$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: +RjeSI3FKJS2AyRHpoh1pY3Yu4fgxBH0QcYdGNF8tO8= Subject key identifier: 4A:5A:B8:6D:D5:9C:98:22:F4:04:8B:68:38:62:0B:0D:B0:2D:7A:2F Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 0110 Signing time: Mon 03 Nov 2025 04:56:18 +0000 Manifest this update: Mon 03 Nov 2025 04:56:17 +0000 Manifest next update: Mon 10 Nov 2025 04:56:17 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: WBddBi9L1ylneE2yO2NdjjJYGaeyybgKpvKS7XsFT9I=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: DqAscZot5tvFIRSwhun0FkboyMxWikjQ2XKpTFYg9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Nov 3 04:56:17 2025 GMT Not After : Nov 10 04:56:17 2025 GMT Subject: CN=690835f1-356f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:99:c9:7b:74:9d:b2:1c:6e:fc:e9:a0:71: e9:07:ca:c8:58:cd:a8:b1:e1:ab:dc:cc:10:91:f1: 5d:2f:f0:4f:ff:05:89:ec:87:81:12:62:64:d8:c5: 76:62:1e:c6:1d:8f:87:d4:7c:cb:80:8f:db:ed:ae: 9e:cd:4b:ff:f7:65:36:af:92:dc:e6:3f:c8:ed:30: a1:04:d5:bd:91:74:d2:6c:92:cf:ca:0d:d3:33:85: d0:24:c4:71:c4:8e:cf:bf:96:2c:cc:64:06:be:5a: 7c:b1:76:77:d2:31:b3:22:2d:b7:c5:ea:02:dd:8a: 1a:c8:70:b0:48:2d:d9:b4:f7:cc:85:18:1d:5a:4d: fc:c4:ac:08:fd:4f:53:18:fa:d2:1a:0a:ff:2a:ba: 4d:cc:2f:4a:06:41:b6:14:a8:fc:47:cd:41:6d:d9: e1:84:e2:65:49:46:58:51:97:81:93:44:6f:5b:30: f7:46:7c:32:0b:0e:3f:bd:78:ec:a6:2a:d2:a7:b0: 22:85:66:92:96:22:ec:78:fd:ab:35:ce:59:56:22: 33:7a:63:45:01:2a:88:c9:a4:af:68:ea:3f:38:d5: 20:5c:eb:b0:f4:15:51:09:c5:48:d8:a5:73:29:cb: 44:5c:71:5e:59:44:ac:90:2a:53:bb:a8:2e:6f:0b: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5A:B8:6D:D5:9C:98:22:F4:04:8B:68:38:62:0B:0D:B0:2D:7A:2F X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:26:91:68:53:d6:9d:66:94:5c:ad:c2:d8:59:7d:67:68:3d: df:e6:a7:a0:26:78:fd:cd:5c:cd:7b:f6:e6:fe:5b:2e:a2:47: 4b:9b:4f:10:7c:82:be:fa:b8:00:9e:6f:0e:e7:40:a0:90:f8: aa:3f:7b:09:c3:86:71:d4:da:22:0c:cb:40:6c:e7:43:a1:ae: 3b:16:eb:99:b4:c2:5d:b1:88:e1:ff:73:c4:45:78:62:57:1d: df:8e:a0:07:82:02:02:b7:e1:0f:79:78:70:49:8e:0c:10:0c: 42:6e:47:0e:01:ea:cc:c2:08:a4:43:f2:f7:00:60:28:b8:39: 0b:dc:ec:a8:13:95:95:8c:49:34:7c:51:44:e6:4e:da:33:6c: b9:d8:c4:46:af:61:30:41:e8:e8:97:3c:2d:a7:61:77:fa:fe: de:d6:55:53:a1:d6:7f:ed:41:33:3e:96:b2:8d:9f:64:1c:46: ff:aa:0f:9e:17:8b:a0:e4:a2:64:08:c8:c7:7b:72:ab:d3:8e: 7d:53:d2:1a:94:72:82:02:0b:b9:89:a7:a7:13:3b:64:e4:69: c3:64:0b:40:f8:90:ec:6c:d4:50:09:84:93:1a:d7:77:50:b3: 1d:0c:32:13:41:2e:8e:53:3e:ee:4c:d7:bf:9d:29:4d:31:73: 05:a2:ea:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUxMTAzMDQ1NjE3WhcNMjUxMTEwMDQ1NjE3WjAYMRYwFAYD VQQDEw02OTA4MzVmMS0zNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk6ZyXt0nbIcbvzpoHHpB8rIWM2oseGr3MwQkfFdL/BP/wWJ7IeBEmJk2MV2 Yh7GHY+H1HzLgI/b7a6ezUv/92U2r5Lc5j/I7TChBNW9kXTSbJLPyg3TM4XQJMRx xI7Pv5YszGQGvlp8sXZ30jGzIi23xeoC3YoayHCwSC3ZtPfMhRgdWk38xKwI/U9T GPrSGgr/KrpNzC9KBkG2FKj8R81BbdnhhOJlSUZYUZeBk0RvWzD3RnwyCw4/vXjs pirSp7AihWaSliLseP2rNc5ZViIzemNFASqIyaSvaOo/ONUgXOuw9BVRCcVI2KVz KctEXHFeWUSskCpTu6gubwuxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpauG3V nJgi9ASLaDhiCw2wLXovMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlJpFoU9adZpRcrcLYWX1naD3f5qegJnj9zVzNe/bm/lsuokdLm08Q fIK++rgAnm8O50CgkPiqP3sJw4Zx1NoiDMtAbOdDoa47FuuZtMJdsYjh/3PERXhi Vx3fjqAHggICt+EPeXhwSY4MEAxCbkcOAerMwgikQ/L3AGAouDkL3OyoE5WVjEk0 fFFE5k7aM2y52MRGr2EwQejolzwtp2F3+v7e1lVTodZ/7UEzPpayjZ9kHEb/qg+e F4ug5KJkCMjHe3Kr0459U9IalHKCAgu5iaenEztk5GnDZAtA+JDsbNRQCYSTGtd3 ULMdDDITQS6OUz7uTNe/nSlNMXMFourN -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:17 2025 by rpki-client