$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json) Hash identifier: e6CJvtW4rFKNnK9mfg6vOp+Fu/TT6TOQBJMlIM+lS0o= Subject key identifier: 4D:FA:17:B6:C5:3A:5B:ED:7D:F1:84:46:17:E4:BD:08:E1:9D:14:9F Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft Manifest number: 23 Signing time: Mon 03 Nov 2025 07:44:05 +0000 Manifest this update: Mon 03 Nov 2025 07:44:04 +0000 Manifest next update: Mon 10 Nov 2025 07:44:04 +0000 Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: s+extwqyGWdZn9GNLDa+cFZE1ipwe4T2CaRR6Rz6ta0=) 2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: eoWky/ushFlFPOAMp9hbU/1xEcSwmCQfGQqBxUKHPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Nov 3 07:44:04 2025 GMT Not After : Nov 10 07:44:04 2025 GMT Subject: CN=69085d45-c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:b8:c4:e2:48:0a:ac:35:c7:7a:b9:ed:f0: e3:e1:f1:9f:18:ca:06:1e:4f:cd:57:0e:7f:09:df: 77:a9:7b:5a:39:50:71:67:48:8e:d0:5a:19:77:e5: 95:f5:49:45:41:56:cb:fe:85:8c:f3:ee:3d:82:d9: fd:c0:56:87:7d:30:e8:5d:e6:44:b7:23:00:14:ff: b6:57:7c:89:0f:40:5a:2f:24:1f:9f:d3:9c:e5:0f: ce:f3:79:a9:7b:3c:f7:d4:aa:9b:38:65:2a:23:ba: fc:ae:d4:ec:2d:19:33:a8:0a:b7:99:e4:3c:bf:e8: f6:2f:34:b5:10:e8:c8:db:68:0e:f8:14:aa:9b:fc: 54:70:34:6b:01:04:6b:28:e9:08:b4:42:82:9e:e0: 9d:79:01:a8:29:f9:e7:7d:0e:60:c0:73:86:c1:76: f6:59:73:16:6a:c8:57:a0:5b:8c:de:ba:a2:72:e7: db:79:2b:4d:b8:b0:1b:e1:78:1a:77:f0:2b:a8:2a: dc:98:e8:64:de:6e:9f:5d:7c:e9:9f:98:9b:e0:13: a8:94:78:c2:95:36:b4:7c:c4:47:2a:5a:62:99:5a: 1d:54:21:93:a0:88:b8:be:05:a5:ae:c1:13:f2:46: b3:f8:74:66:98:bf:10:34:5d:95:ba:03:c6:06:60: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:17:B6:C5:3A:5B:ED:7D:F1:84:46:17:E4:BD:08:E1:9D:14:9F X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:20:ff:f8:36:41:f2:70:fc:11:d6:a9:8f:01:31:f4:d0:c0: 65:69:46:b2:72:92:c0:a4:44:da:2b:0b:cc:73:40:94:fa:b0: 66:1f:61:e1:08:ec:01:4b:72:40:e7:d9:0e:07:7d:42:d0:55: 31:33:4f:7e:17:67:33:45:8c:a6:0d:57:bd:ef:87:ca:19:92: 31:c0:24:89:fd:28:2e:ec:36:0a:3c:84:f4:24:f7:0c:79:ba: aa:58:a4:77:6c:c0:be:76:0c:fa:c3:87:ef:21:93:f0:f9:61: 18:70:30:8c:ed:7a:3c:ac:45:19:14:6d:58:fe:9a:5a:29:28: 33:d5:77:cb:9e:4f:41:5d:8f:94:98:c8:ff:48:ed:31:36:24: dc:1e:37:7f:03:bf:4e:6e:b3:90:08:31:54:e1:37:68:79:96: 64:39:92:1a:64:b0:91:0c:b7:a2:86:9d:de:14:db:84:bc:4b: cb:18:eb:cb:5e:0b:4d:e6:17:70:dd:b0:34:42:8f:b2:41:5b: 7e:7d:dd:f1:ea:a2:51:f7:f8:62:32:92:02:ee:52:24:97:3c: a1:9a:5d:24:9c:65:94:38:75:84:f7:29:0f:f7:86:78:b2:19: 60:bb:ad:37:bb:dd:de:9d:30:f9:ff:9c:83:a1:92:ff:74:5c: cf:38:f3:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDZGRTExMC8GA1UEBRMoNEVEMDg4N0JEMzA0RTA0Qzk4RkJBNTNCOUI5QjAyQkRF NDM4OTcwMzAeFw0yNTExMDMwNzQ0MDRaFw0yNTExMTAwNzQ0MDRaMBgxFjAUBgNV BAMTDTY5MDg1ZDQ1LWM5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFs7jE4kgKrDXHernt8OPh8Z8YygYeT81XDn8J33epe1o5UHFnSI7QWhl35ZX1 SUVBVsv+hYzz7j2C2f3AVod9MOhd5kS3IwAU/7ZXfIkPQFovJB+f05zlD87zeal7 PPfUqps4ZSojuvyu1OwtGTOoCreZ5Dy/6PYvNLUQ6MjbaA74FKqb/FRwNGsBBGso 6Qi0QoKe4J15Aagp+ed9DmDAc4bBdvZZcxZqyFegW4zeuqJy59t5K024sBvheBp3 8CuoKtyY6GTebp9dfOmfmJvgE6iUeMKVNrR8xEcqWmKZWh1UIZOgiLi+BaWuwRPy RrP4dGaYvxA0XZW6A8YGYIGxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfoXtsU6 W+198YRGF+S9COGdFJ8wHwYDVR0jBBgwFoAUTtCIe9ME4EyY+6U7m5sCveQ4lwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NkZFLzlCNjU2RjhFODNF NTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHRDSWU5TUU0RXlZLTZVN201c0N2ZVE0bHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NkZFLzlCNjU2RjhFODNFNTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5 WS02VTdtNXNDdmVRNGx3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwg//g2QfJw/BHWqY8BMfTQwGVpRrJyksCkRNorC8xzQJT6sGYfYeEI 7AFLckDn2Q4HfULQVTEzT34XZzNFjKYNV73vh8oZkjHAJIn9KC7sNgo8hPQk9wx5 uqpYpHdswL52DPrDh+8hk/D5YRhwMIztejysRRkUbVj+mlopKDPVd8ueT0Fdj5SY yP9I7TE2JNweN38Dv05us5AIMVThN2h5lmQ5khpksJEMt6KGnd4U24S8S8sY68te C03mF3DdsDRCj7JBW3593fHqolH3+GIykgLuUiSXPKGaXSScZZQ4dYT3KQ/3hniy GWC7rTe73d6dMPn/nIOhkv90XM8480Y= -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:13 2025 by rpki-client