEaGymkvEUGX/nNNUV1HuN+hSyVdWojcEJgVuHNk8aI8q zyV0AumsGxt/wcZweLjvVP0kSabgDRucKo3HyJ8qc7+lsA1pNjwK7l5paoO5cj5h rh07HJyP1e4VDrKlxBwPAebNufB5YhzpzMA+E0VO02q7nEMEkoDZfHJSlbYT1zEo XFqGGnSxoiziZ6nYS83TfIeKCBxvgVSH8lx85e417TOku3MTlLogerh2QKjqPxbl 733Oc1wSc25+Lwpz63yzeVUOZdTGZZQe -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:52 2025 by rpki-client