$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: yJh1OslmMMY3vBaLPB9SvRy7SU8+AO2NIsUdn+yTqtw= Subject key identifier: 17:C5:BE:80:C5:9A:C8:9A:E5:5E:F9:76:3B:5C:17:77:98:44:87:77 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: 0105 Signing time: Sat 25 Oct 2025 08:40:27 +0000 Manifest this update: Sat 25 Oct 2025 08:40:27 +0000 Manifest next update: Sat 01 Nov 2025 08:40:27 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: zLzHHswqG6nAFE0Ca+CMIxhRx9o3qaSP1aMSEYeyjT0=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: iyVM1h+Ep3e3RRmXJiIJW8+nb71UCnekaP7xnKvCLmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Oct 25 08:40:27 2025 GMT Not After : Nov 1 08:40:27 2025 GMT Subject: CN=68fc8cfb-08ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:89:a6:da:4b:0f:39:03:2e:af:ea:0f:21: 68:ab:2d:35:9b:9b:b9:5d:2c:16:bc:89:0a:a9:13: 77:e7:fc:7a:c1:6c:8f:ce:7d:01:00:aa:7c:ec:1f: 0c:9b:d2:34:e3:4c:3a:63:2a:5e:44:9f:c3:95:8d: 36:44:04:00:1d:45:32:33:2b:db:73:50:04:ee:70: d8:c9:ae:e8:43:16:30:56:c1:e5:e3:57:5e:bd:7c: af:94:d5:63:77:ab:69:4b:28:28:3f:ca:ca:e9:28: a6:fb:ed:b7:a2:b1:16:22:9d:90:67:ec:bb:d8:ba: f8:a4:42:c9:65:07:3a:6e:db:1d:7e:ef:64:c8:e2: 6f:bb:27:50:4c:36:70:cd:1c:f8:8e:f4:51:da:dd: 97:d6:63:38:d2:1f:0e:f1:fc:33:0a:6c:68:d0:6e: 27:8e:c0:48:bc:10:47:06:52:3c:f6:40:a0:64:f1: 06:e9:06:76:ac:c6:2e:eb:57:76:bb:f4:1f:74:dd: 0a:18:bb:a0:8f:13:46:cb:fb:df:c4:87:a9:ec:49: f4:df:ce:ed:5e:13:d5:aa:c9:14:86:68:fd:61:0b: 1e:48:66:ac:64:db:ba:db:f7:a6:8b:36:65:9d:4f: a0:83:5b:52:af:b1:7d:28:3b:01:70:18:01:88:98: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:BE:80:C5:9A:C8:9A:E5:5E:F9:76:3B:5C:17:77:98:44:87:77 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3c:7b:c1:b4:17:90:ce:6c:b8:39:fa:f6:60:99:6d:10:75: 0c:26:91:83:de:df:e9:3a:7b:fd:e7:4a:9c:ee:af:35:f2:3e: 2a:b7:aa:73:38:b3:d0:8a:da:32:18:fc:f4:d0:71:af:07:a3: 61:2c:df:c3:33:19:23:85:75:14:65:05:91:d0:ab:18:8b:f9: 2c:c8:f9:22:f0:89:61:b2:50:48:81:6e:ea:3b:65:f5:90:39: 27:05:0d:e2:47:82:4f:7a:3b:64:99:13:6a:f7:9c:fc:c4:06: 68:24:a5:60:d5:91:a3:56:02:60:ca:ab:00:de:34:56:d5:0b: 15:30:f4:ef:06:14:74:ba:ad:b6:64:d1:cc:d2:d6:b1:ae:21: 97:63:7f:12:6a:71:bf:00:e1:6f:11:f5:39:03:21:15:9e:13: 73:2f:9e:c2:49:9d:59:16:2d:76:81:2f:42:8b:ab:d0:b9:35: 3a:dc:01:d4:ae:e2:35:32:06:00:95:ea:ad:40:e5:16:fe:bc: 5d:fa:0a:25:5a:6f:f3:1a:67:7f:f4:00:39:56:00:ae:a6:51: c7:7b:bf:74:aa:54:eb:14:79:af:f1:01:52:f3:ad:73:bc:56: c7:ca:f8:7b:78:6e:4b:3e:39:30:ec:1b:06:42:8e:75:c5:78: da:b6:eb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUxMDI1MDg0MDI3WhcNMjUxMTAxMDg0MDI3WjAYMRYwFAYD VQQDEw02OGZjOGNmYi0wOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApauJptpLDzkDLq/qDyFoqy01m5u5XSwWvIkKqRN35/x6wWyPzn0BAKp87B8M m9I040w6YypeRJ/DlY02RAQAHUUyMyvbc1AE7nDYya7oQxYwVsHl41devXyvlNVj d6tpSygoP8rK6Sim++23orEWIp2QZ+y72Lr4pELJZQc6btsdfu9kyOJvuydQTDZw zRz4jvRR2t2X1mM40h8O8fwzCmxo0G4njsBIvBBHBlI89kCgZPEG6QZ2rMYu61d2 u/QfdN0KGLugjxNGy/vfxIep7En0387tXhPVqskUhmj9YQseSGasZNu62/emizZl nU+gg1tSr7F9KDsBcBgBiJiuoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfFvoDF msia5V75djtcF3eYRId3MB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2PHvBtBeQzmy4Ofr2YJltEHUMJpGD3t/pOnv950qc7q818j4qt6pz OLPQitoyGPz00HGvB6NhLN/DMxkjhXUUZQWR0KsYi/ksyPki8IlhslBIgW7qO2X1 kDknBQ3iR4JPejtkmRNq95z8xAZoJKVg1ZGjVgJgyqsA3jRW1QsVMPTvBhR0uq22 ZNHM0taxriGXY38SanG/AOFvEfU5AyEVnhNzL57CSZ1ZFi12gS9Ci6vQuTU63AHU ruI1MgYAleqtQOUW/rxd+golWm/zGmd/9AA5VgCuplHHe790qlTrFHmv8QFS861z vFbHyvh7eG5LPjkw7BsGQo51xXjatuuD -----END CERTIFICATE-----Generated at Sat Oct 25 13:42:27 2025 by rpki-client