$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: MG8/SMT7cgf0ElZdAGjoHJn4AXCEVwP4ZG6U4N246Jk= Subject key identifier: 64:16:33:EE:53:E8:AF:1D:34:90:6A:05:0A:CD:1D:81:81:48:6F:33 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: B4 Signing time: Mon 03 Nov 2025 06:03:30 +0000 Manifest this update: Mon 03 Nov 2025 06:03:29 +0000 Manifest next update: Mon 10 Nov 2025 06:03:29 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: AifvBTsPGzALiIEBR8RnjFC7d8YYdpdDNKhorfpHNFM=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Nov 3 06:03:29 2025 GMT Not After : Nov 10 06:03:29 2025 GMT Subject: CN=690845b2-76bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:94:bd:2c:5b:8c:25:0f:0a:07:70:18:b0: e1:46:41:e4:d1:1c:63:3b:f4:d5:12:10:bd:18:0d: aa:48:2b:cc:a4:2b:9f:60:83:84:c0:75:a1:10:7e: ab:e7:0c:1f:f1:58:25:cd:05:5e:49:7c:57:3d:35: 84:42:af:cb:8b:c9:83:f8:0b:1a:11:bf:0a:63:58: 2a:94:2e:cd:cd:5b:39:c2:7d:fb:c2:8b:ca:26:12: 96:cf:e1:b9:eb:44:95:ee:eb:e9:fa:28:93:e9:40: 2d:f0:d7:86:e5:8c:55:dd:a0:87:97:35:c0:92:d0: 42:c5:d2:ba:60:4b:0b:99:36:ec:e1:33:19:75:a5: 1f:49:0b:bc:a3:f3:1f:4e:63:62:41:d7:b1:06:d0: de:e7:39:17:11:8f:9f:70:9b:dd:a4:28:51:76:29: f2:f9:a0:60:f1:32:50:b2:2c:98:df:7c:ac:56:dd: 31:5c:8b:36:0f:69:53:0c:74:0a:9a:f8:fc:d6:cc: 40:0e:ed:17:c7:c0:50:36:6a:79:56:31:7c:55:95: b5:54:86:96:80:eb:d6:f9:f3:30:de:54:48:82:12: 34:86:a9:c3:89:cb:46:17:7f:fd:1b:9f:cf:13:0e: 42:35:ce:be:58:49:f0:82:e9:04:de:71:72:c7:03: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:33:EE:53:E8:AF:1D:34:90:6A:05:0A:CD:1D:81:81:48:6F:33 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:72:61:fb:b1:c6:1d:d9:a5:90:a0:2a:8e:c6:55:09:4a:e6: ee:fa:c4:38:a7:0c:97:f6:30:dd:95:76:e0:d9:c0:04:84:29: 0a:65:67:65:24:7c:0e:fd:8b:ea:a3:06:46:07:43:25:c1:e2: 15:5c:f7:32:25:04:de:a8:40:c8:1a:d1:9e:99:fd:22:80:57: 38:ec:f5:db:ce:2c:15:2e:84:e9:ea:b2:b9:f3:1e:f6:c5:18: a9:16:59:c0:ce:24:b9:b2:96:92:34:b9:89:1d:e8:10:0e:87: 71:0e:8f:ed:5d:db:35:be:e1:9d:bd:e3:cd:c0:ac:ef:95:14: 8a:32:1e:01:24:c7:68:bf:93:7e:02:da:09:f7:b3:3d:19:be: 3d:41:ed:2c:4f:40:44:d1:5f:c3:6a:5e:d4:b1:44:84:14:df: 6b:10:e7:7a:13:a4:68:4d:ab:27:88:1d:62:48:c5:da:9c:4a: 84:1a:26:2b:41:a4:78:f7:02:3d:e8:64:fd:04:a3:f6:60:16: 4d:c0:c8:6a:92:e0:55:1f:14:9a:22:b0:99:d9:a7:34:d2:48: 76:3d:20:08:c1:ba:1c:cd:19:8a:a7:b5:ae:87:c9:25:ce:a5: a6:94:b9:7c:c1:c3:a0:df:3c:4e:16:95:dd:5a:12:31:86:74: b3:76:b1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUxMTAzMDYwMzI5WhcNMjUxMTEwMDYwMzI5WjAYMRYwFAYD VQQDEw02OTA4NDViMi03NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn2UvSxbjCUPCgdwGLDhRkHk0RxjO/TVEhC9GA2qSCvMpCufYIOEwHWhEH6r 5wwf8VglzQVeSXxXPTWEQq/Li8mD+AsaEb8KY1gqlC7NzVs5wn37wovKJhKWz+G5 60SV7uvp+iiT6UAt8NeG5YxV3aCHlzXAktBCxdK6YEsLmTbs4TMZdaUfSQu8o/Mf TmNiQdexBtDe5zkXEY+fcJvdpChRdiny+aBg8TJQsiyY33ysVt0xXIs2D2lTDHQK mvj81sxADu0Xx8BQNmp5VjF8VZW1VIaWgOvW+fMw3lRIghI0hqnDictGF3/9G5/P Ew5CNc6+WEnwgukE3nFyxwNkjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQWM+5T 6K8dNJBqBQrNHYGBSG8zMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmcmH7scYd2aWQoCqOxlUJSubu+sQ4pwyX9jDdlXbg2cAEhCkKZWdl JHwO/YvqowZGB0MlweIVXPcyJQTeqEDIGtGemf0igFc47PXbziwVLoTp6rK58x72 xRipFlnAziS5spaSNLmJHegQDodxDo/tXds1vuGdvePNwKzvlRSKMh4BJMdov5N+ AtoJ97M9Gb49Qe0sT0BE0V/Dal7UsUSEFN9rEOd6E6RoTasniB1iSMXanEqEGiYr QaR49wI96GT9BKP2YBZNwMhqkuBVHxSaIrCZ2ac00kh2PSAIwboczRmKp7Wuh8kl zqWmlLl8wcOg3zxOFpXdWhIxhnSzdrE5 -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:20 2025 by rpki-client