$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: cJExDxT9ySt8+3Y6STcWsD0hfcoruDvAQt1QdHYXhdA= Subject key identifier: 36:98:43:9D:DC:0B:EB:07:D2:F9:85:96:DE:AA:11:D6:98:C7:0D:BB Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 34 Signing time: Mon 27 Oct 2025 10:10:53 +0000 Manifest this update: Mon 27 Oct 2025 10:10:52 +0000 Manifest next update: Mon 03 Nov 2025 10:10:52 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: NQZsxofVTS6vp5FbMtWGzh2tMdohD6yq1gOSGQxlKKU=) 2: 02272F2E896711F0B42EC968C4F9AE02.roa (hash: rm/ey7rx0cPi5GCGr0/kJPWz5Y07ETlHSyUfOYZc1xo=) 3: F060118A896511F085932767C4F9AE02.roa (hash: NflGB5cG6iDGEXLAgTMkx8GjKVI5zeUepUeNC6PCvow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 10:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Oct 27 10:10:52 2025 GMT Not After : Nov 3 10:10:52 2025 GMT Subject: CN=68ff452d-d437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:cd:2a:00:25:12:c1:6b:9b:d7:23:25:3f: 49:ea:5d:ed:66:da:32:53:14:46:68:04:72:35:8e: 61:1c:f8:6a:fd:b8:0c:cf:30:a7:0a:36:19:0d:a1: cc:72:bb:03:1c:c0:19:1d:0f:2a:72:90:31:7c:39: 15:2d:9c:8f:9d:a2:b5:57:81:f7:d2:a6:b0:e6:b1: 8d:64:46:ff:0f:8e:49:6f:0f:42:90:8e:fd:8f:3c: bb:5a:00:ad:82:8c:a0:4c:a4:df:f8:b8:9c:e5:99: fa:5a:f9:b4:98:a6:3b:cb:53:32:db:85:01:79:1b: c3:0f:55:14:a2:f8:07:af:aa:1f:35:11:d7:3b:63: 1d:e6:ea:1a:a3:3e:f8:09:a5:0c:ce:54:3d:74:32: 6d:1c:cc:12:df:48:bc:43:93:7d:e5:b5:0a:c2:b6: 81:f3:be:fd:30:e5:47:87:c4:36:43:a1:59:20:30: 1a:86:e2:81:a4:51:22:18:8d:98:09:f5:25:2e:7d: 44:22:b7:fd:42:85:00:70:1c:a9:44:6b:d5:ba:c0: da:a6:ff:1d:d0:86:b7:a8:f8:82:f2:74:c8:2b:e8: a9:01:55:a5:42:a6:20:7c:79:41:48:db:2c:66:18: 35:29:db:55:55:47:cd:eb:90:a3:6c:6c:6b:d9:fd: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:98:43:9D:DC:0B:EB:07:D2:F9:85:96:DE:AA:11:D6:98:C7:0D:BB X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c7:67:5a:1e:28:95:a8:54:e4:19:ca:0b:b8:77:71:aa:93: 71:03:8e:54:cf:d0:81:e0:25:15:31:e3:a2:f5:b3:8f:21:64: 93:c6:07:76:09:26:2b:b7:3c:34:ac:bd:f0:60:b8:c9:a7:82: ae:9c:fc:eb:f1:40:c4:cf:4a:42:16:91:dc:8c:cb:ed:45:f6: ea:af:40:0e:8f:1b:e3:5b:a8:03:f5:12:38:3a:62:d1:d2:aa: 19:6a:60:c7:b5:44:f7:ea:11:8e:48:8b:f4:91:0e:5f:91:8f: 68:fe:e0:15:dd:3e:db:b5:1f:71:82:6a:21:1a:1c:07:9c:47: c8:b3:40:1c:2a:df:9e:f7:56:9f:e7:49:fd:23:01:2e:0f:1c: 73:d6:3b:77:b2:70:12:25:ce:72:eb:cf:77:81:d4:08:db:b2: 66:b0:a7:48:10:22:ce:c6:d6:ad:d5:da:1a:86:bd:97:34:b0: 69:a9:89:8f:d7:07:53:10:b2:ac:59:80:67:18:85:8d:fb:6a: b5:1f:2a:80:9a:75:ec:b0:e0:8e:98:6e:85:28:73:02:56:2c: 23:cc:67:44:9d:30:7f:ab:87:09:25:bd:2c:4b:08:b9:cd:95: 93:bc:b4:5e:2c:a2:64:ed:b5:d3:f7:b3:2b:89:a5:ec:4a:21: 21:34:6a:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTEwMjcxMDEwNTJaFw0yNTExMDMxMDEwNTJaMBgxFjAUBgNV BAMTDTY4ZmY0NTJkLWQ0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpCc0qACUSwWub1yMlP0nqXe1m2jJTFEZoBHI1jmEc+Gr9uAzPMKcKNhkNocxy uwMcwBkdDypykDF8ORUtnI+dorVXgffSprDmsY1kRv8PjklvD0KQjv2PPLtaAK2C jKBMpN/4uJzlmfpa+bSYpjvLUzLbhQF5G8MPVRSi+Aevqh81Edc7Yx3m6hqjPvgJ pQzOVD10Mm0czBLfSLxDk33ltQrCtoHzvv0w5UeHxDZDoVkgMBqG4oGkUSIYjZgJ 9SUufUQit/1ChQBwHKlEa9W6wNqm/x3Qhreo+ILydMgr6KkBVaVCpiB8eUFI2yxm GDUp21VVR83rkKNsbGvZ/a7TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNphDndwL 6wfS+YWW3qoR1pjHDbswHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfHZ1oeKJWoVOQZygu4d3Gqk3EDjlTP0IHgJRUx46L1s48hZJPGB3YJ Jiu3PDSsvfBguMmngq6c/OvxQMTPSkIWkdyMy+1F9uqvQA6PG+NbqAP1Ejg6YtHS qhlqYMe1RPfqEY5Ii/SRDl+Rj2j+4BXdPtu1H3GCaiEaHAecR8izQBwq3573Vp/n Sf0jAS4PHHPWO3eycBIlznLrz3eB1Ajbsmawp0gQIs7G1q3V2hqGvZc0sGmpiY/X B1MQsqxZgGcYhY37arUfKoCadeyw4I6YboUocwJWLCPMZ0SdMH+rhwklvSxLCLnN lZO8tF4somTttdP3syuJpexKISE0auA= -----END CERTIFICATE-----Generated at Mon Oct 27 15:19:38 2025 by rpki-client