$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: AhsjsiX0CQYQ52M7LaFdUrjtGHtZSv3ykLzK2saS3So= Subject key identifier: 12:29:29:15:A9:65:1D:56:3E:90:58:10:3E:E9:DC:82:C6:83:E8:9F Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D3B Signing time: Tue 04 Nov 2025 18:06:58 +0000 Manifest this update: Tue 04 Nov 2025 18:06:57 +0000 Manifest next update: Tue 11 Nov 2025 18:06:57 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: SPJZEaYrtOp2F3ONNzihclr0cyDA0AWFq/HhxHyMk0Q=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: aG9Ky47AV0GPRw+yhEkTWuhgTxt+050Je5yrrl9/SOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Nov 4 18:06:57 2025 GMT Not After : Nov 11 18:06:57 2025 GMT Subject: CN=690a40c1-6c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:e1:1f:f3:63:52:b5:33:e4:55:6f:6e:54: af:6a:33:42:e8:18:08:3a:33:8e:fc:9e:da:db:e3: fa:a0:fa:f0:6c:11:e8:40:1f:01:ac:b7:a0:61:e8: 11:48:df:c8:36:19:3e:21:50:92:7a:a8:9f:cf:5d: fe:82:f1:42:dd:59:e8:8e:a2:58:de:8f:09:6d:19: f8:85:22:78:39:0d:11:4b:2b:73:f0:80:38:c9:b8: 2a:f2:a8:65:83:47:b0:23:9c:c4:49:1b:dd:52:46: 0d:14:a9:ba:6a:7c:e4:07:af:c4:74:ae:a7:04:7a: b1:66:f8:a3:3b:95:b0:51:f2:60:6d:35:14:b1:0a: d6:71:ae:cb:aa:a7:9e:64:65:a6:51:09:f3:eb:d0: e3:a0:ac:cb:77:c8:fc:ef:4f:ba:22:20:5b:4f:4c: 11:fa:e3:3d:ef:e3:45:24:8e:54:b9:51:a8:c2:0d: 63:c5:ea:1e:30:df:ad:2f:d1:21:aa:e2:07:dc:42: 49:73:90:85:af:92:2a:8f:9f:c9:e1:3f:8f:0e:96: 44:29:02:d9:f5:0d:09:d9:cd:0b:b3:4b:8e:7e:9a: 67:72:d7:9e:00:5a:b3:43:14:f0:3e:8a:ca:ec:4b: e4:d1:ae:51:5e:3c:ef:35:9c:9b:4e:25:f8:f9:5c: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:29:29:15:A9:65:1D:56:3E:90:58:10:3E:E9:DC:82:C6:83:E8:9F X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:35:ac:e7:9c:67:93:46:31:14:5d:fe:16:1a:03:78:65:a9: a9:d4:2b:4a:34:99:67:94:52:88:15:3d:66:c8:5a:7f:6d:df: 6f:1c:98:61:df:9a:32:25:a5:9d:82:95:bc:86:66:43:27:19: 23:d4:08:14:64:a6:65:d1:d2:00:d3:ca:2e:91:6b:af:4c:b3: 13:db:c0:40:d6:2a:26:c6:3c:fd:28:65:44:33:6a:32:de:2a: 7e:89:3d:56:14:fc:e6:91:e6:d6:f7:06:ba:3d:22:3a:4c:0c: 90:a6:2f:60:b3:89:28:1c:bf:d2:fd:1c:74:29:3a:2b:3d:e3: b5:68:27:87:5e:e1:2d:e0:52:99:90:b1:97:ef:3c:f7:48:30: 97:48:f4:f5:58:72:67:7e:9e:dd:ad:3f:8c:f6:25:56:a7:fa: 97:bb:85:89:28:2b:66:b4:f3:77:29:be:81:9d:9a:16:42:13: 95:80:fa:f9:f7:a8:91:0e:41:db:89:65:af:b3:05:07:19:b2: 18:86:a7:df:3a:4d:e0:26:ec:78:ae:0f:1c:51:77:43:b5:29: b3:8c:61:94:6b:03:f2:54:fd:72:24:39:64:2d:c6:a2:24:c4: 90:cc:ef:c3:bf:b9:aa:0d:c3:d1:09:dd:7a:c8:05:8d:f6:6f: ad:6f:06:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUxMTA0MTgwNjU3WhcNMjUxMTExMTgwNjU3WjAYMRYwFAYD VQQDEw02OTBhNDBjMS02YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntPhH/NjUrUz5FVvblSvajNC6BgIOjOO/J7a2+P6oPrwbBHoQB8BrLegYegR SN/INhk+IVCSeqifz13+gvFC3VnojqJY3o8JbRn4hSJ4OQ0RSytz8IA4ybgq8qhl g0ewI5zESRvdUkYNFKm6anzkB6/EdK6nBHqxZvijO5WwUfJgbTUUsQrWca7Lqqee ZGWmUQnz69DjoKzLd8j870+6IiBbT0wR+uM97+NFJI5UuVGowg1jxeoeMN+tL9Eh quIH3EJJc5CFr5Iqj5/J4T+PDpZEKQLZ9Q0J2c0Ls0uOfppncteeAFqzQxTwPorK 7Evk0a5RXjzvNZybTiX4+VwdSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIpKRWp ZR1WPpBYED7p3ILGg+ifMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZNaznnGeTRjEUXf4WGgN4Zamp1CtKNJlnlFKIFT1myFp/bd9vHJhh 35oyJaWdgpW8hmZDJxkj1AgUZKZl0dIA08oukWuvTLMT28BA1iomxjz9KGVEM2oy 3ip+iT1WFPzmkebW9wa6PSI6TAyQpi9gs4koHL/S/Rx0KTorPeO1aCeHXuEt4FKZ kLGX7zz3SDCXSPT1WHJnfp7drT+M9iVWp/qXu4WJKCtmtPN3Kb6BnZoWQhOVgPr5 96iRDkHbiWWvswUHGbIYhqffOk3gJux4rg8cUXdDtSmzjGGUawPyVP1yJDlkLcai JMSQzO/Dv7mqDcPRCd16yAWN9m+tbwa/ -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:15 2025 by rpki-client