$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: j1d9lmTfoRB1bWP7iDIx3n2ldgQU5r6XH4FO30nmk4I= Subject key identifier: 69:04:17:D1:CD:2C:26:94:50:8E:9C:F2:11:F8:37:02:D6:77:78:92 Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 0601 Signing time: Tue 04 Nov 2025 22:59:55 +0000 Manifest this update: Tue 04 Nov 2025 22:59:55 +0000 Manifest next update: Tue 11 Nov 2025 22:59:55 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: 0Foosfkz0nVEfqmKmbm+p5ok1Bk3tZuY/u3nSAfHz94=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: FUPhJ7viy8W3pQYFN/dbDBBE9qpZwOpzgVenyvyXp+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Validity Not Before: Nov 4 22:59:55 2025 GMT Not After : Nov 11 22:59:55 2025 GMT Subject: CN=690a856b-0b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:22:b9:b4:8c:fc:18:cb:20:05:96:a9:c5: b3:9d:8e:10:db:dd:97:c2:14:f4:50:f2:72:1b:78: bf:33:72:97:b6:14:e0:a6:bd:6f:b1:ef:c0:f0:f5: a7:82:db:45:06:76:ea:4f:a4:89:25:16:5e:ce:90: d6:35:2a:78:91:45:68:91:e4:46:81:4c:dc:0f:73: f7:39:d2:92:ce:23:ee:ac:57:1c:4d:ce:df:c6:38: b1:24:0f:d2:61:09:bc:fc:44:57:7f:71:ef:e3:62: 5b:88:a0:5f:8d:70:af:56:1e:05:7e:5a:08:89:1c: ba:7e:39:6c:bd:1d:8c:36:82:2f:c3:58:44:36:c7: 5a:c6:5f:0a:cf:07:35:1d:f0:98:47:05:67:ff:5e: e5:d7:0c:e6:2f:b2:56:27:02:ef:17:ee:5c:1b:73: 80:a3:a4:d3:d2:eb:80:7c:b9:5e:23:7f:64:0e:1a: 3a:28:39:9d:59:3e:bd:bb:a1:eb:d6:51:18:28:38: 56:ea:e1:c2:db:0f:ae:db:c0:66:62:d6:9b:92:bf: 18:c7:bd:dd:3a:46:ac:c2:56:39:49:e8:d2:b0:99: d1:12:88:f3:70:56:ea:da:32:97:0f:56:1e:37:8a: 0d:56:0c:ec:48:a3:98:80:99:82:d0:be:e2:ac:89: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:17:D1:CD:2C:26:94:50:8E:9C:F2:11:F8:37:02:D6:77:78:92 X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:15:48:47:0d:98:d0:e0:34:34:d6:a5:9b:bc:13:e7:e8: 71:c4:3e:f7:8b:ad:bf:19:06:cf:e5:d6:25:fa:98:f8:a9:d9: e3:d3:30:ce:94:c4:e3:e0:bd:11:43:26:0b:0b:b6:5d:0d:8a: bf:e7:b7:6f:5d:66:c3:f5:f9:e7:ec:9e:8e:a8:3b:1a:47:ec: ac:f1:36:40:4a:d7:6b:06:5a:34:ca:10:34:03:13:a2:3c:f3: ef:92:67:a7:7f:1f:35:ec:8e:fe:10:e4:35:1c:76:aa:0f:aa: 13:41:b9:a4:c1:9a:76:2d:ca:2e:4b:7c:8f:3c:e5:86:31:67: 28:2b:9c:64:ad:c0:1d:e3:c4:82:79:6e:ea:45:60:1c:b8:c5: 5f:50:8f:ca:2e:1d:d9:f1:98:2a:75:39:0e:8a:ef:5e:95:3c: 68:ac:23:c9:50:4e:35:86:c8:8a:a8:2b:09:55:82:47:ef:09: f1:ce:e7:b6:dd:e5:25:8e:f3:b0:bb:67:7a:24:bb:84:79:4d: 19:a4:26:d5:2f:1a:ac:d2:4a:f5:17:53:d6:74:60:8f:3c:7c: ff:7f:06:32:c6:ec:04:31:b8:08:05:53:47:46:c6:9d:3d:a4: c0:98:7f:f5:fb:ec:fc:d0:07:50:36:15:06:eb:67:66:32:54: e4:9d:7d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjUxMTA0MjI1OTU1WhcNMjUxMTExMjI1OTU1WjAYMRYwFAYD VQQDEw02OTBhODU2Yi0wYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WwiubSM/BjLIAWWqcWznY4Q292XwhT0UPJyG3i/M3KXthTgpr1vse/A8PWn gttFBnbqT6SJJRZezpDWNSp4kUVokeRGgUzcD3P3OdKSziPurFccTc7fxjixJA/S YQm8/ERXf3Hv42JbiKBfjXCvVh4FfloIiRy6fjlsvR2MNoIvw1hENsdaxl8Kzwc1 HfCYRwVn/17l1wzmL7JWJwLvF+5cG3OAo6TT0uuAfLleI39kDho6KDmdWT69u6Hr 1lEYKDhW6uHC2w+u28BmYtabkr8Yx73dOkaswlY5SejSsJnREojzcFbq2jKXD1Ye N4oNVgzsSKOYgJmC0L7irIm7kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkEF9HN LCaUUI6c8hH4NwLWd3iSMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgCRVIRw2Y0OA0NNalm7wT5+hxxD73i62/GQbP5dYl+pj4qdnj0zDO lMTj4L0RQyYLC7ZdDYq/57dvXWbD9fnn7J6OqDsaR+ys8TZAStdrBlo0yhA0AxOi PPPvkmenfx817I7+EOQ1HHaqD6oTQbmkwZp2LcouS3yPPOWGMWcoK5xkrcAd48SC eW7qRWAcuMVfUI/KLh3Z8ZgqdTkOiu9elTxorCPJUE41hsiKqCsJVYJH7wnxzue2 3eUljvOwu2d6JLuEeU0ZpCbVLxqs0kr1F1PWdGCPPHz/fwYyxuwEMbgIBVNHRsad PaTAmH/1++z80AdQNhUG62dmMlTknX2N -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:27 2025 by rpki-client