$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: bxPRfk27Uc53JF09dq/I/8RgY45UpuNTKfe6bmzsb2I= Subject key identifier: BC:B7:7C:43:E3:4E:AC:DD:2D:D2:01:BC:9F:59:2F:F1:AF:9F:12:1F Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0560 Signing time: Mon 27 Oct 2025 00:23:13 +0000 Manifest this update: Mon 27 Oct 2025 00:23:13 +0000 Manifest next update: Mon 03 Nov 2025 00:23:13 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: vTntcWzHiwaDujCmGqQR/KHc55msJcG0m8M3tUDXDLo=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: xqj1Iz7t/A8a80aAwvGG6Txdmfyu0/4YD+uVRfrZJ7U=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: CF/ycti5B8sO9TQT4NkKOcvGvBc1ti1JSzdWtmNe964=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Oct 27 00:23:13 2025 GMT Not After : Nov 3 00:23:13 2025 GMT Subject: CN=68febb71-3075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:92:c1:be:c0:69:da:23:0b:37:81:4c:b1: c1:bf:e7:3b:02:f0:1d:0c:a1:16:b8:9d:f5:64:b0: 3d:0f:bd:89:f0:b2:73:1e:32:55:93:a3:ac:4a:d2: f8:47:b5:f3:1f:24:a8:b8:93:5d:bb:f5:bc:ee:23: 8e:a7:97:a7:1d:14:30:37:2c:b3:c5:75:f4:c3:43: e4:e7:39:e2:5a:3f:81:99:ee:30:1b:2a:c4:b6:a0: 17:65:43:71:61:c9:57:47:7e:24:7a:21:c1:ab:eb: 23:40:7d:11:89:d8:0b:97:29:c4:88:d1:f0:97:5f: e5:44:73:7e:c9:dd:de:e4:bf:59:ed:64:f2:51:63: 81:63:4a:a9:08:bf:cf:29:33:ec:9c:59:e8:88:31: 9c:20:b2:9c:e9:93:bb:33:71:5e:0b:46:3d:f7:19: 5d:46:93:c6:ba:47:5f:4e:7e:e9:cd:ac:24:da:16: d4:f2:58:55:6d:fd:fa:f0:01:b2:f4:43:dd:30:cb: be:02:1a:42:88:43:4c:ee:5e:cf:9f:b4:75:fa:23: 4e:cd:0c:fc:6e:b1:86:ca:f2:2c:39:52:9e:0a:95: 8b:a5:8b:5e:51:97:36:65:c5:95:77:53:9a:8b:d4: f1:69:5a:63:a5:89:9c:91:e8:65:fe:48:61:37:b4: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:7C:43:E3:4E:AC:DD:2D:D2:01:BC:9F:59:2F:F1:AF:9F:12:1F X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:db:21:13:c9:42:65:c2:f6:49:ca:0e:3c:97:e0:3a:79:12: 41:83:97:38:35:42:e8:24:37:8d:f2:05:ec:96:c1:1d:3b:7f: 4b:b5:8e:5f:0f:5c:e1:07:d0:d7:ce:1d:9e:cc:bb:f6:7a:f7: 9e:1c:ca:54:e1:67:f0:7a:7f:01:0d:af:e8:9c:4e:a0:3d:43: fc:11:02:6d:21:31:be:95:1a:3c:15:2e:31:f3:f3:4c:de:bc: b8:2c:5d:5f:27:d4:44:60:f6:4e:83:62:11:b9:ff:9a:5a:92: 9a:83:f6:e0:14:10:e1:65:6a:09:1d:55:36:79:e3:8c:90:cc: 5a:5c:b8:a7:ff:31:68:0f:c6:2f:24:4d:4e:8f:00:c6:8d:70: a9:1d:d7:ec:81:2f:62:c7:e6:4f:0c:34:03:10:ba:1e:a9:85: 8b:88:31:8f:ff:5e:9b:7c:14:62:55:e6:0e:97:03:c5:d9:aa: a9:be:52:ec:86:1c:1e:b0:c3:95:bd:76:e5:ab:b8:8d:da:17: 2d:fb:2c:6c:e8:0e:6b:bb:39:c3:96:39:ff:78:c0:50:11:29: ab:32:37:f4:f5:a1:d8:cf:4c:5c:a2:bd:44:9a:19:2f:0d:d4: 85:1b:9b:76:2b:04:94:fa:6b:ab:5f:b3:2e:58:36:bd:0b:60: 00:8a:37:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUxMDI3MDAyMzEzWhcNMjUxMTAzMDAyMzEzWjAYMRYwFAYD VQQDEw02OGZlYmI3MS0zMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EySwb7AadojCzeBTLHBv+c7AvAdDKEWuJ31ZLA9D72J8LJzHjJVk6OsStL4 R7XzHySouJNdu/W87iOOp5enHRQwNyyzxXX0w0Pk5zniWj+Bme4wGyrEtqAXZUNx YclXR34keiHBq+sjQH0RidgLlynEiNHwl1/lRHN+yd3e5L9Z7WTyUWOBY0qpCL/P KTPsnFnoiDGcILKc6ZO7M3FeC0Y99xldRpPGukdfTn7pzawk2hbU8lhVbf368AGy 9EPdMMu+AhpCiENM7l7Pn7R1+iNOzQz8brGGyvIsOVKeCpWLpYteUZc2ZcWVd1Oa i9TxaVpjpYmckehl/khhN7T89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy3fEPj TqzdLdIBvJ9ZL/GvnxIfMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2yETyUJlwvZJyg48l+A6eRJBg5c4NULoJDeN8gXslsEdO39LtY5f D1zhB9DXzh2ezLv2eveeHMpU4Wfwen8BDa/onE6gPUP8EQJtITG+lRo8FS4x8/NM 3ry4LF1fJ9REYPZOg2IRuf+aWpKag/bgFBDhZWoJHVU2eeOMkMxaXLin/zFoD8Yv JE1OjwDGjXCpHdfsgS9ix+ZPDDQDELoeqYWLiDGP/16bfBRiVeYOlwPF2aqpvlLs hhwesMOVvXblq7iN2hct+yxs6A5ruznDljn/eMBQESmrMjf09aHYz0xcor1Emhkv DdSFG5t2KwSU+murX7MuWDa9C2AAijch -----END CERTIFICATE-----Generated at Mon Oct 27 14:47:15 2025 by rpki-client