$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: bcaI84Qqh2/buL5tGdxGwSJW/+dU3zs4ZcMNJ1b8xhk= Subject key identifier: D4:75:0E:12:D8:45:F8:74:9A:D0:42:5A:22:C6:09:0C:F9:57:A1:E0 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 031B Signing time: Mon 03 Nov 2025 01:04:58 +0000 Manifest this update: Mon 03 Nov 2025 01:04:57 +0000 Manifest next update: Mon 10 Nov 2025 01:04:57 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: MBcvo4HAsWfhIHGTJyc2bSTEJDlq2dIe8B6XtpJL37s=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Nov 3 01:04:57 2025 GMT Not After : Nov 10 01:04:57 2025 GMT Subject: CN=6907ffba-28a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:72:06:fc:5f:ae:7a:d7:dd:e0:f5:31:24: 62:65:48:43:13:24:eb:8c:89:d6:ec:07:bd:01:9c: 53:80:4e:d4:42:59:09:79:e3:40:4f:0e:b9:cb:bf: 7a:2c:68:78:97:41:1d:16:6a:03:e7:3a:5f:5e:3c: 05:30:14:9a:53:d7:d2:15:1f:2f:fe:c3:4d:32:81: 84:18:84:f3:41:1d:78:56:40:cc:9d:fd:e5:c3:8f: 0f:de:22:ea:86:3f:15:e6:ea:98:5e:bd:2c:51:69: b6:18:a3:b1:75:90:a5:1e:78:34:2c:59:49:ab:18: 9f:ef:0a:39:d0:d9:0f:e6:10:21:29:a7:7e:35:94: f1:b7:24:09:5e:63:44:00:52:b3:a4:75:2a:2d:0b: 42:ce:f2:e2:ea:f3:37:17:2d:9f:89:06:db:f5:d1: 56:b8:41:9d:79:68:bd:1a:d9:53:47:9c:18:d7:7a: ba:56:da:6e:37:7d:8d:8b:16:2d:ba:fb:b8:9f:79: 19:6b:5c:ea:e4:2e:e9:da:66:a8:a2:62:ae:94:88: 83:0f:7f:8d:21:49:d2:c2:e3:e0:b8:56:9f:aa:8c: 72:d2:2e:9a:ca:21:bd:80:f3:30:88:ee:53:72:c1: d3:c3:c5:1f:6d:b5:cb:73:2d:0f:88:df:7d:ae:11: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:0E:12:D8:45:F8:74:9A:D0:42:5A:22:C6:09:0C:F9:57:A1:E0 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:95:13:58:b6:de:89:6b:93:6c:39:97:c4:90:24:93:c0: 76:e7:88:4f:03:ed:a5:3f:3b:af:44:e1:9c:24:cf:9b:63:0c: 97:80:71:2d:69:50:bc:6e:f0:3d:42:df:9a:9f:a4:19:b9:f3: 09:f7:a6:ab:3c:68:f1:b7:ec:60:0d:13:5d:9d:e3:20:d1:99: 46:bc:62:6a:01:b2:1c:3a:b2:4d:10:67:fc:e9:0a:56:9f:95: 7e:f9:78:f6:bb:3d:41:c4:10:09:f1:3e:a0:5b:38:c8:22:0f: d2:60:a8:2b:0a:6c:53:26:97:2b:a3:75:5d:fc:62:ef:07:9d: 36:f1:ca:d0:56:20:17:72:a2:46:fb:bd:63:3d:88:08:96:1b: f4:fe:7a:50:e1:c6:55:f8:cd:35:32:f0:fd:0b:e5:5f:bf:2a: d1:fa:99:de:68:11:91:58:2a:c0:b7:23:92:d1:0d:60:7e:3a: 94:66:ae:bb:07:d7:20:b7:d8:39:d9:6b:75:c1:f4:77:f3:aa: 67:b7:34:22:6d:76:ee:77:5a:b8:9b:f6:33:bb:78:27:e5:1d: 0e:a0:69:5f:16:78:7b:46:b6:d5:ce:f7:c0:d1:6d:71:ed:c6: 73:27:48:49:79:e5:bd:7c:75:ea:1d:fa:ac:a7:aa:6e:0e:5d: eb:4d:17:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUxMTAzMDEwNDU3WhcNMjUxMTEwMDEwNDU3WjAYMRYwFAYD VQQDEw02OTA3ZmZiYS0yOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYNyBvxfrnrX3eD1MSRiZUhDEyTrjInW7Ae9AZxTgE7UQlkJeeNATw65y796 LGh4l0EdFmoD5zpfXjwFMBSaU9fSFR8v/sNNMoGEGITzQR14VkDMnf3lw48P3iLq hj8V5uqYXr0sUWm2GKOxdZClHng0LFlJqxif7wo50NkP5hAhKad+NZTxtyQJXmNE AFKzpHUqLQtCzvLi6vM3Fy2fiQbb9dFWuEGdeWi9GtlTR5wY13q6VtpuN32NixYt uvu4n3kZa1zq5C7p2maoomKulIiDD3+NIUnSwuPguFafqoxy0i6ayiG9gPMwiO5T csHTw8UfbbXLcy0PiN99rhHo9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR1DhLY Rfh0mtBCWiLGCQz5V6HgMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtgpUTWLbeiWuTbDmXxJAkk8B254hPA+2lPzuvROGcJM+bYwyXgHEt aVC8bvA9Qt+an6QZufMJ96arPGjxt+xgDRNdneMg0ZlGvGJqAbIcOrJNEGf86QpW n5V++Xj2uz1BxBAJ8T6gWzjIIg/SYKgrCmxTJpcro3Vd/GLvB5028crQViAXcqJG +71jPYgIlhv0/npQ4cZV+M01MvD9C+VfvyrR+pneaBGRWCrAtyOS0Q1gfjqUZq67 B9cgt9g52Wt1wfR386pntzQibXbud1q4m/Yzu3gn5R0OoGlfFnh7RrbVzvfA0W1x 7cZzJ0hJeeW9fHXqHfqsp6puDl3rTRe8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:07 2025 by rpki-client