$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json) Hash identifier: uK0UlKXJmf6uW3Vz+0FzroWlVzMNMfwv0olOWgo2w3Q= Subject key identifier: 23:8C:7E:1C:39:E2:71:77:3C:68:DD:4C:58:52:99:F3:E1:08:00:6C Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:52:21 +0000 Manifest this update: Mon 03 Nov 2025 07:52:21 +0000 Manifest next update: Mon 10 Nov 2025 07:52:21 +0000 Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: p27nK8Cyu/X75g1nPH9IdIO2n4fQzHft2uKbGUXslY0=) 2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: 3U7vBnQl/Kdt2pXpdCyuzs/qAnaveVs4aYr8QCEMg6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Validity Not Before: Nov 3 07:52:21 2025 GMT Not After : Nov 10 07:52:21 2025 GMT Subject: CN=69085f35-f427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:4b:4b:02:f2:53:ec:3e:ba:42:51:73:bf: 38:9b:2e:f3:64:72:6b:59:a4:14:31:9d:1f:71:e3: 03:01:b6:eb:2e:95:77:72:33:03:1d:67:29:f1:32: ae:ba:01:82:b3:f2:99:53:cd:da:3d:6b:62:24:c6: 62:ad:23:75:9b:a8:96:71:18:2d:63:ff:68:0b:d9: d9:af:64:d4:35:7b:63:ae:3f:ed:34:5d:e1:2d:ca: 84:f0:10:d8:7c:b1:f4:b3:c6:fc:22:38:f1:b1:22: 07:8b:d4:30:c4:6b:51:88:8a:95:17:fb:24:26:93: ae:29:ad:3a:98:af:6a:65:4c:fc:ab:be:4d:ca:57: fa:07:65:69:51:10:a4:19:f1:b0:21:c2:c8:ff:4d: 9a:22:90:a6:aa:25:19:bf:3e:de:0a:5e:12:67:79: c1:92:df:ca:29:93:7b:ab:f0:c5:0b:4e:98:41:24: 8b:9a:3a:71:c1:b8:42:cf:14:1c:fe:76:7a:05:88: c6:ee:6c:b3:6b:04:28:b2:09:c6:21:19:8e:29:c5: a2:54:af:28:a3:56:79:23:8a:1c:41:d5:54:55:0b: be:84:ef:89:85:c0:a0:dc:4e:11:c4:74:c0:44:f1: 59:c0:42:85:88:69:9d:8e:11:d6:69:1f:6e:ef:16: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8C:7E:1C:39:E2:71:77:3C:68:DD:4C:58:52:99:F3:E1:08:00:6C X509v3 Authority Key Identifier: keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a6:a7:53:e7:aa:72:f9:32:46:f2:1d:88:75:e5:52:0f:1d: fe:6c:f8:59:9a:cc:1e:b1:de:83:9a:96:69:e7:2e:4e:2f:e8: 8b:26:b4:9a:d2:d9:43:49:f7:18:42:9d:c0:10:c6:a9:6c:da: ba:db:a9:90:e5:03:ab:48:26:3f:1f:d4:ef:01:a6:5b:49:ff: f8:ad:c4:17:83:ef:f4:9e:3b:3a:fe:77:51:fb:2e:f9:b1:e4: 14:fb:46:7d:d5:f6:c2:88:24:1b:48:87:bd:95:78:9c:51:89: 85:30:3d:05:91:4d:4e:61:48:71:37:2d:7f:3a:59:92:94:7c: 3f:e8:d1:20:a2:d2:9a:3b:11:c9:1b:db:0b:69:c6:9b:11:60: 8a:31:4b:00:90:9a:71:9e:54:8a:b2:b2:1b:de:ce:a0:62:b0: 4b:57:40:92:92:08:4f:a4:4a:f2:e6:22:7b:98:c6:7f:37:56: ed:6a:92:27:79:f1:83:ae:83:92:cc:70:5d:a1:fd:6a:de:a9: e6:db:4d:bd:82:5c:50:49:7f:2e:e7:55:e7:cd:25:a4:c3:7e: e0:a6:8c:fa:72:81:7f:90:b1:cd:5d:bf:6e:c7:52:0b:10:46: a7:8d:af:f3:e4:54:02:aa:9a:95:f8:5c:f2:0f:3c:c1:4f:e0: ac:3b:4b:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTkyODExMC8GA1UEBRMoQjVCMzVGOTI0RUI1QzMyRkJCNDE4NjdEM0ExNjZFNEE5 NkJCRUNBMjAeFw0yNTExMDMwNzUyMjFaFw0yNTExMTAwNzUyMjFaMBgxFjAUBgNV BAMTDTY5MDg1ZjM1LWY0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiBEtLAvJT7D66QlFzvzibLvNkcmtZpBQxnR9x4wMBtusulXdyMwMdZynxMq66 AYKz8plTzdo9a2IkxmKtI3WbqJZxGC1j/2gL2dmvZNQ1e2OuP+00XeEtyoTwENh8 sfSzxvwiOPGxIgeL1DDEa1GIipUX+yQmk64prTqYr2plTPyrvk3KV/oHZWlREKQZ 8bAhwsj/TZoikKaqJRm/Pt4KXhJnecGS38opk3ur8MULTphBJIuaOnHBuELPFBz+ dnoFiMbubLNrBCiyCcYhGY4pxaJUryijVnkjihxB1VRVC76E74mFwKDcThHEdMBE 8VnAQoWIaZ2OEdZpH27vFh+/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI4x+HDni cXc8aN1MWFKZ8+EIAGwwHwYDVR0jBBgwFoAUtbNfkk61wy+7QYZ9OhZuSpa77KIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5OTI4LzU3REZCRUJDOTg0 RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdL SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGJOZmtrNjF3eS03UVlaOU9oWnVTcGE3N0tJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 OTI4LzU3REZCRUJDOTg0RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3kt N1FZWjlPaFp1U3BhNzdLSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABimp1PnqnL5MkbyHYh15VIPHf5s+FmazB6x3oOalmnnLk4v6IsmtJrS 2UNJ9xhCncAQxqls2rrbqZDlA6tIJj8f1O8BpltJ//itxBeD7/SeOzr+d1H7Lvmx 5BT7Rn3V9sKIJBtIh72VeJxRiYUwPQWRTU5hSHE3LX86WZKUfD/o0SCi0po7Eckb 2wtpxpsRYIoxSwCQmnGeVIqyshvezqBisEtXQJKSCE+kSvLmInuYxn83Vu1qkid5 8YOug5LMcF2h/WreqebbTb2CXFBJfy7nVefNJaTDfuCmjPpygX+Qsc1dv27HUgsQ RqeNr/PkVAKqmpX4XPIPPMFP4Kw7S1o= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:41 2025 by rpki-client