$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: vQN58q5afaBYbx4PXwfCaKQJSDvk4d+uc1QYv6gb0c4= Subject key identifier: 79:4D:A0:8E:94:9A:DB:81:A0:78:8F:4A:F9:1E:20:42:8D:4D:02:DF Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 0221 Signing time: Wed 05 Nov 2025 02:12:47 +0000 Manifest this update: Wed 05 Nov 2025 02:12:46 +0000 Manifest next update: Wed 12 Nov 2025 02:12:46 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: lyRarRyyaneaghDnytYusWpvym0uA2jQ15+u7rx22vM=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Nov 5 02:12:46 2025 GMT Not After : Nov 12 02:12:46 2025 GMT Subject: CN=690ab29e-3dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:e9:e6:9a:85:f5:b3:5b:46:1a:51:7c:01: 03:2c:fb:e9:ca:48:ff:2f:f7:40:4e:7e:97:19:c2: 58:1c:11:3f:4f:46:3e:cc:66:a4:2b:0e:59:f1:43: 03:0a:ee:f9:29:ee:e3:fe:7b:9b:5b:36:56:6d:b4: 7a:a2:4e:b6:80:90:93:58:14:5b:33:31:06:ba:10: 85:dd:c5:d2:02:40:35:b4:78:29:d9:17:26:e0:df: b8:5b:f4:69:58:3d:ae:f3:f6:5d:4e:02:d4:47:52: 7b:14:5a:44:72:19:5f:4e:0c:5f:80:00:f7:29:a4: 5a:e8:ed:49:81:6e:cb:b3:60:d6:41:b9:37:99:6f: c6:b3:57:b5:9f:1f:5a:1f:4c:52:24:e1:df:b6:af: 6c:b9:15:73:54:db:ed:a2:e8:1f:da:ac:31:f6:d3: 53:b5:e0:b6:69:4a:73:5d:6e:d2:d7:fc:3c:72:88: af:bf:1d:29:3f:19:17:3a:40:a3:cd:b7:eb:cd:0d: e8:3b:3d:1a:5d:7e:1d:6b:ff:36:46:87:3f:14:65: 6c:d9:b7:7e:6a:a4:f2:0b:8e:84:39:68:38:ec:00: 2d:7a:14:b5:e7:12:c3:6c:6c:7b:48:99:97:7b:d2: 32:e9:ed:f5:75:2a:12:ea:f3:09:79:9c:ce:06:06: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4D:A0:8E:94:9A:DB:81:A0:78:8F:4A:F9:1E:20:42:8D:4D:02:DF X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:eb:34:ae:f6:fa:ee:c0:66:35:c9:ee:b7:82:28:94:45: d6:4d:25:ab:bc:93:67:da:3a:d5:1e:7a:e5:a3:4e:54:83:6d: 06:6c:cc:0c:ac:73:34:73:88:9d:b9:e7:94:90:7f:2d:0e:f9: e8:21:f1:a0:e0:36:89:bc:63:24:b8:ae:5d:d0:e0:5e:9f:40: a0:18:22:9a:89:bd:d1:cb:53:80:9a:73:cd:7f:23:8a:7d:2b: e0:f2:53:ef:4b:8c:51:ad:78:8e:0d:ba:08:fc:d1:85:e8:56: c7:d6:f8:ae:b6:2e:ff:9b:29:e9:32:40:6c:bf:f0:2f:af:c6: 39:b5:13:5f:ca:f7:fa:e9:f7:52:64:cc:02:5d:2f:be:e9:33: 92:b4:e1:e5:1e:b6:83:60:16:a5:d5:9f:6d:e2:4d:5d:be:c6: a9:94:8c:4d:80:9b:98:a6:58:46:94:f9:bd:cd:2e:b8:e6:4f: e1:5a:95:9f:ab:e4:6a:b5:ab:3d:b9:67:c4:69:93:d3:66:e5: b9:af:4c:a7:de:ac:74:15:4c:17:6a:f4:79:91:6f:45:6f:39: da:85:97:2a:d2:ac:f5:03:02:2a:5e:e3:44:3f:ca:75:8d:85: 30:36:aa:12:cb:e2:03:31:4e:2b:39:81:8d:0e:84:a4:a9:9e: 1a:89:f8:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUxMTA1MDIxMjQ2WhcNMjUxMTEyMDIxMjQ2WjAYMRYwFAYD VQQDEw02OTBhYjI5ZS0zZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXfp5pqF9bNbRhpRfAEDLPvpykj/L/dATn6XGcJYHBE/T0Y+zGakKw5Z8UMD Cu75Ke7j/nubWzZWbbR6ok62gJCTWBRbMzEGuhCF3cXSAkA1tHgp2Rcm4N+4W/Rp WD2u8/ZdTgLUR1J7FFpEchlfTgxfgAD3KaRa6O1JgW7Ls2DWQbk3mW/Gs1e1nx9a H0xSJOHftq9suRVzVNvtougf2qwx9tNTteC2aUpzXW7S1/w8coivvx0pPxkXOkCj zbfrzQ3oOz0aXX4da/82Roc/FGVs2bd+aqTyC46EOWg47AAtehS15xLDbGx7SJmX e9Iy6e31dSoS6vMJeZzOBgbwAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlNoI6U mtuBoHiPSvkeIEKNTQLfMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAny+s0rvb67sBmNcnut4IolEXWTSWrvJNn2jrVHnrlo05Ug20GbMwM rHM0c4idueeUkH8tDvnoIfGg4DaJvGMkuK5d0OBen0CgGCKaib3Ry1OAmnPNfyOK fSvg8lPvS4xRrXiODboI/NGF6FbH1viuti7/mynpMkBsv/Avr8Y5tRNfyvf66fdS ZMwCXS++6TOStOHlHraDYBal1Z9t4k1dvsaplIxNgJuYplhGlPm9zS645k/hWpWf q+Rqtas9uWfEaZPTZuW5r0yn3qx0FUwXavR5kW9FbznahZcq0qz1AwIqXuNEP8p1 jYUwNqoSy+IDMU4rOYGNDoSkqZ4aifiv -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:17 2025 by rpki-client