$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: qnmbK20rM9PgYpfF5jDrKlsd2KkWFxuTLTQxKKysiqc= Subject key identifier: F1:8A:75:97:AE:CE:B0:4E:54:70:75:E3:C8:82:9D:F5:C4:F8:43:A6 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 0824 Signing time: Tue 04 Nov 2025 20:57:59 +0000 Manifest this update: Tue 04 Nov 2025 20:57:59 +0000 Manifest next update: Tue 11 Nov 2025 20:57:59 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: yrZ3lzoLmM3JFyhrpSJugZxzpaIu7IqjjvRUG3n97Dg=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Nov 4 20:57:59 2025 GMT Not After : Nov 11 20:57:59 2025 GMT Subject: CN=690a68d7-608e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:a4:bc:37:73:1e:d7:04:48:0b:36:a5:b1: 2e:d6:6b:21:68:99:30:87:6b:4a:2e:50:e7:ed:1b: da:b8:ae:b1:57:e0:f1:ec:2c:a1:5b:83:9f:c4:47: 62:e1:1c:4b:65:9b:c7:a2:09:e0:91:2b:9b:d7:eb: 68:d9:04:d2:07:9b:68:fd:13:7b:86:07:dd:93:68: bd:30:94:ae:c3:6c:f3:df:35:42:f2:32:ea:40:a9: 7d:3f:2c:94:66:67:b1:c7:37:b1:0f:b4:36:62:00: 85:d1:b8:a0:5d:b8:37:d4:e6:9e:0d:e4:4a:34:b5: 08:a4:32:bf:da:56:fa:09:4d:2a:cc:de:51:04:72: 30:80:67:ea:af:e5:ba:7d:6d:8a:14:73:59:28:7e: 02:5d:ee:05:4a:e7:f2:88:c7:63:b7:52:96:7a:3b: 7f:aa:a4:de:2f:11:3a:24:5b:e5:ed:f3:a9:e8:20: 4c:0a:42:66:ce:7c:be:5d:74:21:8a:b8:3a:0f:d6: 73:3b:ad:19:80:c2:b7:19:55:6a:86:06:8e:cc:ff: c3:d0:01:01:17:ac:81:ca:05:91:c7:8f:b7:a7:64: 93:57:a1:c8:1f:6c:41:62:23:f1:19:56:cd:5c:e1: db:72:84:ba:60:2e:8d:d1:87:d5:cf:b8:67:38:8a: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:75:97:AE:CE:B0:4E:54:70:75:E3:C8:82:9D:F5:C4:F8:43:A6 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:88:22:cb:e4:d2:8d:69:3e:f4:2b:f5:f5:5a:fb:44:e7:47: 8f:dc:47:50:df:61:5c:3d:70:6f:26:c8:48:c7:bf:ea:f0:84: 09:81:66:aa:33:ca:07:78:fc:a8:7d:ec:8f:ba:68:49:68:52: 34:cc:c6:a8:a0:aa:20:99:ed:d1:98:72:91:88:49:25:16:97: 31:b2:da:ad:59:5e:42:09:fa:08:16:46:28:af:c2:17:87:d4: 88:9b:4f:fc:4e:b0:97:c8:63:17:c1:14:0b:e6:72:3d:85:ac: de:ea:f7:0e:fb:27:96:f6:65:85:1d:db:c2:61:dc:2c:67:15: 88:b8:22:29:2c:08:bf:09:3a:1c:68:74:fb:62:c5:79:9d:8c: e8:c0:2e:48:f9:fd:c9:ac:d8:e7:f0:27:2a:f4:fa:65:37:67: 5c:e5:22:ac:6a:05:79:3b:db:b6:b1:83:5d:5c:a5:a8:17:9f: 24:82:25:c2:62:05:b0:24:7d:64:da:49:c8:4e:00:7e:9e:ac: 9f:b5:27:73:43:9d:e5:80:84:45:f9:31:f3:a7:da:71:45:c6: df:55:cc:fe:5f:26:63:ce:d7:d8:f5:d6:0c:53:37:c5:19:09: 50:5d:22:14:fc:8e:c9:8b:d5:2f:41:00:7f:4b:0e:03:1b:ff: 31:39:ee:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUxMTA0MjA1NzU5WhcNMjUxMTExMjA1NzU5WjAYMRYwFAYD VQQDEw02OTBhNjhkNy02MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD+kvDdzHtcESAs2pbEu1mshaJkwh2tKLlDn7RvauK6xV+Dx7CyhW4OfxEdi 4RxLZZvHogngkSub1+to2QTSB5to/RN7hgfdk2i9MJSuw2zz3zVC8jLqQKl9PyyU ZmexxzexD7Q2YgCF0bigXbg31OaeDeRKNLUIpDK/2lb6CU0qzN5RBHIwgGfqr+W6 fW2KFHNZKH4CXe4FSufyiMdjt1KWejt/qqTeLxE6JFvl7fOp6CBMCkJmzny+XXQh irg6D9ZzO60ZgMK3GVVqhgaOzP/D0AEBF6yBygWRx4+3p2STV6HIH2xBYiPxGVbN XOHbcoS6YC6N0YfVz7hnOIrLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGKdZeu zrBOVHB148iCnfXE+EOmMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgiCLL5NKNaT70K/X1WvtE50eP3EdQ32FcPXBvJshIx7/q8IQJgWaq M8oHePyofeyPumhJaFI0zMaooKogme3RmHKRiEklFpcxstqtWV5CCfoIFkYor8IX h9SIm0/8TrCXyGMXwRQL5nI9haze6vcO+yeW9mWFHdvCYdwsZxWIuCIpLAi/CToc aHT7YsV5nYzowC5I+f3JrNjn8Ccq9PplN2dc5SKsagV5O9u2sYNdXKWoF58kgiXC YgWwJH1k2knITgB+nqyftSdzQ53lgIRF+THzp9pxRcbfVcz+XyZjztfY9dYMUzfF GQlQXSIU/I7Ji9UvQQB/Sw4DG/8xOe4b -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:04 2025 by rpki-client