$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: Ur0CBSM29wQRHiibmJYmkTRsHxM3cCtmymNhmx9a4bc= Subject key identifier: 35:34:44:B1:57:44:49:39:2A:F9:1A:AA:57:BB:78:91:CB:63:29:95 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C2E Signing time: Sun 02 Nov 2025 18:44:04 +0000 Manifest this update: Sun 02 Nov 2025 18:44:04 +0000 Manifest next update: Sun 09 Nov 2025 18:44:04 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: WPs69eC5JlgOGiNBwOXv0MV8X4Tj51eF2sxJZyvq92Q=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Nov 2 18:44:04 2025 GMT Not After : Nov 9 18:44:04 2025 GMT Subject: CN=6907a674-f4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:f0:d3:6d:d8:c6:e5:11:a9:08:59:bd:b8: f8:9d:dc:60:80:e6:ad:e9:c1:90:ce:8b:02:95:ab: ed:f5:91:71:22:f2:b9:f0:20:f7:f4:0c:08:ac:dd: 8d:e6:74:e7:52:12:e6:b4:d2:51:64:f7:cf:a9:ad: 91:a3:4a:7d:da:fb:83:ab:38:10:21:fe:49:4f:9c: 98:af:c1:eb:2d:17:7f:17:e1:61:e0:1f:86:12:72: 6a:20:48:1b:ec:1f:9e:b6:66:1c:32:a0:54:d0:d4: d7:02:83:63:12:cd:37:03:7a:ec:ba:25:fa:79:a8: 8e:2f:30:a7:db:24:30:22:b1:02:6e:e2:50:6a:e0: 11:11:b5:41:89:e0:4e:b0:e3:f0:a5:21:c4:5e:8b: f8:29:84:8d:25:9f:92:7f:dd:48:ac:3e:30:d1:46: b2:c5:5d:84:7b:48:ab:e0:33:fa:69:b9:db:4f:83: ff:ff:ea:85:94:bb:d1:37:4a:78:94:27:a0:90:e0: 18:91:48:7c:93:48:ab:53:0d:58:b0:a7:69:6b:1f: 12:23:3b:ac:10:49:5e:3e:32:38:60:30:93:b6:8a: 06:9d:34:57:77:8c:f7:1a:b7:90:cd:67:5e:80:05: d2:83:18:7a:d4:57:6c:9e:d5:f1:42:e2:8c:f9:d2: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:44:B1:57:44:49:39:2A:F9:1A:AA:57:BB:78:91:CB:63:29:95 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:23:4e:68:39:11:0f:58:e6:86:19:13:92:38:f6:b5:5f:72: 2d:a2:b0:86:67:8a:86:5d:1d:04:b4:f3:15:e0:f5:09:49:70: cb:b8:33:ce:4b:bf:83:e4:ef:85:75:b7:41:e3:eb:33:cb:fb: 86:ca:4a:67:04:2f:54:a1:b7:9e:0f:ec:e2:5a:9e:04:4e:21: 33:0c:72:c2:bd:21:4f:a3:d7:24:8b:eb:cd:68:75:c3:bf:95: d2:e3:25:94:37:c1:22:53:14:14:7d:9b:e7:fb:56:5e:1c:55: 0f:4d:1b:c2:88:0f:d2:ac:95:c5:7b:f2:37:b8:d1:b2:bd:f7: 3e:4b:c4:ab:b4:58:2a:01:c8:1a:e4:0a:21:62:c7:61:92:f4: 21:de:b6:86:74:65:2f:0f:bb:a3:9b:81:3f:e0:90:71:60:29: cd:c2:2c:f7:89:92:ca:4b:91:0d:fa:aa:ea:2b:35:d0:c3:cb: 49:a9:49:f8:bf:28:d7:87:a4:96:05:57:73:fc:18:3c:68:85: 9f:8b:5a:ea:78:10:28:63:b9:21:ef:77:f0:cb:60:26:cb:85: 37:fc:3f:2b:cd:95:ed:02:2e:b1:3e:01:27:e0:86:fb:8e:7f: 63:c1:f1:fd:37:bb:23:9c:37:b3:94:86:75:40:83:b7:a6:9b: e0:58:e3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUxMTAyMTg0NDA0WhcNMjUxMTA5MTg0NDA0WjAYMRYwFAYD VQQDEw02OTA3YTY3NC1mNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotDw023YxuURqQhZvbj4ndxggOat6cGQzosClavt9ZFxIvK58CD39AwIrN2N 5nTnUhLmtNJRZPfPqa2Ro0p92vuDqzgQIf5JT5yYr8HrLRd/F+Fh4B+GEnJqIEgb 7B+etmYcMqBU0NTXAoNjEs03A3rsuiX6eaiOLzCn2yQwIrECbuJQauAREbVBieBO sOPwpSHEXov4KYSNJZ+Sf91IrD4w0UayxV2Ee0ir4DP6abnbT4P//+qFlLvRN0p4 lCegkOAYkUh8k0irUw1YsKdpax8SIzusEElePjI4YDCTtooGnTRXd4z3GreQzWde gAXSgxh61FdsntXxQuKM+dKhsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU0RLFX REk5Kvkaqle7eJHLYymVMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgI05oOREPWOaGGROSOPa1X3ItorCGZ4qGXR0EtPMV4PUJSXDLuDPO S7+D5O+FdbdB4+szy/uGykpnBC9UobeeD+ziWp4ETiEzDHLCvSFPo9cki+vNaHXD v5XS4yWUN8EiUxQUfZvn+1ZeHFUPTRvCiA/SrJXFe/I3uNGyvfc+S8SrtFgqAcga 5AohYsdhkvQh3raGdGUvD7ujm4E/4JBxYCnNwiz3iZLKS5EN+qrqKzXQw8tJqUn4 vyjXh6SWBVdz/Bg8aIWfi1rqeBAoY7kh73fwy2Amy4U3/D8rzZXtAi6xPgEn4Ib7 jn9jwfH9N7sjnDezlIZ1QIO3ppvgWOM6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:05:39 2025 by rpki-client