$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: D40k3POi5Q82gt1ALMlLT2v+yYhkeNMdI7TW3x0waQY= Subject key identifier: 81:92:0C:40:41:31:8B:1E:61:9A:8E:83:8A:42:B2:5E:A6:89:18:E9 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 0726 Signing time: Wed 22 Oct 2025 22:41:57 +0000 Manifest this update: Wed 22 Oct 2025 22:41:57 +0000 Manifest next update: Wed 29 Oct 2025 22:41:57 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: 7c3AmWla+TsAMCYYFPSmGXXOpXOGQMVO3HO4y5uhdjg=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Oct 22 22:41:57 2025 GMT Not After : Oct 29 22:41:57 2025 GMT Subject: CN=68f95db5-2637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:5b:d8:dc:8e:91:ae:c6:d1:17:f5:b2:52: 1c:c2:b4:50:a6:d6:29:65:3d:56:e0:4f:a8:63:d3: ea:97:75:5c:38:d7:d2:d2:23:83:28:50:88:d4:99: 79:3a:b7:fc:f7:65:c0:97:99:8e:9e:10:7a:28:63: 68:a3:a2:33:5b:5a:49:d5:63:61:ec:d6:f6:75:8b: 0c:70:d5:27:08:fd:1f:a3:d6:98:78:21:36:4c:a9: b6:72:35:da:6c:4e:1f:a3:93:45:c2:ee:60:81:eb: 1b:2e:e3:7d:70:6d:55:50:8c:eb:38:8e:2c:2a:03: da:f9:ba:ad:2f:ef:d6:e1:93:92:2c:3c:e2:4d:4a: 43:db:04:c6:80:f8:72:d2:25:7f:66:48:4d:74:d3: d0:0b:a9:d8:ba:00:80:84:4f:3d:c4:37:92:a9:98: 88:da:ef:35:fc:22:6c:8d:91:63:7a:cd:d2:e9:b1: 69:54:70:19:39:93:bc:c9:11:3d:6d:06:13:19:e9: 39:90:52:93:f4:7b:b2:cb:4e:9c:14:87:03:6a:26: bd:f1:cb:d1:c3:65:b2:d2:3b:f8:96:66:09:07:6a: 2f:35:61:e7:d6:9b:1d:76:7b:9c:f9:8f:2e:6f:fc: 59:5b:f7:1a:a7:6a:a6:05:0c:e9:45:47:11:02:5a: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:0C:40:41:31:8B:1E:61:9A:8E:83:8A:42:B2:5E:A6:89:18:E9 X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ba:01:ad:fa:d0:95:08:61:bc:33:40:9b:cb:c4:c7:4e:e5: 50:a0:c6:2e:09:30:b7:57:94:6c:4d:c9:4b:f0:c5:2f:22:bf: a6:19:8d:e5:fc:3d:07:6d:25:22:a4:a9:d3:65:03:33:c9:71: 6b:05:89:e5:9e:2e:87:a0:2f:8c:3e:3c:f1:b4:99:f9:15:96: 7e:bc:b7:ed:de:b8:47:51:42:d3:04:d0:a8:75:40:d1:a3:5a: 42:3c:ee:27:a1:6a:ab:48:54:a2:cd:17:d6:52:ab:87:ff:7e: f4:5f:be:47:4b:6e:a2:6d:b6:b1:8b:0e:00:8a:73:6d:df:ae: 20:55:d0:31:1f:8b:fc:d1:d0:e7:27:ff:47:de:b6:c8:18:a6: c8:1f:e0:c9:82:5d:78:2d:67:4e:1d:96:6f:2e:ca:19:36:9e: e4:6e:ab:a4:d0:27:42:33:ec:26:78:23:f0:21:b7:56:2d:83: 62:59:74:21:b2:9d:50:59:d9:fd:c0:cc:5d:3e:60:0c:b6:f4: 0f:e0:8b:74:33:26:7d:25:a7:ae:cf:c0:f1:be:45:40:6a:70: 0d:b2:6f:fe:ee:57:e8:3f:f4:ec:71:7c:10:5b:ad:9b:e7:d8: 67:a5:92:51:05:a6:9d:33:c9:62:98:e4:d6:c1:06:86:2b:63: ed:93:6c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUxMDIyMjI0MTU3WhcNMjUxMDI5MjI0MTU3WjAYMRYwFAYD VQQDEw02OGY5NWRiNS0yNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHBb2NyOka7G0Rf1slIcwrRQptYpZT1W4E+oY9Pql3VcONfS0iODKFCI1Jl5 Orf892XAl5mOnhB6KGNoo6IzW1pJ1WNh7Nb2dYsMcNUnCP0fo9aYeCE2TKm2cjXa bE4fo5NFwu5ggesbLuN9cG1VUIzrOI4sKgPa+bqtL+/W4ZOSLDziTUpD2wTGgPhy 0iV/ZkhNdNPQC6nYugCAhE89xDeSqZiI2u81/CJsjZFjes3S6bFpVHAZOZO8yRE9 bQYTGek5kFKT9Huyy06cFIcDaia98cvRw2Wy0jv4lmYJB2ovNWHn1psddnuc+Y8u b/xZW/cap2qmBQzpRUcRAlqbOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGSDEBB MYseYZqOg4pCsl6miRjpMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ugGt+tCVCGG8M0Cby8THTuVQoMYuCTC3V5RsTclL8MUvIr+mGY3l /D0HbSUipKnTZQMzyXFrBYnlni6HoC+MPjzxtJn5FZZ+vLft3rhHUULTBNCodUDR o1pCPO4noWqrSFSizRfWUquH/370X75HS26ibbaxiw4AinNt364gVdAxH4v80dDn J/9H3rbIGKbIH+DJgl14LWdOHZZvLsoZNp7kbquk0CdCM+wmeCPwIbdWLYNiWXQh sp1QWdn9wMxdPmAMtvQP4It0MyZ9Jaeuz8DxvkVAanANsm/+7lfoP/TscXwQW62b 59hnpZJRBaadM8limOTWwQaGK2Ptk2wV -----END CERTIFICATE-----Generated at Fri Oct 24 06:36:26 2025 by rpki-client