$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: uzsV6ND8Nhs0GdB5LAWIEsgIswcPRG1Za2QOY4hN8/g= Subject key identifier: 17:86:86:44:44:93:B7:16:33:B0:3F:75:AF:DC:D0:74:F1:F9:94:A4 Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 43 Signing time: Mon 03 Nov 2025 07:26:29 +0000 Manifest this update: Mon 03 Nov 2025 07:26:29 +0000 Manifest next update: Mon 10 Nov 2025 07:26:29 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: ba3/1sIZ4YyYi43R1bjpTBuvbw/V9+tTfJHHzwXLBlQ=) 2: C6047A6481A111F08CBC9741C4F9AE02.roa (hash: bgbW7xHV4YTAXMUDumTfB3UuK2rCir4YSQMN24IIGfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Nov 3 07:26:29 2025 GMT Not After : Nov 10 07:26:29 2025 GMT Subject: CN=69085925-527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:72:9e:b5:49:15:52:27:ae:cf:22:4a:10: f4:f8:49:11:f5:0b:88:b2:ff:db:72:80:49:b9:42: fc:87:4d:b7:80:24:3c:0f:3b:23:0d:62:ec:11:5f: c6:e2:ee:32:67:9a:cb:90:bd:72:f1:6a:9b:84:88: 09:ed:3f:77:a5:f8:2d:93:0d:88:6f:7e:9b:b7:90: d3:2c:3b:a7:2b:30:81:5a:2f:a7:0a:24:2f:f9:7b: fc:ea:f6:51:24:9a:2e:3a:10:33:cb:6c:62:07:8b: a5:34:76:8c:4b:83:96:89:55:5f:10:3d:55:51:d5: 60:87:8a:a8:85:45:67:01:a9:44:23:11:8a:1c:31: 47:cd:c9:d6:bf:48:c7:cb:7d:96:3b:3c:09:2b:ce: 61:db:42:24:82:63:8d:a4:08:d6:39:38:5e:97:70: 44:a0:e0:ae:8c:3d:95:cd:64:42:bb:f6:b1:ac:ba: a1:cb:cd:53:cc:ee:5c:e6:4f:f2:4e:6e:16:8a:b4: 59:e6:22:a4:f2:a7:30:f7:86:04:13:35:da:d3:a0: fa:c2:89:37:91:68:97:11:04:83:2e:df:1b:43:ea: 88:1f:00:3a:bc:15:e1:b2:de:fc:2c:c3:d3:4f:a6: f9:5e:db:fd:a2:5e:c8:9b:66:96:ae:ee:74:c1:e6: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:86:86:44:44:93:B7:16:33:B0:3F:75:AF:DC:D0:74:F1:F9:94:A4 X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:da:2e:91:f2:68:75:30:1f:84:d8:7b:84:bb:28:58:37:ff: 54:36:4c:51:06:b4:58:4f:0e:88:6e:f2:bc:9b:f6:eb:ef:bf: f7:21:57:b7:8c:82:0e:75:a8:6e:af:4c:22:b0:36:aa:e1:53: 67:ae:f7:25:a8:52:75:ad:b6:53:6b:fa:1a:b6:64:33:6a:6c: a5:ee:8a:f1:8b:9a:d1:92:3b:44:8e:e0:49:9d:1e:54:f1:64: b8:55:19:b5:ec:83:d0:73:72:2a:5f:66:9c:18:80:7b:d2:ee: f0:7c:13:70:68:9b:71:f6:7f:d7:2f:6e:1c:cb:ae:03:0a:91: 03:81:de:a8:3d:02:6f:af:02:63:49:5c:52:df:b1:fd:50:b9: 96:2d:dd:68:9d:36:34:b5:77:80:9c:ae:d5:34:95:1f:b6:29: 92:43:a6:6a:f9:d7:49:1e:69:c6:dc:fc:c7:c1:72:a6:59:58: 9c:d3:49:45:72:7c:ca:43:dc:d3:bd:42:f6:2b:83:ac:07:b3: 7f:43:a9:1f:8d:87:22:e4:ea:52:b7:fb:1e:3e:36:7d:a8:7e: 80:95:50:9d:d8:e8:69:03:ad:a1:6e:a6:14:33:3a:54:16:3f: 5b:f8:62:cd:0c:36:e5:6b:f7:d3:85:22:60:23:05:ed:f8:9b: 62:a7:d1:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTExMDMwNzI2MjlaFw0yNTExMTAwNzI2MjlaMBgxFjAUBgNV BAMTDTY5MDg1OTI1LTUyN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFF3KetUkVUieuzyJKEPT4SRH1C4iy/9tygEm5QvyHTbeAJDwPOyMNYuwRX8bi 7jJnmsuQvXLxapuEiAntP3el+C2TDYhvfpu3kNMsO6crMIFaL6cKJC/5e/zq9lEk mi46EDPLbGIHi6U0doxLg5aJVV8QPVVR1WCHiqiFRWcBqUQjEYocMUfNyda/SMfL fZY7PAkrzmHbQiSCY42kCNY5OF6XcESg4K6MPZXNZEK79rGsuqHLzVPM7lzmT/JO bhaKtFnmIqTypzD3hgQTNdrToPrCiTeRaJcRBIMu3xtD6ogfADq8FeGy3vwsw9NP pvle2/2iXsibZpau7nTB5keDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF4aGREST txYzsD91r9zQdPH5lKQwHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfaLpHyaHUwH4TYe4S7KFg3/1Q2TFEGtFhPDohu8ryb9uvvv/chV7eM gg51qG6vTCKwNqrhU2eu9yWoUnWttlNr+hq2ZDNqbKXuivGLmtGSO0SO4EmdHlTx ZLhVGbXsg9BzcipfZpwYgHvS7vB8E3Bom3H2f9cvbhzLrgMKkQOB3qg9Am+vAmNJ XFLfsf1QuZYt3WidNjS1d4CcrtU0lR+2KZJDpmr510keacbc/MfBcqZZWJzTSUVy fMpD3NO9QvYrg6wHs39DqR+NhyLk6lK3+x4+Nn2ofoCVUJ3Y6GkDraFuphQzOlQW P1v4Ys0MNuVr99OFImAjBe34m2Kn0a4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:56 2025 by rpki-client