$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json) Hash identifier: r7xq5dSlrmmhrSGDgXh8o9gJpK+y7oQQDnYJj8Lg1Fc= Subject key identifier: F5:B3:7E:EE:2C:07:9D:03:8C:CD:BE:37:90:10:38:5B:25:07:75:58 Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft Manifest number: 04A8 Signing time: Wed 05 Nov 2025 00:01:49 +0000 Manifest this update: Wed 05 Nov 2025 00:01:48 +0000 Manifest next update: Wed 12 Nov 2025 00:01:48 +0000 Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: X3pcJsk7rmDX0JDh9CVVaSVA2SY53ufXsOebDYP4Z+w=) 2: F593443851B011ECB5188E24C4F9AE02.roa (hash: CA35rH85+j+YJMr1xe8QwPujExClO3AIGNQ5xuf0vDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Validity Not Before: Nov 5 00:01:48 2025 GMT Not After : Nov 12 00:01:48 2025 GMT Subject: CN=690a93ec-9335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:83:d2:49:a9:4b:23:01:78:0d:3c:cc:2a: 4c:24:26:e4:e2:36:46:06:5f:d2:e8:0e:d7:2b:52: 1f:a0:39:0f:bf:2c:a2:cc:0f:ca:14:73:da:0c:dd: e7:c0:98:cf:2b:70:a5:c6:fb:f5:bc:15:23:98:1c: 0a:fb:b3:3e:dc:43:51:4a:8b:fa:a8:87:35:0e:2e: 48:3a:75:59:c9:41:d5:fe:e6:ec:ad:16:4d:49:bc: ce:fe:f9:64:c9:57:4e:83:a8:35:ac:df:d7:c2:af: f2:84:cf:45:62:58:57:52:c6:c2:b5:fa:11:46:17: be:67:73:ca:ad:23:2d:35:74:2b:24:5f:ed:b9:7f: 62:f0:a3:57:91:88:81:a8:f0:32:43:1c:57:65:fc: 0b:bf:7e:a4:ff:25:89:8a:a6:ea:2a:ba:ac:42:d3: 25:35:6a:a9:2d:86:01:d9:2e:58:16:24:56:19:33: 05:84:b9:c8:c8:7b:ef:6e:f7:aa:80:2a:1e:b1:ba: 6b:8b:27:58:35:32:56:a3:81:a7:e5:d3:7c:47:34: 9e:c8:42:3f:ce:26:f8:dd:77:eb:96:48:77:1a:92: f1:b4:d9:6f:90:ce:ab:38:07:3c:c4:66:ab:52:44: 4c:e3:db:e1:b2:ac:e3:76:25:8d:f9:a2:0d:ed:fd: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B3:7E:EE:2C:07:9D:03:8C:CD:BE:37:90:10:38:5B:25:07:75:58 X509v3 Authority Key Identifier: keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:90:6e:bf:ba:00:b7:f1:39:d7:a6:63:03:40:85:85:fa:7f: 58:df:f0:49:ec:0e:a5:c7:20:0a:dc:7b:05:e8:f0:f1:92:80: 11:4b:5e:98:05:18:94:1a:51:19:fb:43:de:b2:d3:f3:0e:8c: 0d:ea:3d:20:fa:a4:cb:e3:3b:d3:16:8b:43:c0:27:c0:58:ea: ca:57:d6:ac:75:52:68:b9:5d:4a:bb:d2:45:29:a3:fe:b5:81: 6d:d1:c8:60:80:7c:fd:ec:a3:f2:e0:c5:86:f6:54:41:60:02: 7a:56:ec:7a:57:c5:9a:ae:f2:cc:1e:c6:bf:45:6f:88:66:cd: 0b:b0:21:de:4b:22:d7:8e:ec:ac:70:e7:39:47:86:39:74:c4: 65:f3:4f:e5:60:31:b3:7a:2b:92:64:3d:33:d7:4c:fb:52:c9: 0c:d8:46:38:e7:13:6c:69:a0:55:1d:37:cf:d7:15:86:e8:5d: 21:d0:f3:26:46:fe:55:52:b7:d9:17:70:09:d2:ba:c3:34:4d: fd:9b:bd:c0:a8:7d:f4:ad:1c:82:98:7e:8e:e0:e0:b1:50:e6: 08:73:d5:91:a6:3d:ec:cd:d2:7d:79:d1:2b:c5:0b:76:01:88: 17:26:18:5d:44:ea:51:00:98:4d:55:d1:51:b9:e3:0a:12:66: 7c:8a:20:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4 RTZGMzE2MUIwHhcNMjUxMTA1MDAwMTQ4WhcNMjUxMTEyMDAwMTQ4WjAYMRYwFAYD VQQDEw02OTBhOTNlYy05MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+SD0kmpSyMBeA08zCpMJCbk4jZGBl/S6A7XK1IfoDkPvyyizA/KFHPaDN3n wJjPK3Clxvv1vBUjmBwK+7M+3ENRSov6qIc1Di5IOnVZyUHV/ubsrRZNSbzO/vlk yVdOg6g1rN/Xwq/yhM9FYlhXUsbCtfoRRhe+Z3PKrSMtNXQrJF/tuX9i8KNXkYiB qPAyQxxXZfwLv36k/yWJiqbqKrqsQtMlNWqpLYYB2S5YFiRWGTMFhLnIyHvvbveq gCoesbpriydYNTJWo4Gn5dN8RzSeyEI/zib43Xfrlkh3GpLxtNlvkM6rOAc8xGar UkRM49vhsqzjdiWN+aIN7f3VqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWzfu4s B50DjM2+N5AQOFslB3VYMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdkG6/ugC38TnXpmMDQIWF+n9Y3/BJ7A6lxyAK3HsF6PDxkoARS16Y BRiUGlEZ+0PestPzDowN6j0g+qTL4zvTFotDwCfAWOrKV9asdVJouV1Ku9JFKaP+ tYFt0chggHz97KPy4MWG9lRBYAJ6Vux6V8WarvLMHsa/RW+IZs0LsCHeSyLXjuys cOc5R4Y5dMRl80/lYDGzeiuSZD0z10z7UskM2EY45xNsaaBVHTfP1xWG6F0h0PMm Rv5VUrfZF3AJ0rrDNE39m73AqH30rRyCmH6O4OCxUOYIc9WRpj3szdJ9edErxQt2 AYgXJhhdROpRAJhNVdFRueMKEmZ8iiCn -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:06 2025 by rpki-client