$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: wBt2aDumPSAULI3zLesTyJIBRz2xlZB5EPSDin/wDhQ= Subject key identifier: AD:A8:5A:88:43:EE:EC:7D:5E:A8:20:8B:77:0F:77:38:A7:A4:CB:08 Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0AB4 Signing time: Tue 04 Nov 2025 19:37:00 +0000 Manifest this update: Tue 04 Nov 2025 19:37:00 +0000 Manifest next update: Tue 11 Nov 2025 19:37:00 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: jrYXacjBX3tIf0u6vMOeuaZojmQTIG2MdIVlPpm4ftk=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Nov 4 19:37:00 2025 GMT Not After : Nov 11 19:37:00 2025 GMT Subject: CN=690a55dc-43f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:e8:05:8d:0c:39:83:b0:d7:34:5d:37:ca: e2:c6:2d:6b:df:51:78:1a:cc:87:c9:d4:33:af:b3: d0:f7:f5:1c:26:ca:e9:8d:6f:af:a7:0e:26:8e:14: e0:d7:91:b0:10:5d:cd:3e:49:29:36:38:2e:ef:be: 86:c8:20:36:f4:df:e1:e1:cb:3c:2e:88:cc:d8:29: 72:06:66:e0:53:07:1f:49:ce:b7:e1:34:b3:8b:01: 2f:a7:78:b7:57:5e:19:01:9c:49:c0:36:6c:e0:6b: 1d:6a:6b:2c:6e:a9:21:de:c0:a3:ad:82:fb:51:f9: 5a:0a:cc:48:a2:f6:57:68:ca:c9:de:c0:64:23:ac: 9a:ce:21:29:de:d2:3a:3c:13:e7:d2:2e:64:fc:25: 19:dc:77:6c:57:a1:5f:88:ea:f5:c5:82:9f:7c:70: a2:9e:02:bc:8c:4e:5c:d7:1c:03:6e:d8:d5:6e:a7: 3d:bd:88:e9:23:64:4c:ad:7a:4f:72:68:de:2d:e4: ea:68:00:5e:a8:e2:8e:77:6c:e7:89:27:96:4e:da: 3e:1e:aa:8d:d7:05:02:d2:01:24:f7:c9:ea:5a:3d: 8a:d8:ec:80:70:50:7f:0e:3b:f4:5f:41:64:79:c6: 57:76:6d:58:2e:68:41:bc:26:71:9b:c9:c4:a9:91: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:5A:88:43:EE:EC:7D:5E:A8:20:8B:77:0F:77:38:A7:A4:CB:08 X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:20:d2:e0:51:14:1f:69:3f:0c:29:77:54:42:95:7b:eb:36: 6a:dc:3c:6c:d7:7b:88:eb:77:c7:df:d4:85:4f:1c:b0:6f:1b: 1e:74:3d:d5:6c:28:35:22:31:21:92:ea:fa:2b:0c:14:2c:18: e6:b5:ad:61:5e:6d:15:06:6d:c1:1a:09:54:97:9b:6d:b9:f9: e8:c2:a8:1b:66:d2:cb:19:d1:ea:69:4f:d1:02:b2:22:cd:d3: 0b:0d:4f:ab:db:c6:cc:7d:62:ff:e6:b1:b8:6b:55:39:f0:07: 0a:c5:64:e2:bf:25:ae:75:93:c8:06:37:59:cb:7f:f1:40:16: 70:2f:4b:0c:6d:90:92:a2:91:58:62:70:1e:4b:83:ca:e4:f4: b5:e3:48:73:62:ab:a8:7e:11:0e:b5:64:24:70:d3:bf:b6:22: b7:d8:38:60:5a:c6:8d:b6:ab:b3:8f:25:c1:68:40:33:e6:68: 7b:2a:84:f0:d2:28:62:7c:db:99:c9:5b:ab:70:09:9b:c4:79: e0:ac:25:08:cf:a6:c8:71:be:90:f5:39:72:a8:f2:bb:3c:e4: 4e:63:a4:72:a1:da:2d:71:1a:42:4e:49:e2:d8:70:60:e0:1c: 88:81:8a:9a:38:5e:87:d1:e3:a4:d9:4e:f0:9b:56:b8:80:16: 78:0c:80:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUxMTA0MTkzNzAwWhcNMjUxMTExMTkzNzAwWjAYMRYwFAYD VQQDEw02OTBhNTVkYy00M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTvoBY0MOYOw1zRdN8rixi1r31F4GsyHydQzr7PQ9/UcJsrpjW+vpw4mjhTg 15GwEF3NPkkpNjgu776GyCA29N/h4cs8LojM2ClyBmbgUwcfSc634TSziwEvp3i3 V14ZAZxJwDZs4Gsdamssbqkh3sCjrYL7UflaCsxIovZXaMrJ3sBkI6yaziEp3tI6 PBPn0i5k/CUZ3HdsV6FfiOr1xYKffHCingK8jE5c1xwDbtjVbqc9vYjpI2RMrXpP cmjeLeTqaABeqOKOd2zniSeWTto+HqqN1wUC0gEk98nqWj2K2OyAcFB/Djv0X0Fk ecZXdm1YLmhBvCZxm8nEqZH/YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2oWohD 7ux9Xqggi3cPdzinpMsIMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWINLgURQfaT8MKXdUQpV76zZq3Dxs13uI63fH39SFTxywbxsedD3V bCg1IjEhkur6KwwULBjmta1hXm0VBm3BGglUl5ttufnowqgbZtLLGdHqaU/RArIi zdMLDU+r28bMfWL/5rG4a1U58AcKxWTivyWudZPIBjdZy3/xQBZwL0sMbZCSopFY YnAeS4PK5PS140hzYquofhEOtWQkcNO/tiK32DhgWsaNtquzjyXBaEAz5mh7KoTw 0ihifNuZyVurcAmbxHngrCUIz6bIcb6Q9TlyqPK7POROY6RyodotcRpCTkni2HBg 4ByIgYqaOF6H0eOk2U7wm1a4gBZ4DIDv -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:17 2025 by rpki-client