$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: 5F36ag8AhvsZcqjI8P8MDXKfxSGWLY++wUz/R98RrYs= Subject key identifier: DE:40:84:76:FE:EF:3F:B1:55:C6:4B:1F:96:47:1F:6E:7B:D1:F1:8C Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0494 Signing time: Sun 02 Nov 2025 23:59:27 +0000 Manifest this update: Sun 02 Nov 2025 23:59:27 +0000 Manifest next update: Sun 09 Nov 2025 23:59:27 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: BHZJiEq0GMhwtK5nnnOGHfsFCDQk6Gf5r3L8NiX/LKc=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Nov 2 23:59:27 2025 GMT Not After : Nov 9 23:59:27 2025 GMT Subject: CN=6907f05f-82c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:c6:85:5b:46:16:86:5c:f5:7d:1d:20:7c: dd:82:b6:c7:50:fe:78:fb:6d:eb:c5:9c:56:0e:1f: 14:d0:d3:32:c3:97:6b:4e:d9:35:d9:3b:f6:56:49: 91:92:d2:8a:96:55:c0:9b:22:29:75:38:f3:bd:40: 6b:8f:e0:14:1b:83:a9:92:6c:f0:d7:bb:5f:29:74: fe:7e:a2:fe:26:eb:29:07:d6:36:9f:38:87:df:31: a2:e2:52:1b:cd:f0:17:9c:00:56:47:a7:0d:64:71: 60:5f:cc:5b:96:c0:3b:f7:cd:32:35:79:bd:f8:bd: 41:6c:82:73:1d:73:a7:25:fe:49:27:14:c4:7e:1e: 84:da:42:b5:f6:39:7f:b5:8d:2d:a0:71:5f:ef:9c: ca:a9:0c:69:c1:d9:32:82:b5:6f:1d:ec:0d:11:40: 48:13:3c:74:66:bb:e7:c0:39:89:5a:8a:30:ab:43: 92:d7:f0:c0:c6:fc:19:9c:ee:c8:4c:ce:16:4c:f4: b5:a1:53:bf:92:1b:21:8a:9f:6d:f4:84:d8:92:dd: ed:d2:82:87:10:6d:e5:fb:12:e4:ef:10:c6:40:81: 8d:88:51:a2:28:4e:2c:e2:e8:4e:01:53:de:5b:61: b5:ad:e4:55:fc:b9:a1:ea:8b:6f:30:9e:6a:76:b4: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:84:76:FE:EF:3F:B1:55:C6:4B:1F:96:47:1F:6E:7B:D1:F1:8C X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:08:ae:3a:57:c0:e0:94:fc:09:c7:0f:23:4a:5a:bb:7b:2c: d8:95:a6:af:fd:ea:cc:17:d1:c1:c6:51:36:36:e0:f8:e8:9b: 6b:5b:42:f0:59:1b:73:0f:b9:5a:cf:fe:27:64:e7:0c:ee:77: c6:94:e5:e8:a1:c6:49:1b:66:38:a8:77:b7:17:e4:21:c6:6f: 45:6a:9d:2a:9c:45:5a:f2:f7:08:dc:47:2e:95:95:35:d6:e6: ce:72:ad:f0:87:8b:a5:e1:3d:35:c2:7a:5f:cf:f7:be:97:22: 0f:f6:ec:b3:bf:2d:b9:e3:01:e4:fe:9a:eb:38:65:49:b1:a5: 06:21:cf:91:84:af:8e:02:c0:c1:f1:b7:92:ce:d8:0e:1e:91: 52:34:67:3b:7e:87:89:c1:15:2d:87:39:7e:8e:c6:cc:40:2d: 44:ca:ad:20:15:12:c7:4d:65:f6:fe:74:ab:7b:1d:14:dc:b5: f2:7b:79:cd:b2:da:34:07:97:a2:0c:c8:e4:5a:8e:ca:43:4a: af:5a:53:34:0c:b9:ac:7e:ac:1f:6c:f5:2c:3f:33:83:7f:07: d4:a1:95:bf:82:e7:00:f6:cb:8b:52:06:9a:c1:6b:67:e6:e8: 96:db:b3:7a:6f:58:7d:4f:6e:0a:97:fe:ff:e7:a0:b1:d6:27: 5e:75:76:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUxMTAyMjM1OTI3WhcNMjUxMTA5MjM1OTI3WjAYMRYwFAYD VQQDEw02OTA3ZjA1Zi04MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7fGhVtGFoZc9X0dIHzdgrbHUP54+23rxZxWDh8U0NMyw5drTtk12Tv2VkmR ktKKllXAmyIpdTjzvUBrj+AUG4Opkmzw17tfKXT+fqL+JuspB9Y2nziH3zGi4lIb zfAXnABWR6cNZHFgX8xblsA7980yNXm9+L1BbIJzHXOnJf5JJxTEfh6E2kK19jl/ tY0toHFf75zKqQxpwdkygrVvHewNEUBIEzx0ZrvnwDmJWoowq0OS1/DAxvwZnO7I TM4WTPS1oVO/khship9t9ITYkt3t0oKHEG3l+xLk7xDGQIGNiFGiKE4s4uhOAVPe W2G1reRV/Lmh6otvMJ5qdrTvHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5AhHb+ 7z+xVcZLH5ZHH2570fGMMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfCK46V8DglPwJxw8jSlq7eyzYlaav/erMF9HBxlE2NuD46JtrW0Lw WRtzD7laz/4nZOcM7nfGlOXoocZJG2Y4qHe3F+Qhxm9Fap0qnEVa8vcI3EculZU1 1ubOcq3wh4ul4T01wnpfz/e+lyIP9uyzvy254wHk/prrOGVJsaUGIc+RhK+OAsDB 8beSztgOHpFSNGc7foeJwRUthzl+jsbMQC1Eyq0gFRLHTWX2/nSrex0U3LXye3nN sto0B5eiDMjkWo7KQ0qvWlM0DLmsfqwfbPUsPzODfwfUoZW/gucA9suLUgaawWtn 5uiW27N6b1h9T24Kl/7/56Cx1idedXZT -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:38 2025 by rpki-client