$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: zfZCy5Fz5eqD9qpoy16b3fUkSpm3WrMUslbmTu9AP54= Subject key identifier: FA:4E:85:93:5E:79:EB:33:D6:86:4D:F2:51:5F:7D:7A:27:B3:B0:CA Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 1101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0EC6 Signing time: Mon 20 Oct 2025 19:38:24 +0000 Manifest this update: Mon 20 Oct 2025 19:38:23 +0000 Manifest next update: Mon 27 Oct 2025 19:38:23 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: JXxWnFSA7n/+bfPdaxp3khjrcO9mcXarvGDROiHuruI=) 2: 8F1E3424322B11F0818ACD4FC4F9AE02.roa (hash: Hzc655NZl6TO3WpyB1+mp1u+KrkLBolJ/YsdKs3YRQ8=) 3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 5: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4353 (0x1101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Oct 20 19:38:23 2025 GMT Not After : Oct 27 19:38:23 2025 GMT Subject: CN=68f68faf-ccf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:47:d7:a2:fb:90:41:06:14:60:2a:c4:0a: 74:fc:3d:8e:e6:87:5a:ba:38:e4:ae:04:65:53:02: 05:0c:2d:4b:a1:9e:e3:fd:11:c9:5a:df:c9:60:36: e8:7a:29:6f:05:0c:9d:93:7b:d6:c6:1a:5a:0a:bb: 61:32:a9:17:af:be:c2:a5:86:08:1c:0e:37:23:46: 03:a6:d4:ec:35:9d:ed:5f:97:27:cc:8b:ce:fb:fb: 0f:5b:19:0c:63:54:b0:ce:bc:d5:86:29:c0:07:6e: de:c3:69:89:f7:93:30:f2:ec:0c:89:f7:7e:37:67: c9:69:df:cb:da:5e:df:ee:0b:b3:75:6c:0f:5e:2f: bb:6e:cb:b8:64:df:ec:b0:ad:d8:98:06:b2:09:5d: 40:59:94:ec:e3:7c:a4:09:72:6c:c7:f5:44:63:7f: 79:57:f7:85:8b:7a:7f:ad:b3:ff:98:ff:e7:fe:8f: 2e:80:f7:66:e5:af:ee:ac:30:62:f5:b1:c5:cb:be: e6:ea:d0:18:a8:80:59:9a:22:61:df:f2:80:bd:64: b5:c7:eb:c1:11:dd:14:1d:8c:b3:32:cd:eb:f6:2d: 2d:9a:87:4f:23:28:40:a5:c4:55:d5:45:02:b7:df: f8:35:d8:75:de:2e:9f:e9:0a:48:e9:21:99:2e:97: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4E:85:93:5E:79:EB:33:D6:86:4D:F2:51:5F:7D:7A:27:B3:B0:CA X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7c:fe:ac:71:0c:44:d4:d9:67:f7:01:f0:98:dc:7c:c1:f3: 0b:88:3e:06:77:1b:d5:91:a6:5d:f1:6b:22:69:4f:df:ff:00: c7:2e:f1:2f:08:59:7c:90:35:f7:cc:2e:fd:e9:78:34:4c:f7: 5f:f0:d0:a2:8a:fb:41:4f:f3:b5:5e:f8:2a:c8:75:a2:03:4b: 5a:b7:c0:f4:0b:65:45:73:62:dd:c2:82:51:b6:d1:d1:70:e1: 6b:d1:65:1c:04:48:6b:7d:59:45:fa:5b:93:9f:bb:bc:e2:78: 34:5b:26:72:31:86:0c:d8:6d:20:7b:2e:cc:e6:84:40:f7:e7: d3:50:e0:36:47:8f:d3:9d:76:62:ae:a0:a7:df:1e:14:2c:bd: 13:06:35:d5:e2:0b:32:1f:af:6e:e6:c8:40:5c:02:a7:00:98: ea:22:06:f4:a6:7f:73:a3:f6:ca:30:1c:65:a1:41:26:e2:f8: 12:f1:6d:17:0b:96:ed:9c:11:e9:a9:c0:16:70:30:c1:79:ee: 58:f5:ed:88:5f:63:d6:79:c3:bd:05:14:82:b9:e6:fc:24:d3: aa:33:f6:ad:39:15:f7:55:ce:50:b8:93:df:e6:40:78:48:8b: 53:1b:4f:58:bd:56:8a:69:d9:8a:1a:21:6c:61:05:94:d8:cf: ee:57:24:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUxMDIwMTkzODIzWhcNMjUxMDI3MTkzODIzWjAYMRYwFAYD VQQDEw02OGY2OGZhZi1jY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVZH16L7kEEGFGAqxAp0/D2O5odaujjkrgRlUwIFDC1LoZ7j/RHJWt/JYDbo eilvBQydk3vWxhpaCrthMqkXr77CpYYIHA43I0YDptTsNZ3tX5cnzIvO+/sPWxkM Y1SwzrzVhinAB27ew2mJ95Mw8uwMifd+N2fJad/L2l7f7guzdWwPXi+7bsu4ZN/s sK3YmAayCV1AWZTs43ykCXJsx/VEY395V/eFi3p/rbP/mP/n/o8ugPdm5a/urDBi 9bHFy77m6tAYqIBZmiJh3/KAvWS1x+vBEd0UHYyzMs3r9i0tmodPIyhApcRV1UUC t9/4Ndh13i6f6QpI6SGZLpdQuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpOhZNe eesz1oZN8lFffXons7DKMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyfP6scQxE1Nln9wHwmNx8wfMLiD4GdxvVkaZd8WsiaU/f/wDHLvEv CFl8kDX3zC796Xg0TPdf8NCiivtBT/O1XvgqyHWiA0tat8D0C2VFc2LdwoJRttHR cOFr0WUcBEhrfVlF+luTn7u84ng0WyZyMYYM2G0gey7M5oRA9+fTUOA2R4/TnXZi rqCn3x4ULL0TBjXV4gsyH69u5shAXAKnAJjqIgb0pn9zo/bKMBxloUEm4vgS8W0X C5btnBHpqcAWcDDBee5Y9e2IX2PWecO9BRSCueb8JNOqM/atORX3Vc5QuJPf5kB4 SItTG09YvVaKadmKGiFsYQWU2M/uVyQw -----END CERTIFICATE-----Generated at Wed Oct 22 18:40:00 2025 by rpki-client