$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: Q/WlNdaQn2DisPzOWCcWgmXz8g5rR4FAEPNX4IZHUxg= Subject key identifier: AE:5C:BC:D5:83:C0:37:D1:B9:F7:18:2A:F4:AD:2F:60:35:E6:AB:AA Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 0323 Signing time: Mon 03 Nov 2025 01:02:09 +0000 Manifest this update: Mon 03 Nov 2025 01:02:08 +0000 Manifest next update: Mon 10 Nov 2025 01:02:08 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: 2gGdLfhvnQRRW9JCWtOwCSbbicdVYWNdUZ8Soy8TSGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Nov 3 01:02:08 2025 GMT Not After : Nov 10 01:02:08 2025 GMT Subject: CN=6907ff11-e083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:90:82:78:99:61:76:45:4a:bf:03:a8:b1: 97:a3:22:e4:21:ea:78:16:2e:f7:b6:ce:cd:5c:92: dd:d0:92:23:d7:4c:b9:12:47:a4:fd:79:b8:2a:2a: 81:15:c2:d6:e9:95:a5:20:bd:84:b7:0e:52:0f:23: 97:18:a3:b0:10:ff:e4:e0:0f:62:48:61:ef:a9:b5: 17:1e:56:53:71:ad:5c:41:4b:37:78:42:b1:12:f3: de:80:c2:c8:bd:f4:f5:52:2d:b4:84:61:d8:3f:2b: 91:10:5a:e4:5a:13:21:12:91:2b:a6:bb:0c:25:ce: ca:42:32:e4:8c:84:6f:d9:7b:60:bb:18:26:e8:66: 15:fe:cf:11:a7:ff:a7:b9:13:bf:d1:3f:55:5e:8d: 44:fc:51:30:61:c0:96:6d:07:c6:37:92:d6:09:66: 51:84:ff:ef:a5:62:92:d3:6e:72:30:95:4a:c0:68: 27:99:de:5b:c6:17:33:6e:fc:32:79:75:2f:e7:4c: 48:de:d8:f7:2b:84:e4:02:03:3d:de:df:36:0f:7c: 85:a6:db:0c:be:3b:fd:b8:b2:a8:b4:30:df:46:af: 80:89:f5:5b:d5:c4:22:62:6e:86:a5:0e:8d:b1:04: 67:6d:a4:fc:f2:c9:77:50:ce:68:88:56:20:30:27: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:BC:D5:83:C0:37:D1:B9:F7:18:2A:F4:AD:2F:60:35:E6:AB:AA X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:20:1a:2a:3f:0b:77:62:7e:ca:d6:27:6b:b0:d1:60:8b: 81:04:75:70:b6:97:2f:38:f2:ea:43:a7:e0:d9:4a:bd:f8:4e: fe:7a:88:2d:61:e6:32:21:df:cb:98:60:59:f7:bd:09:11:1e: c5:7d:42:af:57:69:34:aa:bc:23:b9:fe:95:34:d9:ad:56:aa: 91:b4:47:49:cd:ff:27:89:5f:f6:a8:61:fb:eb:f5:79:06:13: 4a:d1:6a:a1:54:5b:35:2b:3c:c6:d4:7a:1e:d8:30:e5:4f:10: ef:bf:c4:bd:45:c7:b7:24:7e:63:8a:2c:0c:c1:0a:38:0e:ba: 75:cb:00:ce:05:8d:a2:69:b2:a1:9c:d5:84:97:55:ff:83:9c: 61:7f:dd:ed:8b:12:a8:9a:bc:25:80:6a:1e:fe:3f:ea:e9:59: 8a:4f:82:0b:5b:09:71:b0:5f:ea:66:1d:5f:4d:f2:7e:40:0b: bd:0d:cf:69:9a:3a:37:2b:e1:91:e4:73:16:d2:18:77:fd:7c: 13:9f:38:79:a7:57:da:69:20:bd:97:ff:25:da:71:e9:10:a3: 9a:81:09:d0:87:2a:89:5a:8a:2b:8a:90:ff:cf:88:00:2b:a9: d5:65:4d:20:06:0d:fe:e6:c7:e3:05:6a:07:85:8e:0f:5a:61: e2:b9:f9:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUxMTAzMDEwMjA4WhcNMjUxMTEwMDEwMjA4WjAYMRYwFAYD VQQDEw02OTA3ZmYxMS1lMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYGQgniZYXZFSr8DqLGXoyLkIep4Fi73ts7NXJLd0JIj10y5Ekek/Xm4KiqB FcLW6ZWlIL2Etw5SDyOXGKOwEP/k4A9iSGHvqbUXHlZTca1cQUs3eEKxEvPegMLI vfT1Ui20hGHYPyuREFrkWhMhEpErprsMJc7KQjLkjIRv2Xtguxgm6GYV/s8Rp/+n uRO/0T9VXo1E/FEwYcCWbQfGN5LWCWZRhP/vpWKS025yMJVKwGgnmd5bxhczbvwy eXUv50xI3tj3K4TkAgM93t82D3yFptsMvjv9uLKotDDfRq+AifVb1cQiYm6GpQ6N sQRnbaT88sl3UM5oiFYgMCesvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5cvNWD wDfRufcYKvStL2A15quqMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUiAaKj8Ld2J+ytYna7DRYIuBBHVwtpcvOPLqQ6fg2Uq9+E7+eogt YeYyId/LmGBZ970JER7FfUKvV2k0qrwjuf6VNNmtVqqRtEdJzf8niV/2qGH76/V5 BhNK0WqhVFs1KzzG1Hoe2DDlTxDvv8S9Rce3JH5jiiwMwQo4Drp1ywDOBY2iabKh nNWEl1X/g5xhf93tixKomrwlgGoe/j/q6VmKT4ILWwlxsF/qZh1fTfJ+QAu9Dc9p mjo3K+GR5HMW0hh3/XwTnzh5p1faaSC9l/8l2nHpEKOagQnQhyqJWooripD/z4gA K6nVZU0gBg3+5sfjBWoHhY4PWmHiufm6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:35 2025 by rpki-client