$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: 8zPoEu5id7yYE+kYxQ7wu0Fb3IgkIHPuKCtLOKC4riQ= Subject key identifier: FC:BA:12:46:5A:78:DD:D0:99:F2:42:64:8A:B1:5A:88:A6:9C:A9:8E Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: F4 Signing time: Mon 03 Nov 2025 05:13:53 +0000 Manifest this update: Mon 03 Nov 2025 05:13:53 +0000 Manifest next update: Mon 10 Nov 2025 05:13:52 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 9Z4HKi8uE+covzOTXuNWLgYfP0rw7t8HDFpfpbniTbs=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: piBG26jjxocqk1EfDzKmzUArtL5VT+oZB8alGAtK9pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Nov 3 05:13:53 2025 GMT Not After : Nov 10 05:13:52 2025 GMT Subject: CN=69083a11-8edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:b9:76:3d:a7:be:8f:67:43:13:db:76:ec: 89:57:ca:10:0f:b5:de:a7:d5:b1:bf:07:7f:ae:1f: 9d:1b:b2:1e:db:bc:42:df:77:5a:0e:e1:4e:a1:fc: 12:e9:d2:bf:29:bd:2c:db:fa:f3:e5:04:b5:71:74: db:ed:93:b7:53:e0:1a:f1:5d:c0:19:20:d4:1c:72: f7:9d:ba:48:89:9d:53:0a:d4:b5:76:43:16:17:35: 94:a4:72:90:1c:b7:7d:59:8c:f2:6d:ab:a7:3f:be: 90:27:c0:68:a1:49:33:f7:d0:e9:07:29:bd:8f:00: 3c:8d:58:65:b9:e6:7e:37:88:c8:a9:47:07:38:15: 45:4f:39:3a:34:f2:33:88:77:09:31:eb:22:7f:54: 2e:2a:b3:6d:88:c9:3e:dc:7b:d8:af:ba:96:bf:95: 5d:93:da:3d:91:c1:2f:01:8e:07:10:11:98:ba:81: 57:69:fe:45:fe:fa:61:d5:a4:f8:3f:62:aa:07:cd: 65:4b:85:09:fe:e4:2d:d9:23:80:f8:ee:86:f6:57: 42:6e:2d:0e:e3:54:f5:fd:ed:88:5a:7b:97:25:65: 91:93:8f:ea:5b:35:0e:49:e8:b7:f7:1d:9c:b7:b4: 46:e7:d7:e3:86:be:4f:b2:f9:bf:94:ef:e8:53:67: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:12:46:5A:78:DD:D0:99:F2:42:64:8A:B1:5A:88:A6:9C:A9:8E X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fe:c8:ec:cf:7d:63:fb:2d:f9:cb:59:46:25:8c:18:07:d9: 69:2f:03:7d:e2:71:40:9c:dd:0b:3c:b8:de:a7:78:58:c8:47: 3a:22:ee:df:9e:74:dd:0d:2c:2a:2c:8b:5f:7d:7c:93:f6:05: 44:79:e8:db:65:bb:ac:3b:2a:61:e7:2f:04:45:1a:ea:68:ab: dd:93:3d:4a:88:35:82:7e:64:7f:bd:2b:3d:78:51:59:39:68: 5e:f2:60:35:a4:21:80:c6:57:72:5e:33:0a:ad:db:61:bc:95: 02:66:b4:12:0b:d2:90:d4:5d:44:fe:3b:7e:84:70:e3:0d:ef: 22:88:dc:41:84:52:2d:05:c2:5f:a1:79:33:30:87:07:5f:53: 57:82:48:b0:01:ed:60:8d:e6:34:be:e1:78:29:c7:79:50:dc: 0f:72:eb:07:ce:2d:79:7b:a9:c5:22:6b:40:02:ed:87:62:aa: 97:cd:7f:7f:b5:c1:4c:0b:57:d5:c4:8f:e4:8e:18:96:a5:bb: 1b:06:da:31:f7:1b:97:7e:ca:b9:3a:c1:fd:33:bf:ee:dd:b8: 00:6f:d9:56:78:6d:9f:c0:95:b4:23:f8:00:96:25:55:38:2b: 93:cf:ef:25:07:41:03:e3:31:89:0f:d5:55:92:92:92:6d:cf: d4:66:37:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUxMTAzMDUxMzUzWhcNMjUxMTEwMDUxMzUyWjAYMRYwFAYD VQQDEw02OTA4M2ExMS04ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16C5dj2nvo9nQxPbduyJV8oQD7Xep9Wxvwd/rh+dG7Ie27xC33daDuFOofwS 6dK/Kb0s2/rz5QS1cXTb7ZO3U+Aa8V3AGSDUHHL3nbpIiZ1TCtS1dkMWFzWUpHKQ HLd9WYzybaunP76QJ8BooUkz99DpBym9jwA8jVhlueZ+N4jIqUcHOBVFTzk6NPIz iHcJMesif1QuKrNtiMk+3HvYr7qWv5Vdk9o9kcEvAY4HEBGYuoFXaf5F/vph1aT4 P2KqB81lS4UJ/uQt2SOA+O6G9ldCbi0O41T1/e2IWnuXJWWRk4/qWzUOSei39x2c t7RG59fjhr5Psvm/lO/oU2dt4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy6EkZa eN3QmfJCZIqxWoimnKmOMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/sjsz31j+y35y1lGJYwYB9lpLwN94nFAnN0LPLjep3hYyEc6Iu7f nnTdDSwqLItffXyT9gVEeejbZbusOyph5y8ERRrqaKvdkz1KiDWCfmR/vSs9eFFZ OWhe8mA1pCGAxldyXjMKrdthvJUCZrQSC9KQ1F1E/jt+hHDjDe8iiNxBhFItBcJf oXkzMIcHX1NXgkiwAe1gjeY0vuF4Kcd5UNwPcusHzi15e6nFImtAAu2HYqqXzX9/ tcFMC1fVxI/kjhiWpbsbBtox9xuXfsq5OsH9M7/u3bgAb9lWeG2fwJW0I/gAliVV OCuTz+8lB0ED4zGJD9VVkpKSbc/UZjfy -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:30 2025 by rpki-client