$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: bn4pe70kGiE/jLzQES6o3djDJhPEKbrrIiv+YpzysEo= Subject key identifier: F9:1B:A0:25:5A:47:F6:CA:0A:7B:5B:CE:88:A2:6A:72:E9:EC:B5:B9 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A6D Signing time: Tue 04 Nov 2025 19:43:37 +0000 Manifest this update: Tue 04 Nov 2025 19:43:37 +0000 Manifest next update: Tue 11 Nov 2025 19:43:37 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: q3i+tBse2vN4PegLw/EbD4xeE9g+xl+0hmUu4if5jt8=) 2: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: +Z0u2AO6pzWMC+2Zqy2emMfgxJlMpGAWqdjJa7j1R38=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Nov 4 19:43:37 2025 GMT Not After : Nov 11 19:43:37 2025 GMT Subject: CN=690a5769-1e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:42:a2:84:dd:b8:c3:27:12:c8:37:6c:cb: be:09:40:07:58:45:ad:a4:f8:df:7a:c9:90:62:ae: 0d:ed:7e:12:c7:7c:da:de:da:40:8c:de:41:40:44: d9:49:42:c8:31:55:15:5b:ed:3f:8d:a0:1d:3e:f0: 05:e5:a2:cf:75:5f:54:4b:54:3d:a2:df:50:26:4f: dd:94:3e:8a:51:62:91:6a:bf:d9:4f:63:59:15:07: 56:66:81:f2:1b:86:ce:f5:43:93:7d:e5:b3:07:cc: 36:bb:4e:e5:b4:c5:a0:ee:2d:af:1d:d0:23:d7:57: 25:4f:2d:2a:d5:53:0e:b4:c3:86:a6:a1:f9:76:ed: 86:2f:e7:bd:50:29:37:6d:87:35:7d:36:5f:82:18: 68:2e:69:f1:36:9e:3f:22:22:2c:48:fe:6d:de:23: 13:07:cc:69:bf:0b:34:09:41:a4:ec:b6:d0:af:06: 7b:ee:c1:b5:8c:6a:03:c1:47:ce:26:7e:16:ce:30: f1:3b:2c:5b:46:d1:fc:1c:78:9b:cb:ce:ea:2e:1f: c1:21:2e:07:6b:bd:4c:ef:ba:fb:5c:97:02:81:d8: c6:4e:ed:f6:0d:8b:b8:ef:14:b4:ae:90:ed:b2:df: e7:ab:09:9d:74:1d:8d:1c:98:7b:4e:8e:60:f1:87: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:A0:25:5A:47:F6:CA:0A:7B:5B:CE:88:A2:6A:72:E9:EC:B5:B9 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c0:9b:b8:c8:28:8b:3a:69:63:3c:ea:6a:e1:08:b5:c1:a6: cf:70:fb:b4:e5:73:5d:61:fd:ac:f3:8e:9c:a4:b6:1f:43:3b: 7b:09:38:31:9a:a7:1c:a6:2f:c3:ba:5d:43:8b:2f:5a:86:8b: cf:02:13:18:e8:70:5c:68:8c:49:7f:f7:95:ec:c2:3f:9c:01: 94:2a:cf:aa:54:ea:5b:2b:b8:21:a0:61:7e:5a:38:76:86:0b: 69:b5:28:39:d8:b5:b1:7e:d2:3b:31:ac:51:aa:45:0f:4f:70: ff:06:a0:72:20:0d:c4:a5:7a:87:0d:06:06:cb:93:43:bb:09: 2e:dd:fd:7c:3c:da:c1:6a:cb:8e:25:91:57:8c:ae:23:98:6a: 30:f5:66:90:36:e2:f1:d9:aa:7d:b0:4a:c4:69:50:45:35:2a: aa:2a:13:ec:a0:14:9d:17:17:e1:be:2d:a4:46:eb:aa:b9:90: eb:ad:82:55:b8:82:8f:ab:0d:9a:e0:56:0f:99:39:6e:f1:c9: 9d:f6:42:f3:40:e2:8b:f6:02:2a:ee:24:bf:54:0e:cf:f2:e8: 51:3b:3a:51:64:d9:d2:81:42:98:65:e1:98:7b:34:c0:48:a4: ae:d5:14:0d:a4:48:5a:a3:b1:0e:f4:93:be:a6:13:04:37:83: 66:35:f1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUxMTA0MTk0MzM3WhcNMjUxMTExMTk0MzM3WjAYMRYwFAYD VQQDEw02OTBhNTc2OS0xZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hVCooTduMMnEsg3bMu+CUAHWEWtpPjfesmQYq4N7X4Sx3za3tpAjN5BQETZ SULIMVUVW+0/jaAdPvAF5aLPdV9US1Q9ot9QJk/dlD6KUWKRar/ZT2NZFQdWZoHy G4bO9UOTfeWzB8w2u07ltMWg7i2vHdAj11clTy0q1VMOtMOGpqH5du2GL+e9UCk3 bYc1fTZfghhoLmnxNp4/IiIsSP5t3iMTB8xpvws0CUGk7LbQrwZ77sG1jGoDwUfO Jn4WzjDxOyxbRtH8HHiby87qLh/BIS4Ha71M77r7XJcCgdjGTu32DYu47xS0rpDt st/nqwmddB2NHJh7To5g8Yd3kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkboCVa R/bKCntbzoiianLp7LW5MB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJwJu4yCiLOmljPOpq4Qi1wabPcPu05XNdYf2s846cpLYfQzt7CTgx mqccpi/Dul1Diy9ahovPAhMY6HBcaIxJf/eV7MI/nAGUKs+qVOpbK7ghoGF+Wjh2 hgtptSg52LWxftI7MaxRqkUPT3D/BqByIA3EpXqHDQYGy5NDuwku3f18PNrBasuO JZFXjK4jmGow9WaQNuLx2ap9sErEaVBFNSqqKhPsoBSdFxfhvi2kRuuquZDrrYJV uIKPqw2a4FYPmTlu8cmd9kLzQOKL9gIq7iS/VA7P8uhROzpRZNnSgUKYZeGYezTA SKSu1RQNpEhao7EO9JO+phMEN4NmNfGK -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:50 2025 by rpki-client