$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: WxlM7ztbhX1bWs/W93hvgb9KVE1gf7tth0wNx5OeGgM= Subject key identifier: D8:16:0A:34:F6:5D:71:A2:96:6C:9F:FB:78:C6:A1:E4:4C:FE:B7:E8 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 351C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34F7 Signing time: Tue 04 Nov 2025 14:32:05 +0000 Manifest this update: Tue 04 Nov 2025 14:32:05 +0000 Manifest next update: Tue 11 Nov 2025 14:32:05 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: 5wD5UuMLt4NmOVTQ1j3hZNkILewD3QYh2DpCI8anU3M=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13596 (0x351c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Nov 4 14:32:05 2025 GMT Not After : Nov 11 14:32:05 2025 GMT Subject: CN=690a0e65-36c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:71:f3:33:61:a6:77:77:24:45:63:7a:ff: a2:ff:31:85:4f:7b:17:85:2f:a2:fb:ce:67:3a:91: 90:54:b5:f0:93:9c:f4:77:91:36:f9:c0:b0:6e:8e: b5:d2:4a:b3:8d:06:ed:18:51:fb:fb:45:c2:4c:9b: 40:5d:e2:1f:91:c7:07:46:1e:90:8e:2d:c9:24:d4: f7:a2:c5:4e:59:2b:1e:e7:c0:60:c7:39:c9:9d:91: f4:2d:e7:a5:93:c9:ec:06:6a:0c:0b:30:b8:00:70: 6f:56:ac:63:e0:a5:ad:f4:10:c7:ff:3d:49:ce:16: d1:c2:2e:2e:c5:93:73:66:85:39:22:16:78:13:fd: 2f:6e:23:37:ee:9c:d9:de:fa:47:ae:8b:c5:72:8c: 62:9a:6d:1b:22:73:04:bc:96:88:dd:07:f4:90:7f: 8d:aa:f8:58:4b:d1:05:95:4a:28:2a:4d:bc:ec:9b: ea:c7:eb:dd:42:19:d8:0c:04:14:6e:bc:f8:f0:a8: 4c:71:1d:45:76:d3:04:26:06:66:a1:fe:f7:a4:69: 32:80:f7:5c:2a:d2:aa:05:8e:e8:9d:16:9d:6a:ef: 31:1f:14:98:14:d9:fd:81:64:a7:83:48:ce:10:72: 15:66:88:2b:f8:61:72:82:0b:f6:ff:0b:b3:38:e4: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:16:0A:34:F6:5D:71:A2:96:6C:9F:FB:78:C6:A1:E4:4C:FE:B7:E8 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:ad:68:98:49:77:4d:09:a8:a6:f5:bd:89:1d:a3:e2:3d: 73:ba:a8:d3:a5:52:d0:b2:78:8d:9c:1b:e4:c4:81:f9:6c:39: 48:2c:7f:65:89:a3:f8:aa:bb:7b:38:ef:d3:f5:e9:d1:7c:08: 03:04:68:37:65:af:85:57:4c:22:ec:b7:48:94:7b:76:52:1d: 5d:1e:dd:0d:6b:d1:a5:e1:c2:c0:e7:9f:04:67:34:42:c1:c1: 08:ca:26:b7:da:d6:7c:e3:02:ed:e0:c1:8c:5a:c2:9b:d1:90: 50:cb:e1:fd:aa:ea:0b:7b:06:82:02:62:c4:41:e2:0a:1b:1d: 3c:51:f7:58:bd:55:8f:33:1b:13:ac:f2:a6:84:f7:d4:38:a6: 84:b4:ee:76:f9:46:7a:eb:ca:65:35:d4:97:45:e7:ce:2c:b4: 88:fc:a9:4c:48:6b:b6:d5:90:56:47:cd:a5:06:f0:d0:8d:fd: 96:0f:d2:a6:60:18:61:87:1a:f5:b8:93:cc:97:73:ed:c4:35: 02:40:db:76:8c:ec:65:c8:c9:21:8b:ee:e5:94:f7:ef:30:2f: 36:b5:42:c4:cd:12:9c:22:ce:60:10:16:af:9d:4b:58:d4:32: b1:96:7f:cc:ef:2f:b9:47:62:40:55:ef:b6:f7:14:67:e8:33: d1:3a:cf:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUxMTA0MTQzMjA1WhcNMjUxMTExMTQzMjA1WjAYMRYwFAYD VQQDEw02OTBhMGU2NS0zNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c9x8zNhpnd3JEVjev+i/zGFT3sXhS+i+85nOpGQVLXwk5z0d5E2+cCwbo61 0kqzjQbtGFH7+0XCTJtAXeIfkccHRh6Qji3JJNT3osVOWSse58BgxznJnZH0Leel k8nsBmoMCzC4AHBvVqxj4KWt9BDH/z1JzhbRwi4uxZNzZoU5IhZ4E/0vbiM37pzZ 3vpHrovFcoximm0bInMEvJaI3Qf0kH+NqvhYS9EFlUooKk287Jvqx+vdQhnYDAQU brz48KhMcR1FdtMEJgZmof73pGkygPdcKtKqBY7onRadau8xHxSYFNn9gWSng0jO EHIVZogr+GFyggv2/wuzOOSEewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgWCjT2 XXGilmyf+3jGoeRM/rfoMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxuq1omEl3TQmopvW9iR2j4j1zuqjTpVLQsniNnBvkxIH5bDlILH9l iaP4qrt7OO/T9enRfAgDBGg3Za+FV0wi7LdIlHt2Uh1dHt0Na9Gl4cLA558EZzRC wcEIyia32tZ84wLt4MGMWsKb0ZBQy+H9quoLewaCAmLEQeIKGx08UfdYvVWPMxsT rPKmhPfUOKaEtO52+UZ668plNdSXRefOLLSI/KlMSGu21ZBWR82lBvDQjf2WD9Km YBhhhxr1uJPMl3PtxDUCQNt2jOxlyMkhi+7llPfvMC82tULEzRKcIs5gEBavnUtY 1DKxln/M7y+5R2JAVe+29xRn6DPROs8A -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:38 2025 by rpki-client