$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: NO3s8ZN8gf2DxU6rNDERsWGeVsQWxTOoiSpHXtVfpT8= Subject key identifier: 32:CE:8E:E0:98:75:03:D6:D0:47:0D:77:D8:98:30:2C:20:37:23:9B Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01D0 Signing time: Thu 23 Oct 2025 04:39:27 +0000 Manifest this update: Thu 23 Oct 2025 04:39:26 +0000 Manifest next update: Thu 30 Oct 2025 04:39:26 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: 8p+aaMyOHflI65Oijs4AWJY6Eyci1sYF6xG9ts/PGG0=) 2: B9E5755CAD8F11F08B71271EC4F9AE02.roa (hash: 3q/kXCj6QhT0A2qJ3iICI6+exrp6Pvck8re+vqyvTsQ=) 3: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Oct 23 04:39:26 2025 GMT Not After : Oct 30 04:39:26 2025 GMT Subject: CN=68f9b17f-64df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:d0:e1:9e:3e:a8:26:5e:d4:f0:8c:23:60: e6:0b:ad:9f:d5:d2:f5:d8:08:22:e2:89:2b:2b:1a: b4:b6:28:4f:46:ac:ae:88:1f:f8:5c:03:3e:49:ec: d8:f2:cb:b5:f2:97:e2:9c:35:0c:e7:1a:0c:29:92: 8c:56:ce:38:b8:c5:36:44:01:bd:cb:e5:0e:6e:75: 52:aa:43:7e:4a:54:65:18:f5:ae:fd:b5:98:ac:65: cf:7a:44:44:ed:e9:0b:3b:56:b7:f4:41:86:f4:bd: 14:bb:6b:36:16:da:02:29:19:0c:15:7d:38:2a:33: 72:04:0b:33:cd:e6:7c:6d:15:7a:07:97:ca:41:30: d5:0b:d0:29:d3:0f:e4:54:11:80:fd:46:ae:7c:92: ce:3f:f0:58:d4:55:99:ca:ca:89:92:02:55:ac:b2: 66:95:a3:9a:1d:e7:1a:c4:57:dc:f4:b9:63:a5:ae: 59:df:fc:9b:8b:f5:60:21:6a:a8:09:df:2e:11:ec: 7f:5b:3b:64:73:e8:9d:58:7e:f0:20:a9:34:e8:98: 44:d4:f8:8a:5a:6d:23:fc:19:fb:a1:30:47:fc:48: fb:8b:73:27:8c:bb:35:49:ea:87:32:9e:ce:43:aa: 9b:03:ad:16:fa:e9:c3:e4:87:1c:5e:c2:ce:70:70: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CE:8E:E0:98:75:03:D6:D0:47:0D:77:D8:98:30:2C:20:37:23:9B X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a8:40:19:04:66:2b:22:73:cc:4e:8d:c7:a6:ac:20:05:f8: 0e:06:d4:62:6b:84:e2:a6:8e:d6:9d:51:e7:f8:74:84:13:f3: 9f:a0:ef:f8:95:0e:3b:f9:e6:25:c2:c0:3d:f5:08:64:88:8d: e5:45:ca:40:09:7b:42:2e:12:48:4a:d4:6e:bc:a7:5f:85:9d: c0:0f:5e:89:7c:28:77:bc:e3:1f:ef:a4:b1:93:65:8d:75:8d: 52:e1:16:c7:c1:a3:26:cd:bd:0f:78:ef:fd:f9:97:bf:21:00: 75:60:ec:63:7f:e0:3b:fa:bd:55:f5:54:45:3e:28:30:02:05: 05:f9:55:07:2b:2e:52:09:5b:b4:15:48:c0:e2:e5:e1:fe:a3: 1d:8f:fd:94:85:cf:74:76:33:1e:37:8d:52:20:a4:5e:e0:00: 3f:8e:2e:4f:6f:74:dd:bf:bf:e1:4c:c5:78:af:57:b1:06:90: 01:d6:45:55:e0:69:c9:ca:32:3d:22:60:6c:69:2d:9d:49:dd: bf:dc:d6:13:8e:ff:2f:b9:74:a3:96:69:c7:2c:e9:31:06:26: 5b:0e:b8:15:49:a1:f8:3f:ed:83:ae:c3:23:5a:a1:ea:7e:56: 55:4d:72:d2:99:3b:75:72:33:49:7a:7d:1b:85:e4:db:85:ec: 47:ed:25:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMDIzMDQzOTI2WhcNMjUxMDMwMDQzOTI2WjAYMRYwFAYD VQQDEw02OGY5YjE3Zi02NGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+7Q4Z4+qCZe1PCMI2DmC62f1dL12Agi4okrKxq0tihPRqyuiB/4XAM+SezY 8su18pfinDUM5xoMKZKMVs44uMU2RAG9y+UObnVSqkN+SlRlGPWu/bWYrGXPekRE 7ekLO1a39EGG9L0Uu2s2FtoCKRkMFX04KjNyBAszzeZ8bRV6B5fKQTDVC9Ap0w/k VBGA/UaufJLOP/BY1FWZysqJkgJVrLJmlaOaHecaxFfc9Lljpa5Z3/ybi/VgIWqo Cd8uEex/Wztkc+idWH7wIKk06JhE1PiKWm0j/Bn7oTBH/Ej7i3MnjLs1SeqHMp7O Q6qbA60W+unD5IccXsLOcHCXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLOjuCY dQPW0EcNd9iYMCwgNyObMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2qEAZBGYrInPMTo3HpqwgBfgOBtRia4Tipo7WnVHn+HSEE/OfoO/4 lQ47+eYlwsA99QhkiI3lRcpACXtCLhJIStRuvKdfhZ3AD16JfCh3vOMf76Sxk2WN dY1S4RbHwaMmzb0PeO/9+Ze/IQB1YOxjf+A7+r1V9VRFPigwAgUF+VUHKy5SCVu0 FUjA4uXh/qMdj/2Uhc90djMeN41SIKRe4AA/ji5Pb3Tdv7/hTMV4r1exBpAB1kVV 4GnJyjI9ImBsaS2dSd2/3NYTjv8vuXSjlmnHLOkxBiZbDrgVSaH4P+2DrsMjWqHq flZVTXLSmTt1cjNJen0bheTbhexH7SUM -----END CERTIFICATE-----Generated at Thu Oct 23 09:57:51 2025 by rpki-client