$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: R3paFIXq5lSd7Etgd4Tt9PIFdRtmwH2PiozaMAA9GFw= Subject key identifier: 58:75:2B:FF:02:09:BB:36:00:D5:51:41:DA:4A:EA:EC:4E:7C:B5:1B Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 0684 Signing time: Tue 04 Nov 2025 22:33:25 +0000 Manifest this update: Tue 04 Nov 2025 22:33:25 +0000 Manifest next update: Tue 11 Nov 2025 22:33:25 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: ZIuSVX8JEd3q9+bBWgEJsJE+470hnu7hP6qRJuSrjCA=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Nov 4 22:33:25 2025 GMT Not After : Nov 11 22:33:25 2025 GMT Subject: CN=690a7f35-7d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:fa:7f:cf:c0:fe:db:60:dd:5e:c5:61:57: 13:fd:4c:7d:0c:ab:88:a5:74:0c:26:fa:d1:32:fa: 61:78:0f:eb:24:2a:c0:4b:73:99:79:5b:be:77:1e: 04:13:0b:44:a1:21:5c:4a:67:1b:a9:8e:59:57:b8: 90:74:ca:65:ad:cb:a7:a1:36:0c:67:cd:f8:68:16: 8b:42:21:33:0c:dd:2f:67:9e:d4:98:47:00:79:48: 6a:ad:67:b9:40:58:a8:98:6b:d1:fd:e9:ce:0f:f0: b8:92:7d:1b:11:95:88:9e:d9:f0:b4:a1:03:ee:24: 18:9b:f1:4c:85:33:33:7c:fb:b9:63:77:75:4c:4f: f4:eb:6d:42:4d:70:fd:42:49:9a:26:d9:f7:4a:4f: 32:3e:59:88:b3:36:b6:e0:1a:b5:8d:34:27:c4:ea: 9a:42:5f:ac:66:1a:55:b4:00:79:97:d7:59:00:87: 02:8d:82:c1:12:57:3f:98:cb:10:3b:f6:d6:ae:62: ca:05:af:fd:6e:28:7b:9f:59:1b:43:c4:67:05:09: fc:8b:fa:8a:b0:6d:b0:4b:b2:75:9b:4f:24:19:41: 26:9f:63:b2:08:87:ee:78:70:54:d8:15:cd:68:0b: ef:6b:fe:b1:b7:9f:db:50:fd:6a:a1:54:4a:44:71: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:75:2B:FF:02:09:BB:36:00:D5:51:41:DA:4A:EA:EC:4E:7C:B5:1B X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:2a:34:3d:71:41:75:e6:ab:1b:d3:78:97:fb:95:64:9e: 5e:69:b8:0d:c9:9e:9e:02:7c:f9:e6:f4:f3:70:8e:d9:79:53: e7:e2:43:9b:1c:c8:c8:07:e9:d1:52:b0:4b:0e:56:4b:f0:d2: d4:15:90:e8:82:1f:89:25:64:8a:2c:a8:9a:ff:88:3a:61:40: 93:32:85:25:47:f3:61:10:ce:e7:4e:d8:63:a7:ea:06:aa:19: 16:b1:cc:8a:94:de:71:df:aa:5d:64:03:8b:5f:84:b9:6d:ff: 75:0f:31:00:2f:a5:88:77:75:ea:95:de:92:22:ec:d4:5b:b9: 20:4e:27:ec:52:fc:94:5e:1a:96:ab:b5:f7:16:fc:16:22:28: aa:e1:4c:db:77:dc:6d:5e:e2:00:d6:26:64:1b:fb:6f:9a:d2: 3a:51:b3:96:91:cf:ac:39:19:27:5e:ec:2e:fb:bb:34:78:d3: 82:cb:47:6e:e7:b1:6f:73:1d:df:22:a1:a6:1c:40:b3:8c:ec: 2f:d1:72:08:ba:b6:52:89:6c:4b:6e:fb:e9:2f:05:9d:67:dc: a0:d9:a8:65:c3:c5:d6:fa:c3:45:5d:19:20:bc:b0:69:ba:13: 47:38:65:21:8b:c7:5f:8f:69:d4:d0:a6:4d:32:cf:6c:5f:3c: 3b:fa:71:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUxMTA0MjIzMzI1WhcNMjUxMTExMjIzMzI1WjAYMRYwFAYD VQQDEw02OTBhN2YzNS03ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YH6f8/A/ttg3V7FYVcT/Ux9DKuIpXQMJvrRMvpheA/rJCrAS3OZeVu+dx4E EwtEoSFcSmcbqY5ZV7iQdMplrcunoTYMZ834aBaLQiEzDN0vZ57UmEcAeUhqrWe5 QFiomGvR/enOD/C4kn0bEZWIntnwtKED7iQYm/FMhTMzfPu5Y3d1TE/0621CTXD9 QkmaJtn3Sk8yPlmIsza24Bq1jTQnxOqaQl+sZhpVtAB5l9dZAIcCjYLBElc/mMsQ O/bWrmLKBa/9bih7n1kbQ8RnBQn8i/qKsG2wS7J1m08kGUEmn2OyCIfueHBU2BXN aAvva/6xt5/bUP1qoVRKRHGkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh1K/8C Cbs2ANVRQdpK6uxOfLUbMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8yo0PXFBdearG9N4l/uVZJ5eabgNyZ6eAnz55vTzcI7ZeVPn4kOb HMjIB+nRUrBLDlZL8NLUFZDogh+JJWSKLKia/4g6YUCTMoUlR/NhEM7nTthjp+oG qhkWscyKlN5x36pdZAOLX4S5bf91DzEAL6WId3Xqld6SIuzUW7kgTifsUvyUXhqW q7X3FvwWIiiq4Uzbd9xtXuIA1iZkG/tvmtI6UbOWkc+sORknXuwu+7s0eNOCy0du 57Fvcx3fIqGmHECzjOwv0XIIurZSiWxLbvvpLwWdZ9yg2ahlw8XW+sNFXRkgvLBp uhNHOGUhi8dfj2nU0KZNMs9sXzw7+nGt -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:46 2025 by rpki-client