$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json) Hash identifier: t/0kq1774qLilAtuSEiYh5GKdvQ5S0YzohwGc91PENU= Subject key identifier: 19:95:2C:5C:85:D7:B5:6C:3F:29:0D:4F:1D:01:7F:74:AC:A6:C7:45 Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft Manifest number: 0B97 Signing time: Sun 02 Nov 2025 18:58:56 +0000 Manifest this update: Sun 02 Nov 2025 18:58:55 +0000 Manifest next update: Sun 09 Nov 2025 18:58:55 +0000 Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: nJ6DI67HpihjyvdUv3vucCf1oGbb+qO9RZy7c1H6p3k=) 2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 6AStLiXGFTbizy72srYzdt3NNVrbT13s0hjr9rc8KH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Validity Not Before: Nov 2 18:58:55 2025 GMT Not After : Nov 9 18:58:55 2025 GMT Subject: CN=6907a9ef-4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:8a:9f:d1:02:45:27:13:ba:21:07:0f:bd: 60:dd:f9:c2:e8:c1:d4:b0:f2:31:bc:2b:f1:de:0d: ab:a7:ec:56:ba:37:3d:49:73:ee:51:b5:c7:ba:6d: a2:49:f7:67:43:b0:c5:fa:ce:b1:76:39:5b:c5:e1: b1:00:8c:86:a0:f4:49:52:21:f6:e4:c0:58:d5:0c: c4:0b:21:af:e5:61:52:02:ae:4e:42:48:fa:a4:19: 47:85:cf:16:25:f7:ef:e8:4a:68:37:76:13:f1:94: 58:49:b1:40:18:78:0c:b5:2e:82:72:48:0c:cd:f5: 11:88:9c:e6:53:b0:84:70:f9:95:9e:cb:d4:92:d7: e1:25:e1:17:4b:a1:33:6c:5f:0b:07:af:29:61:c6: 36:14:8f:76:21:33:2d:8f:f8:08:2c:8c:00:3d:28: 1a:1f:e4:6b:db:d1:4e:ec:36:22:ca:bc:37:4e:72: 9e:f5:e2:0e:55:c5:ab:b9:b4:e2:06:d3:98:88:68: 48:2c:b2:05:94:29:d8:c4:1d:49:c2:2b:7b:26:99: 72:62:a0:7b:8e:06:69:07:9c:b3:3f:7a:42:ed:9b: df:f6:4f:28:00:a1:4a:1f:7d:e1:63:3f:39:a1:38: f8:43:ce:db:46:68:1c:ee:a1:00:14:33:07:ff:8b: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:2C:5C:85:D7:B5:6C:3F:29:0D:4F:1D:01:7F:74:AC:A6:C7:45 X509v3 Authority Key Identifier: keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:c8:1f:b2:66:f6:57:ff:8b:b0:7a:6b:82:ca:5f:a4:4c:a4: 9e:13:82:d2:a3:32:db:1d:f1:ae:e6:bf:75:40:8e:16:d1:17: b1:d3:21:73:13:07:d1:f7:d2:93:13:0b:af:c7:07:00:15:dd: de:8c:a2:b9:87:a6:fe:5c:59:89:97:5e:fe:0e:ed:7e:84:8e: 92:69:1f:bf:ac:07:f8:ef:56:62:6c:95:b0:dd:fb:b0:fb:1a: e0:3d:82:a5:6f:a8:6c:7b:53:0c:46:08:0b:d6:20:8e:a3:ce: 59:80:37:7c:c3:15:df:5d:e7:ad:8c:7b:df:7c:bc:12:cb:7e: 30:39:a2:2b:8d:04:6a:27:cd:49:66:95:ac:a8:40:77:fc:b0: 7e:a3:e5:ee:e1:cd:34:c5:6b:61:4e:0e:f4:48:e7:76:f7:5a: 79:98:e0:20:e5:01:12:c8:5a:61:0b:28:ac:0b:3a:e6:d9:10: 6a:32:41:3e:29:3f:63:ae:fa:4d:96:47:4c:2c:52:f2:da:d1: 37:a4:61:ea:b6:f1:69:ff:52:f3:74:ec:ed:22:4d:66:bf:1f: 4c:18:64:af:98:a9:01:1d:83:7a:b6:80:d9:7b:0f:27:a1:9b: df:91:4a:e3:9b:70:e8:e7:e2:48:94:60:25:26:62:80:2e:3e: 30:fd:3a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG RTE0ODQ0QkIwHhcNMjUxMTAyMTg1ODU1WhcNMjUxMTA5MTg1ODU1WjAYMRYwFAYD VQQDEw02OTA3YTllZi00YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjKKn9ECRScTuiEHD71g3fnC6MHUsPIxvCvx3g2rp+xWujc9SXPuUbXHum2i SfdnQ7DF+s6xdjlbxeGxAIyGoPRJUiH25MBY1QzECyGv5WFSAq5OQkj6pBlHhc8W Jffv6EpoN3YT8ZRYSbFAGHgMtS6CckgMzfURiJzmU7CEcPmVnsvUktfhJeEXS6Ez bF8LB68pYcY2FI92ITMtj/gILIwAPSgaH+Rr29FO7DYiyrw3TnKe9eIOVcWrubTi BtOYiGhILLIFlCnYxB1Jwit7JplyYqB7jgZpB5yzP3pC7Zvf9k8oAKFKH33hYz85 oTj4Q87bRmgc7qEAFDMH/4tLGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmVLFyF 17VsPykNTx0Bf3SspsdFMB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2 REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1 ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNyB+yZvZX/4uwemuCyl+kTKSeE4LSozLbHfGu5r91QI4W0Rex0yFz EwfR99KTEwuvxwcAFd3ejKK5h6b+XFmJl17+Du1+hI6SaR+/rAf471ZibJWw3fuw +xrgPYKlb6hse1MMRggL1iCOo85ZgDd8wxXfXeetjHvffLwSy34wOaIrjQRqJ81J ZpWsqEB3/LB+o+Xu4c00xWthTg70SOd291p5mOAg5QESyFphCyisCzrm2RBqMkE+ KT9jrvpNlkdMLFLy2tE3pGHqtvFp/1LzdOztIk1mvx9MGGSvmKkBHYN6toDZew8n oZvfkUrjm3Do5+JIlGAlJmKALj4w/Trm -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:18 2025 by rpki-client