$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft File: rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json) Hash identifier: 31QfvrchFip91Bfm0Cx6+PzHV9CoykJMXH8JsCHhjrU= Subject key identifier: 01:0F:E7:14:94:7F:41:C5:5A:92:A7:D8:55:B4:F3:BC:BF:4B:2A:23 Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft Manifest number: CA Signing time: Wed 05 Nov 2025 05:56:09 +0000 Manifest this update: Wed 05 Nov 2025 05:56:08 +0000 Manifest next update: Wed 12 Nov 2025 05:56:08 +0000 Files and hashes: 1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: QM0s1g/FJHNcrlFWm9BYdwYyi33TYXAu0W8s7AmsJes=) 2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: /KjXSfmE2q+fXSG5F8CKP1wpSYcVa/XLVf1LpFs9wvg=) 3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: G+4s3zAMADjSVZmHk5FULbhH5AjFBhHH97tW10llI8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Validity Not Before: Nov 5 05:56:08 2025 GMT Not After : Nov 12 05:56:08 2025 GMT Subject: CN=690ae6f9-0341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:ba:0c:e2:46:2e:c1:b1:2c:2b:98:b7:b4: e1:99:60:e5:5a:e6:2a:2a:b2:7f:0b:c9:cf:a2:e8: c7:93:4d:02:be:fc:90:e8:0f:d7:f6:1c:9a:fc:cc: bd:b6:a3:3e:fe:6a:8d:7b:be:b1:91:69:6e:81:54: e2:ff:46:60:1a:dc:7f:73:43:a7:54:0f:a3:36:1d: df:bb:69:06:14:67:a8:b1:0e:07:08:5a:f5:17:4e: d7:6f:31:12:0c:91:41:24:dc:84:91:ac:20:13:58: ba:ab:b8:fe:83:a7:cc:89:54:6d:6d:e4:0e:0c:c3: 4d:29:fc:4a:bb:79:49:1d:e2:a9:e0:2c:81:59:33: fa:1d:56:c6:b0:36:34:3f:33:c8:4a:62:2f:77:e0: 4c:ac:07:e4:6e:0b:d8:c8:54:d7:54:4b:06:bf:4d: b2:0b:24:de:71:48:7a:91:8e:66:0a:81:c8:1e:b0: a7:5a:55:3f:4a:cc:94:9e:cf:d1:d3:00:8b:57:bf: af:d3:49:87:7a:f3:2f:78:cc:a4:cd:d9:1e:a2:5a: 25:fb:c1:94:4a:23:00:8e:b8:c0:7e:4b:3c:6b:da: 9b:ec:e3:31:24:a9:54:48:c9:5b:2b:16:a3:3a:59: 3a:a6:7c:69:4c:9b:25:1c:3b:e9:15:04:58:b4:8d: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0F:E7:14:94:7F:41:C5:5A:92:A7:D8:55:B4:F3:BC:BF:4B:2A:23 X509v3 Authority Key Identifier: keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c9:f8:c9:b5:f0:8e:eb:21:e3:72:3e:94:f2:6e:2d:e6:70: a9:37:aa:8c:b4:0e:b3:83:0e:f9:61:09:08:10:8f:4e:9b:0a: 48:f6:69:52:28:53:14:6f:f0:89:ff:5e:62:4f:f0:01:fc:9b: e3:74:49:6b:73:c5:5e:a8:59:d7:ae:f2:62:ca:6d:e4:28:54: 55:07:6e:c0:f0:5c:06:89:ae:96:09:66:98:cd:05:76:2f:b9: 8c:6b:24:88:55:a4:8a:bb:a9:ad:d2:de:cb:4e:bb:c2:77:1a: e3:34:17:18:8a:87:4d:ce:a3:1b:c6:c8:0f:14:87:12:cb:99: 27:d8:ac:81:91:14:3e:b1:e7:e5:cd:4f:f8:c3:e4:40:60:5c: 6d:c1:16:2b:a9:0a:ca:09:20:6b:02:1b:a5:c8:c9:9d:e9:f0: 1b:3c:18:bd:6f:6b:fe:84:0e:03:e1:d7:ca:8d:3c:b2:2d:f0: 6a:8f:4b:60:77:b3:a7:5b:e2:ff:be:35:33:39:fc:79:fc:8d: 3a:d4:2b:5e:30:91:d9:5b:0f:c4:05:7a:84:da:0b:dc:f0:2d: d0:93:a9:e5:1e:25:60:ef:5d:31:3b:f0:ac:e2:32:76:2d:19: cc:91:18:f5:15:fb:59:09:7e:9e:57:2d:39:e8:37:da:62:a6: 00:ac:cf:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKEFFRDgwMTBERTREMjNGRjREMEY5MDA1QkFDOTI1QkRC N0YzREYzMEEwHhcNMjUxMTA1MDU1NjA4WhcNMjUxMTEyMDU1NjA4WjAYMRYwFAYD VQQDEw02OTBhZTZmOS0wMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8C6DOJGLsGxLCuYt7ThmWDlWuYqKrJ/C8nPoujHk00CvvyQ6A/X9hya/My9 tqM+/mqNe76xkWlugVTi/0ZgGtx/c0OnVA+jNh3fu2kGFGeosQ4HCFr1F07XbzES DJFBJNyEkawgE1i6q7j+g6fMiVRtbeQODMNNKfxKu3lJHeKp4CyBWTP6HVbGsDY0 PzPISmIvd+BMrAfkbgvYyFTXVEsGv02yCyTecUh6kY5mCoHIHrCnWlU/SsyUns/R 0wCLV7+v00mHevMveMykzdkeolol+8GUSiMAjrjAfks8a9qb7OMxJKlUSMlbKxaj Olk6pnxpTJslHDvpFQRYtI2pGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEP5xSU f0HFWpKn2FW087y/SyojMB8GA1UdIwQYMBaAFK7YAQ3k0j/00PkAW6ySW9t/PfMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8yNzQ5QzdCRTg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1BfVFEtUUJickpKYjIzODk4 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J0Z0JEZVRTUF9UUS1RQmJySkpiMjM4OTh3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8yNzQ5QzdCRTg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1Bf VFEtUUJickpKYjIzODk4d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAayfjJtfCO6yHjcj6U8m4t5nCpN6qMtA6zgw75YQkIEI9OmwpI9mlS KFMUb/CJ/15iT/AB/JvjdElrc8VeqFnXrvJiym3kKFRVB27A8FwGia6WCWaYzQV2 L7mMaySIVaSKu6mt0t7LTrvCdxrjNBcYiodNzqMbxsgPFIcSy5kn2KyBkRQ+sefl zU/4w+RAYFxtwRYrqQrKCSBrAhulyMmd6fAbPBi9b2v+hA4D4dfKjTyyLfBqj0tg d7OnW+L/vjUzOfx5/I061CteMJHZWw/EBXqE2gvc8C3Qk6nlHiVg710xO/Cs4jJ2 LRnMkRj1FftZCX6eVy056DfaYqYArM94 -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:26 2025 by rpki-client