$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: SE5oc00OT5knMMHfiydDVkHXQXT+/i7AomX+e+ylzxY= Subject key identifier: AA:14:C6:C3:B5:0E:05:09:2B:31:66:F9:6D:28:84:4C:BD:BE:40:CC Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 021E Signing time: Tue 04 Nov 2025 16:26:53 +0000 Manifest this update: Tue 04 Nov 2025 16:26:53 +0000 Manifest next update: Tue 11 Nov 2025 16:26:53 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: v8lF/xTdLcfuMiPffTYqMhWfJKNbrHvrwQPAMh4DkFc=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: I6Do6wUFDqn95ErcBDY8GxAwjzlBupfp3qvysqubm+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Nov 4 16:26:53 2025 GMT Not After : Nov 11 16:26:53 2025 GMT Subject: CN=690a294d-d0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:03:fc:ba:27:03:73:36:0e:bb:70:51:88: 29:dc:4e:71:dd:4e:7e:43:f6:22:4c:46:bd:a8:ab: 85:33:95:e4:a5:fb:cb:c3:a3:a6:a8:bd:15:2c:9f: 09:29:2f:9e:c4:61:93:40:7d:95:6f:54:47:28:53: b7:2f:50:fd:bf:69:3b:f3:c7:22:51:af:dc:ad:ec: e4:74:97:c0:49:e3:ac:e0:82:48:a6:a2:e2:60:35: f6:b9:5b:92:77:43:b9:99:8c:22:1a:45:7a:cd:96: d5:87:d6:bc:51:90:57:af:18:a2:eb:87:af:c1:55: 31:c2:77:b7:ac:79:27:b6:b9:20:65:3a:78:98:37: a2:58:4e:a0:36:c8:b3:05:e9:d6:01:d0:da:d9:93: ad:8f:03:33:5b:ad:e2:31:1f:7b:7a:6c:20:a0:8e: 91:87:c0:00:7c:07:61:04:3f:d7:f9:86:23:f9:c0: e5:bd:99:19:27:0a:c2:da:1b:f3:37:c6:0d:59:d7: 6f:a0:98:89:04:39:a9:af:5c:f5:d3:d5:64:bb:d1: 2a:6a:38:4b:58:f2:cc:04:67:99:91:23:09:76:99: 43:15:e1:dc:79:32:5c:60:b5:67:15:f7:e5:50:f8: eb:75:c0:ef:72:6c:cc:00:f4:f7:fb:14:12:eb:2c: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:14:C6:C3:B5:0E:05:09:2B:31:66:F9:6D:28:84:4C:BD:BE:40:CC X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:32:2a:73:cb:90:d1:28:2f:63:15:df:e9:5f:23:ae:eb:a3: 55:eb:3a:86:6f:18:d3:1b:b6:97:8e:32:93:2d:d3:c7:b2:15: 3c:28:d3:e3:14:fb:7d:33:e0:5f:c6:66:7d:b4:a6:09:9b:6f: 2e:20:48:0a:29:c4:be:89:20:ab:64:f4:93:9a:50:3a:2f:41: a4:2e:ff:aa:2d:14:49:1c:b6:fa:71:20:34:b6:c0:89:17:33: f8:7d:59:66:f2:fe:52:a7:3f:bb:4a:1d:4f:cd:90:40:c7:a1: d0:81:60:29:04:d0:a3:fb:34:18:a8:07:61:50:fc:9e:36:d5: 00:28:1f:3d:57:a1:69:93:60:13:f0:d6:a2:11:e9:fa:c9:8c: 46:f6:d8:dc:a8:a9:00:42:29:9e:ca:53:51:aa:e3:b6:09:6f: a0:9a:29:ee:40:75:a0:0f:55:70:93:7d:7f:3c:75:68:22:52: c7:a8:26:9c:56:dc:57:73:9a:8a:15:94:28:85:71:10:0f:46: 20:85:b3:06:28:b3:72:0c:eb:6c:a7:53:94:e3:97:f4:a8:49: 58:3a:01:c9:19:48:c4:be:ed:99:4a:40:ca:db:26:48:02:a6: 1d:92:df:ba:b1:38:d1:bb:fc:ae:1f:7a:c2:a9:a9:50:60:fc: 3d:2e:b0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUxMTA0MTYyNjUzWhcNMjUxMTExMTYyNjUzWjAYMRYwFAYD VQQDEw02OTBhMjk0ZC1kMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GED/LonA3M2DrtwUYgp3E5x3U5+Q/YiTEa9qKuFM5XkpfvLw6OmqL0VLJ8J KS+exGGTQH2Vb1RHKFO3L1D9v2k788ciUa/crezkdJfASeOs4IJIpqLiYDX2uVuS d0O5mYwiGkV6zZbVh9a8UZBXrxii64evwVUxwne3rHkntrkgZTp4mDeiWE6gNsiz BenWAdDa2ZOtjwMzW63iMR97emwgoI6Rh8AAfAdhBD/X+YYj+cDlvZkZJwrC2hvz N8YNWddvoJiJBDmpr1z109Vku9EqajhLWPLMBGeZkSMJdplDFeHceTJcYLVnFffl UPjrdcDvcmzMAPT3+xQS6ywC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoUxsO1 DgUJKzFm+W0ohEy9vkDMMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWMipzy5DRKC9jFd/pXyOu66NV6zqGbxjTG7aXjjKTLdPHshU8KNPj FPt9M+BfxmZ9tKYJm28uIEgKKcS+iSCrZPSTmlA6L0GkLv+qLRRJHLb6cSA0tsCJ FzP4fVlm8v5Spz+7Sh1PzZBAx6HQgWApBNCj+zQYqAdhUPyeNtUAKB89V6Fpk2AT 8NaiEen6yYxG9tjcqKkAQimeylNRquO2CW+gminuQHWgD1Vwk31/PHVoIlLHqCac VtxXc5qKFZQohXEQD0YghbMGKLNyDOtsp1OU45f0qElYOgHJGUjEvu2ZSkDK2yZI AqYdkt+6sTjRu/yuH3rCqalQYPw9LrCv -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:56 2025 by rpki-client