$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: TWjYC3Az3DvjJ4gtRKuAPFz48F1IUTT/S3OBvcOn3s8= Subject key identifier: 07:48:8C:D0:0A:36:8F:D1:AD:92:9D:93:8B:F4:7B:36:4B:A3:B2:7B Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0C23 Signing time: Sun 02 Nov 2025 18:41:20 +0000 Manifest this update: Sun 02 Nov 2025 18:41:19 +0000 Manifest next update: Sun 09 Nov 2025 18:41:19 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: Oj8JwjJIFS4zlb9YXDPkgouR7wSnzjwPN5N+8IiqlLQ=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fuEIOJZ2g7nFL90Iih/ZQree35PAM4VcWuWuu09soDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Nov 2 18:41:19 2025 GMT Not After : Nov 9 18:41:19 2025 GMT Subject: CN=6907a5d0-9065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:41:6c:1f:26:5c:b3:0e:b0:c4:58:12:15:93: bb:d0:95:38:e6:d0:02:a7:e4:2a:9a:0c:aa:59:70: 63:23:a2:6c:d5:b3:25:24:9b:f0:d2:bc:93:99:23: 4c:60:0e:8f:5f:63:e5:b5:dc:bd:13:66:1c:21:65: 26:35:62:07:0c:7a:63:dd:e1:3c:48:32:34:d3:de: 2f:b1:6d:7a:84:2c:9e:c8:12:80:28:23:33:d2:71: 8f:f8:26:fe:46:85:bd:36:6d:d0:a6:be:6c:96:17: 49:5f:7d:e5:c4:55:a1:04:23:d6:68:10:19:1b:06: b5:7a:72:1a:65:ce:d9:9e:83:f0:4d:a2:33:bf:d7: 36:0c:b1:a9:89:b7:5e:2b:a2:4f:64:21:8a:a3:cc: d7:9b:5b:60:88:fd:da:0c:02:4c:1d:ef:47:20:ba: e8:12:52:ff:48:0a:ef:3e:d4:00:c0:f4:cb:e0:ab: 7c:08:fa:7b:9c:4d:c7:2e:65:3f:e2:f1:05:72:1c: d9:8a:5b:d3:7a:f4:06:fe:0c:75:b0:85:f4:1b:48: e1:dc:f8:b3:0d:89:3b:cf:8f:72:78:a8:26:44:4b: d3:70:9a:4c:de:fd:dc:4d:29:35:52:98:c0:45:e3: 78:8f:8b:2b:37:24:78:0e:fe:15:79:e6:ec:de:c8: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:48:8C:D0:0A:36:8F:D1:AD:92:9D:93:8B:F4:7B:36:4B:A3:B2:7B X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3b:65:08:11:ad:93:5d:4b:98:23:54:e9:f5:70:52:a1:45: 0c:7f:3a:d4:6a:2b:6f:a9:ba:5f:c0:33:21:48:5d:f9:15:71: 14:52:ef:8b:2c:3d:9d:29:a0:65:96:8b:f6:ff:d4:a3:96:11: 4e:9b:d0:a9:1a:76:8e:d0:50:e5:32:4a:83:9c:0b:47:2e:a8: 46:b1:46:87:d4:30:df:bb:ec:1c:14:41:4a:8d:ed:67:7a:ac: be:58:e0:ae:d1:a0:97:8c:45:06:b3:d9:cb:b0:86:7c:e0:6e: 84:8c:f4:39:cd:6b:62:97:19:2c:eb:ae:28:3c:db:1b:43:c3: 26:23:05:83:5e:23:39:c2:11:63:2f:62:e1:28:97:ee:7f:3e: 22:96:b6:29:3e:d2:a3:a1:b6:9f:ee:3b:d7:f6:f5:a9:e5:aa: 56:2e:40:c2:b7:49:99:60:b6:06:fb:30:8e:d7:89:69:03:f9: 30:9f:9d:54:7a:e7:32:d6:b3:73:36:5c:bf:97:8d:48:07:f3: 88:4c:b8:aa:a1:76:c1:03:09:40:48:d8:e0:16:eb:1f:2d:98: fc:5f:6e:40:7b:9d:20:9a:bb:b2:a4:ba:7c:23:ca:29:17:80: f7:4f:9b:32:74:50:06:e5:a4:53:40:ea:59:3a:44:be:31:21: 47:ba:0a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjUxMTAyMTg0MTE5WhcNMjUxMTA5MTg0MTE5WjAYMRYwFAYD VQQDEw02OTA3YTVkMC05MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EFsHyZcsw6wxFgSFZO70JU45tACp+QqmgyqWXBjI6Js1bMlJJvw0ryTmSNM YA6PX2Pltdy9E2YcIWUmNWIHDHpj3eE8SDI0094vsW16hCyeyBKAKCMz0nGP+Cb+ RoW9Nm3Qpr5slhdJX33lxFWhBCPWaBAZGwa1enIaZc7ZnoPwTaIzv9c2DLGpibde K6JPZCGKo8zXm1tgiP3aDAJMHe9HILroElL/SArvPtQAwPTL4Kt8CPp7nE3HLmU/ 4vEFchzZilvTevQG/gx1sIX0G0jh3PizDYk7z49yeKgmREvTcJpM3v3cTSk1UpjA ReN4j4srNyR4Dv4Veebs3shQBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdIjNAK No/RrZKdk4v0ezZLo7J7MB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNO2UIEa2TXUuYI1Tp9XBSoUUMfzrUaitvqbpfwDMhSF35FXEUUu+L LD2dKaBllov2/9SjlhFOm9CpGnaO0FDlMkqDnAtHLqhGsUaH1DDfu+wcFEFKje1n eqy+WOCu0aCXjEUGs9nLsIZ84G6EjPQ5zWtilxks664oPNsbQ8MmIwWDXiM5whFj L2LhKJfufz4ilrYpPtKjobaf7jvX9vWp5apWLkDCt0mZYLYG+zCO14lpA/kwn51U eucy1rNzNly/l41IB/OITLiqoXbBAwlASNjgFusfLZj8X25Ae50gmruypLp8I8op F4D3T5sydFAG5aRTQOpZOkS+MSFHugpt -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:05 2025 by rpki-client