$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: rSaqg8Iz7JVLRvJJr2ixwZ9F/PYNeDomNIyBgFEzE/M= Subject key identifier: EC:17:62:5C:C1:13:3D:EA:8F:48:B6:E7:0C:32:28:10:10:5E:66:9C Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 044D Signing time: Mon 27 Oct 2025 01:18:13 +0000 Manifest this update: Mon 27 Oct 2025 01:18:13 +0000 Manifest next update: Mon 03 Nov 2025 01:18:13 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: tKyzVrpthwwpTG56YA6RqYrI4dgPL5FXb8DijFqg5lQ=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 01:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Oct 27 01:18:13 2025 GMT Not After : Nov 3 01:18:13 2025 GMT Subject: CN=68fec855-dbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:62:2c:0d:21:d0:75:f7:ae:dc:60:e8:7c: 1b:fd:9a:52:5e:85:7e:9c:29:3c:e4:e4:4c:ef:10: d3:3e:c7:02:8f:df:96:a2:53:9b:6e:22:19:c4:fa: a1:2b:09:e6:24:ce:7e:e5:43:44:2c:95:7a:96:22: 51:c7:ed:67:8c:71:6f:b9:00:8c:4d:20:10:ce:fe: 39:c7:26:11:8f:df:5b:7f:58:5d:f1:44:2d:fa:44: cc:fe:9c:9d:a8:8e:ef:a7:c9:5f:ec:af:a1:8f:da: 09:1f:fe:3f:14:e3:38:c8:89:f5:fb:d9:eb:74:77: 8b:c6:54:fb:5f:97:14:18:9a:03:7b:2e:03:07:21: eb:ff:f4:e1:6b:58:38:ec:b5:4c:89:fe:bd:f6:b4: 98:8d:43:52:dc:f9:34:8e:7a:a2:24:8f:28:62:47: 75:bc:48:d6:95:91:52:4e:2c:00:c3:2b:e5:12:66: fd:0b:a9:07:12:1f:f0:1f:66:e0:16:21:b6:cb:6d: 9e:02:87:d7:f2:3a:17:d6:b2:20:75:79:af:20:33: a4:ec:90:70:57:3e:1f:ad:f0:f8:7a:62:3f:01:92: 8a:3a:a7:e9:db:72:eb:bb:98:9f:37:4c:54:c3:21: e7:ae:bd:be:5b:7f:91:95:0a:3e:a7:ef:49:8f:00: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:17:62:5C:C1:13:3D:EA:8F:48:B6:E7:0C:32:28:10:10:5E:66:9C X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:26:07:09:8f:8b:c1:dd:ba:ea:f9:5f:07:68:c5:62:48:b8: 48:91:ab:0b:95:2d:cf:d4:f5:47:54:69:1b:96:aa:a6:d4:d4: 19:9d:02:ae:fa:06:8f:5a:4e:b7:50:b6:c4:fa:67:ed:4d:19: 92:36:34:0b:80:38:10:8f:c8:da:0c:f6:fb:50:60:60:23:ae: 5c:3f:f7:e5:62:d6:bb:c2:ed:85:49:82:6b:cf:6e:7a:af:8f: 75:c1:59:ce:15:2f:31:fe:dc:64:70:f3:4b:f7:72:60:f9:7e: d7:90:83:e5:f9:8a:a2:f4:7f:2b:c6:e5:ca:52:2b:b2:e1:64: 39:ec:00:5f:dd:c0:9b:03:c2:b4:33:23:96:59:cb:42:34:b5: 85:d0:29:19:1a:d4:0a:24:22:62:ca:1c:29:cb:f2:72:2b:91: de:5c:39:58:7e:47:75:75:4a:ba:47:23:28:61:bd:a4:76:f0: a8:cd:a8:7b:dc:5c:a9:9a:dc:ee:c0:dd:18:05:7f:b8:c1:5f: da:36:b5:42:2d:33:d0:66:ad:05:5a:a3:83:a9:44:d0:cc:53: 78:11:67:7e:50:1e:23:b2:4b:d5:45:19:eb:e8:68:d6:c5:99: 7f:89:8f:ad:e6:98:85:83:9e:5e:dc:ea:a3:da:3b:46:df:4c: f1:98:b8:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUxMDI3MDExODEzWhcNMjUxMTAzMDExODEzWjAYMRYwFAYD VQQDEw02OGZlYzg1NS1kYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0ViLA0h0HX3rtxg6Hwb/ZpSXoV+nCk85ORM7xDTPscCj9+WolObbiIZxPqh KwnmJM5+5UNELJV6liJRx+1njHFvuQCMTSAQzv45xyYRj99bf1hd8UQt+kTM/pyd qI7vp8lf7K+hj9oJH/4/FOM4yIn1+9nrdHeLxlT7X5cUGJoDey4DByHr//Tha1g4 7LVMif699rSYjUNS3Pk0jnqiJI8oYkd1vEjWlZFSTiwAwyvlEmb9C6kHEh/wH2bg FiG2y22eAofX8joX1rIgdXmvIDOk7JBwVz4frfD4emI/AZKKOqfp23Lru5ifN0xU wyHnrr2+W3+RlQo+p+9JjwAO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwXYlzB Ez3qj0i25wwyKBAQXmacMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJgcJj4vB3brq+V8HaMViSLhIkasLlS3P1PVHVGkblqqm1NQZnQKu +gaPWk63ULbE+mftTRmSNjQLgDgQj8jaDPb7UGBgI65cP/flYta7wu2FSYJrz256 r491wVnOFS8x/txkcPNL93Jg+X7XkIPl+Yqi9H8rxuXKUiuy4WQ57ABf3cCbA8K0 MyOWWctCNLWF0CkZGtQKJCJiyhwpy/JyK5HeXDlYfkd1dUq6RyMoYb2kdvCozah7 3FypmtzuwN0YBX+4wV/aNrVCLTPQZq0FWqODqUTQzFN4EWd+UB4jskvVRRnr6GjW xZl/iY+t5piFg55e3Oqj2jtG30zxmLjE -----END CERTIFICATE-----Generated at Mon Oct 27 17:35:53 2025 by rpki-client