$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: CbFKpH3UHqmhTo+Olz8TbBRcgwkF2r+L1jFDqDdgQDI= Subject key identifier: 2E:7B:54:DC:3D:74:99:CD:C9:2E:B4:60:93:1C:6C:BC:62:9E:83:BB Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 85 Signing time: Wed 05 Nov 2025 06:53:48 +0000 Manifest this update: Wed 05 Nov 2025 06:53:48 +0000 Manifest next update: Wed 12 Nov 2025 06:53:48 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: XM0TDpDIh8t7wM1rWPS1RFRg0II4enCsxtNNB5lGb5c=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Nov 5 06:53:48 2025 GMT Not After : Nov 12 06:53:48 2025 GMT Subject: CN=690af47c-f528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:57:e5:f9:2f:47:19:57:f7:5a:8a:20:71:2d: 75:0f:d4:ea:97:e6:80:43:91:34:42:b5:48:bd:00: 5c:f8:2e:76:00:ff:19:a7:c5:a3:80:d2:7d:07:53: 35:71:f3:f3:a1:48:67:b4:ef:17:8d:b5:de:33:e0: 47:9a:80:97:0a:88:76:ab:82:91:83:03:f2:ce:15: 55:71:02:e1:0a:d3:f2:f4:bf:9a:3a:f6:ce:c7:07: 25:a7:6b:c1:46:ad:24:c7:6c:79:8f:d2:b2:15:22: 71:8b:bd:a2:57:e9:75:0f:e6:e6:5e:d9:cb:18:5f: 61:ca:32:f3:fd:8f:9e:da:e2:aa:81:81:5c:dd:aa: 88:61:c8:d9:d2:f6:42:55:18:3c:69:c5:34:d8:02: c4:38:1f:34:44:79:f9:8a:3b:08:59:fa:a7:8c:00: b7:e7:99:a4:12:d4:04:12:09:85:6f:b8:e1:76:fa: c5:a3:21:d9:e7:c3:32:46:22:ae:fe:20:4c:5e:a8: b7:80:16:38:60:a9:a3:c2:9e:5d:c9:3e:68:3e:92: a2:b8:4e:45:56:fa:5d:10:5d:14:fc:45:9e:3b:0d: 7c:a5:29:e6:c3:ae:3e:0e:d8:89:30:18:66:3d:38: 44:87:2c:55:ae:3f:2b:af:da:9a:5f:ae:a6:7d:b1: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7B:54:DC:3D:74:99:CD:C9:2E:B4:60:93:1C:6C:BC:62:9E:83:BB X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a6:c0:d8:be:de:61:eb:31:14:29:38:80:66:1f:2b:31:1e: 1f:5f:0b:53:73:21:89:ae:90:4b:e2:ba:c7:0f:29:78:70:40: 2c:59:45:05:13:e1:76:b4:07:ee:ec:d2:ba:07:cd:ea:63:d8: 59:02:6a:8e:23:08:73:9a:48:c2:08:b9:8a:13:f0:5d:ac:23: 8a:eb:e3:3a:d8:da:40:7b:b8:f2:4e:a1:2d:e6:db:1f:bc:80: 58:14:bb:6d:1a:1e:a4:07:be:72:1a:da:40:3b:b7:e4:b5:4d: 18:c7:46:4f:f4:3c:76:0c:3f:74:a1:e3:a6:9c:ba:a0:04:03: a1:01:0f:d3:dc:3a:63:b8:9e:d1:8e:bc:d0:df:76:7a:bf:4e: 66:22:04:c2:98:7e:90:91:68:c7:5a:f8:0b:ae:2d:ab:4e:89: 3b:1c:7b:4c:d8:a2:ac:fd:04:3e:da:a0:4a:86:4d:cc:1c:d3: 5e:0d:cd:88:60:25:8d:bc:b5:5b:5d:60:90:73:61:c0:4e:fb: 01:26:83:d0:60:8f:29:3d:eb:c5:79:a9:e4:8d:ec:24:b4:6f: fa:1d:6f:bf:75:1c:7e:5b:08:37:a7:4e:a1:81:00:a9:81:28: ef:41:32:55:ff:21:00:8f:8a:05:a9:1b:d7:a5:f9:90:07:7d: 23:1d:20:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4 QkE5RkFCQUEwHhcNMjUxMTA1MDY1MzQ4WhcNMjUxMTEyMDY1MzQ4WjAYMRYwFAYD VQQDEw02OTBhZjQ3Yy1mNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lfl+S9HGVf3WoogcS11D9Tql+aAQ5E0QrVIvQBc+C52AP8Zp8WjgNJ9B1M1 cfPzoUhntO8XjbXeM+BHmoCXCoh2q4KRgwPyzhVVcQLhCtPy9L+aOvbOxwclp2vB Rq0kx2x5j9KyFSJxi72iV+l1D+bmXtnLGF9hyjLz/Y+e2uKqgYFc3aqIYcjZ0vZC VRg8acU02ALEOB80RHn5ijsIWfqnjAC355mkEtQEEgmFb7jhdvrFoyHZ58MyRiKu /iBMXqi3gBY4YKmjwp5dyT5oPpKiuE5FVvpdEF0U/EWeOw18pSnmw64+DtiJMBhm PThEhyxVrj8rr9qaX66mfbHBNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC57VNw9 dJnNyS60YJMcbLxinoO7MB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1 RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2 WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwpsDYvt5h6zEUKTiAZh8rMR4fXwtTcyGJrpBL4rrHDyl4cEAsWUUF E+F2tAfu7NK6B83qY9hZAmqOIwhzmkjCCLmKE/BdrCOK6+M62NpAe7jyTqEt5tsf vIBYFLttGh6kB75yGtpAO7fktU0Yx0ZP9Dx2DD90oeOmnLqgBAOhAQ/T3DpjuJ7R jrzQ33Z6v05mIgTCmH6QkWjHWvgLri2rTok7HHtM2KKs/QQ+2qBKhk3MHNNeDc2I YCWNvLVbXWCQc2HATvsBJoPQYI8pPevFeankjewktG/6HW+/dRx+Wwg3p06hgQCp gSjvQTJV/yEAj4oFqRvXpfmQB30jHSBD -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:27 2025 by rpki-client