$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: aStZN+HdcbzsuiApEGjb5WEnkSyA3N7IgTxUA+Y6/9o= Subject key identifier: 4D:5D:F8:7F:7E:25:92:83:CA:30:EA:C8:81:33:F9:0D:72:6D:DF:A7 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0C8C Signing time: Sun 02 Nov 2025 18:25:15 +0000 Manifest this update: Sun 02 Nov 2025 18:25:15 +0000 Manifest next update: Sun 09 Nov 2025 18:25:15 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: Vxj+gBuIbDS547Bc0TtJeRklOG4Mz5aoErKe/B8T2p0=) 2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: 0bN6aa9LmlwzevTlnntKDv/hy63nRIyDPNtf4oHkk54=) 3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Nov 2 18:25:15 2025 GMT Not After : Nov 9 18:25:15 2025 GMT Subject: CN=6907a20b-d39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:24:0b:0f:bd:de:a4:2e:73:01:29:01:6a: 0c:4f:a4:ce:e8:28:d7:9e:1b:ff:83:6c:36:54:b5: bc:9c:56:d5:4b:45:d9:35:ae:07:70:74:52:ff:35: af:35:9a:fb:88:45:73:87:be:b5:6a:4b:82:b1:66: 3c:1f:d3:75:c6:38:28:e0:ab:58:dd:4b:fa:06:26: 82:bb:5f:fa:91:8d:d3:ef:3e:63:27:df:f6:5b:7b: c5:90:5a:24:6e:ef:ec:70:82:77:1e:c7:a8:89:bd: fa:9a:3c:1b:e0:45:a1:d6:37:bc:a0:2a:62:ad:3b: 06:12:ce:78:85:38:d3:79:9a:a7:92:9f:d0:1c:be: d1:14:20:22:d2:ba:54:97:ed:f1:ce:1e:65:0f:e6: 61:74:67:7b:cd:34:2c:e0:ef:5a:cd:a4:68:bc:61: 60:27:25:d5:78:1b:27:3a:b6:6b:36:88:30:12:b1: 9b:a7:09:f7:67:de:f2:5a:44:cf:8b:b2:f3:10:35: 9c:84:20:ac:1c:e9:4e:aa:18:24:3e:5c:e1:9c:62: a2:7f:4e:f5:48:de:09:91:22:39:38:e6:c9:0c:28: 8f:c7:07:eb:15:fd:b6:d5:17:94:73:a6:b9:39:31: bb:95:cd:54:a5:c5:b8:cd:1d:23:06:59:e9:0f:de: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:F8:7F:7E:25:92:83:CA:30:EA:C8:81:33:F9:0D:72:6D:DF:A7 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e1:ab:a6:cf:34:60:14:16:a9:7c:fc:cf:18:cb:bd:20:8d: 44:f7:cc:da:98:a3:52:b1:7a:1c:5c:3e:90:62:c3:b1:b6:1d: c3:5e:48:df:76:f0:a5:1b:1f:96:41:a5:02:45:66:93:47:b9: 6c:87:49:83:b9:98:e2:d3:ff:66:4c:c8:94:a9:a2:c6:98:e6: ca:56:0e:76:ff:2f:9d:09:e4:35:a3:92:66:03:fc:93:23:ea: e1:0c:e0:07:36:c8:2e:7b:29:4a:cb:d1:55:c0:0e:2f:f6:8b: a0:e2:74:85:1a:7d:dd:9e:05:7b:03:8d:de:95:b6:fc:57:fd: 35:5c:fc:34:57:78:2d:e9:da:0b:52:09:d8:1f:07:c4:7c:46: 09:79:01:a9:91:ff:c9:b4:4e:88:34:ac:f8:f8:57:91:77:fa: 17:88:72:27:0a:1e:c9:5a:0d:43:96:9a:28:a3:a2:c7:22:66: 37:32:10:5b:f0:e2:22:39:a4:4b:ca:09:d1:f5:24:47:03:cb: a7:51:d8:85:7b:8d:36:6b:4e:1e:92:bd:6e:0a:83:fc:aa:14: e2:81:65:bd:a4:e1:65:e6:79:dd:14:55:2a:c2:e5:5a:dc:dc: 4d:11:10:ec:2c:eb:63:47:4a:ff:6c:d9:f9:6e:24:f1:f1:ab: 55:a5:ec:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjUxMTAyMTgyNTE1WhcNMjUxMTA5MTgyNTE1WjAYMRYwFAYD VQQDEw02OTA3YTIwYi1kMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JgkCw+93qQucwEpAWoMT6TO6CjXnhv/g2w2VLW8nFbVS0XZNa4HcHRS/zWv NZr7iEVzh761akuCsWY8H9N1xjgo4KtY3Uv6BiaCu1/6kY3T7z5jJ9/2W3vFkFok bu/scIJ3Hseoib36mjwb4EWh1je8oCpirTsGEs54hTjTeZqnkp/QHL7RFCAi0rpU l+3xzh5lD+ZhdGd7zTQs4O9azaRovGFgJyXVeBsnOrZrNogwErGbpwn3Z97yWkTP i7LzEDWchCCsHOlOqhgkPlzhnGKif071SN4JkSI5OObJDCiPxwfrFf221ReUc6a5 OTG7lc1UpcW4zR0jBlnpD97JlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1d+H9+ JZKDyjDqyIEz+Q1ybd+nMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4aumzzRgFBapfPzPGMu9II1E98zamKNSsXocXD6QYsOxth3DXkjf dvClGx+WQaUCRWaTR7lsh0mDuZji0/9mTMiUqaLGmObKVg52/y+dCeQ1o5JmA/yT I+rhDOAHNsgueylKy9FVwA4v9oug4nSFGn3dngV7A43elbb8V/01XPw0V3gt6doL UgnYHwfEfEYJeQGpkf/JtE6INKz4+FeRd/oXiHInCh7JWg1Dlpooo6LHImY3MhBb 8OIiOaRLygnR9SRHA8unUdiFe402a04ekr1uCoP8qhTigWW9pOFl5nndFFUqwuVa 3NxNERDsLOtjR0r/bNn5biTx8atVpexu -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:55 2025 by rpki-client