$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: nkr5BRrbcpJGC0bfFaPffjG53u0DMV4WHDLAm/PmhEQ= Subject key identifier: 84:50:5A:61:BA:37:30:79:CB:F6:AC:8F:FE:B3:8F:71:8A:F4:51:0F Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: 010B Signing time: Mon 03 Nov 2025 04:57:30 +0000 Manifest this update: Mon 03 Nov 2025 04:57:30 +0000 Manifest next update: Mon 10 Nov 2025 04:57:30 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: wVnEcBFVKenmT+XO9BqlBnUokUoS0dW/gmTgJZuHikY=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Nov 3 04:57:30 2025 GMT Not After : Nov 10 04:57:30 2025 GMT Subject: CN=6908363a-d2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:cd:68:5d:4a:a3:1a:d6:2f:f7:97:eb:7d: f3:49:43:54:f8:b0:57:45:09:e8:4c:f8:81:81:4f: 7b:5d:8b:9d:e5:c5:70:85:43:60:9a:41:ae:3f:a2: 99:23:3d:5a:f3:7e:d2:a1:1f:2e:c3:ca:9e:51:d4: dd:62:07:b4:2f:a7:c4:29:1a:f8:71:99:8e:b6:6e: 66:df:8a:e1:71:1b:bd:0f:b0:78:b3:5e:1f:b3:8f: 19:30:17:59:d0:f7:92:6f:76:f9:b2:42:65:eb:36: e4:f7:ee:62:2d:58:58:7a:83:1e:58:cb:fa:20:c4: b3:3e:eb:05:c8:f7:29:16:53:be:b5:f3:26:3c:57: 3b:d6:9d:d3:81:98:94:0c:38:a9:7d:76:e4:59:f9: 40:2e:e8:12:cd:2a:4b:a4:0f:a1:88:8a:4a:23:4a: 4a:d0:1e:53:b9:d6:3d:7d:7e:e8:74:34:51:42:d4: 24:84:f9:b0:0c:39:da:87:f5:46:f1:bd:2e:61:66: 15:bb:6c:27:cd:2e:5a:c6:f9:73:91:2b:5a:15:24: 35:b5:c6:cf:78:b1:ba:c9:be:c7:ab:93:3b:6a:8e: 76:78:4b:4f:ea:c3:fd:2c:fd:bd:ee:ba:3f:a2:d2: ff:62:1e:c0:4d:67:0c:5d:df:39:06:64:9b:60:e8: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:5A:61:BA:37:30:79:CB:F6:AC:8F:FE:B3:8F:71:8A:F4:51:0F X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:83:0f:5d:c1:42:83:ce:0c:e9:a8:95:e3:2e:93:c9:43:0e: e7:a2:6c:b6:6a:f8:1f:2e:f2:35:f2:6a:b9:d8:1a:9f:67:c4: 95:ba:ed:f1:f1:86:7c:00:5e:6d:3b:65:0b:19:66:5c:37:1f: af:c3:c5:36:21:51:4f:1c:9b:6d:87:c5:2f:ee:4c:15:6f:86: d4:20:14:84:5e:86:42:49:37:b0:fd:11:eb:f1:df:8f:2f:b4: 73:d6:1f:0e:6e:fb:d0:24:ba:50:96:5e:0d:59:13:db:c2:a7: 4a:7e:e4:5a:2a:c8:b6:8d:a3:33:62:c1:d5:22:a1:42:97:42: bd:79:d3:d6:9f:ac:e0:da:b6:22:d0:b6:ce:3f:ef:57:ef:97: 94:97:02:60:5f:6b:78:0b:d1:c9:c4:52:fc:3c:eb:ce:be:85: 29:3a:31:0c:f5:46:f0:3d:8c:00:ab:0e:a7:3b:de:98:0e:4b: 17:00:e5:40:e1:47:c1:58:20:da:ee:e1:3a:10:89:5f:6c:78: 7d:7d:f1:f6:70:ea:ef:73:09:a8:ab:d8:fe:22:9d:c0:c5:94: 06:35:01:7d:c2:d5:3d:23:f4:3b:dc:a4:42:98:8e:ef:02:b4: 30:c3:64:36:df:54:44:de:d7:dc:94:0e:26:f6:dd:34:a8:59: 69:df:ce:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUxMTAzMDQ1NzMwWhcNMjUxMTEwMDQ1NzMwWjAYMRYwFAYD VQQDEw02OTA4MzYzYS1kMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzozNaF1KoxrWL/eX633zSUNU+LBXRQnoTPiBgU97XYud5cVwhUNgmkGuP6KZ Iz1a837SoR8uw8qeUdTdYge0L6fEKRr4cZmOtm5m34rhcRu9D7B4s14fs48ZMBdZ 0PeSb3b5skJl6zbk9+5iLVhYeoMeWMv6IMSzPusFyPcpFlO+tfMmPFc71p3TgZiU DDipfXbkWflALugSzSpLpA+hiIpKI0pK0B5TudY9fX7odDRRQtQkhPmwDDnah/VG 8b0uYWYVu2wnzS5axvlzkStaFSQ1tcbPeLG6yb7Hq5M7ao52eEtP6sP9LP297ro/ otL/Yh7ATWcMXd85BmSbYOhoJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRQWmG6 NzB5y/asj/6zj3GK9FEPMB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6gw9dwUKDzgzpqJXjLpPJQw7nomy2avgfLvI18mq52BqfZ8SVuu3x 8YZ8AF5tO2ULGWZcNx+vw8U2IVFPHJtth8Uv7kwVb4bUIBSEXoZCSTew/RHr8d+P L7Rz1h8ObvvQJLpQll4NWRPbwqdKfuRaKsi2jaMzYsHVIqFCl0K9edPWn6zg2rYi 0LbOP+9X75eUlwJgX2t4C9HJxFL8POvOvoUpOjEM9UbwPYwAqw6nO96YDksXAOVA 4UfBWCDa7uE6EIlfbHh9ffH2cOrvcwmoq9j+Ip3AxZQGNQF9wtU9I/Q73KRCmI7v ArQww2Q231RE3tfclA4m9t00qFlp384f -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:55 2025 by rpki-client