$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: Wc0Lz2Un0e9ZZ2/Pvj0pd0qhKB9uTAejs5Dj9ie//2Y= Subject key identifier: 99:65:AD:B2:8A:B7:D6:17:D2:FC:91:03:ED:33:D6:66:B5:76:BE:E4 Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 5F Signing time: Mon 03 Nov 2025 07:04:23 +0000 Manifest this update: Mon 03 Nov 2025 07:04:23 +0000 Manifest next update: Mon 10 Nov 2025 07:04:23 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: G9vUQ/6PA6LID26vVB8gDz3uqW9l3nBFAdNMusuDR0k=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Nov 3 07:04:23 2025 GMT Not After : Nov 10 07:04:23 2025 GMT Subject: CN=690853f7-48ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:0e:fa:ec:34:00:a8:95:2f:c3:05:e0:11: e7:2e:fb:0f:fa:4d:5a:c3:59:85:de:15:81:3e:92: c8:41:b8:19:59:d9:d5:4e:6a:06:1d:f4:7a:fc:ee: cd:61:e8:d1:b4:3a:dc:1c:cd:3b:55:2a:50:43:40: dc:18:ac:5e:46:13:1d:13:71:50:b9:63:46:0c:17: 43:13:fc:a3:80:a4:ee:49:bb:73:c1:c3:13:1d:04: 3e:1e:af:01:17:1e:a5:3d:f7:fe:f2:75:1b:63:10: 0b:62:73:b4:9d:25:a9:5b:a7:4f:0b:3b:06:3b:82: f8:78:f2:57:52:d3:c5:09:73:08:8f:37:c2:45:92: 88:b0:e4:11:d9:01:58:be:5c:56:27:38:d5:ce:85: d6:37:9c:67:4a:26:11:15:ac:6b:4b:e1:39:a1:7b: f5:af:1a:88:f5:31:e0:46:af:df:34:08:4b:d7:09: ef:77:72:6b:23:e0:49:d9:a3:f6:9e:2b:20:f1:1c: 79:b7:df:b2:12:4f:f3:71:15:47:ae:18:db:67:cd: a3:62:90:36:42:6e:4c:91:40:e7:f2:f6:75:40:3e: 90:ba:8a:d8:ef:8f:9e:cb:88:90:6b:d3:a2:5c:05: 9a:48:4b:e4:dc:04:8e:b9:5e:ad:5f:c3:84:5b:78: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:AD:B2:8A:B7:D6:17:D2:FC:91:03:ED:33:D6:66:B5:76:BE:E4 X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e1:67:a7:3c:e2:22:54:ea:3a:b1:fc:ea:04:0f:7b:2b:bc: 31:2a:15:f0:c6:f1:5d:59:5a:df:ea:01:3e:73:cf:60:5e:62: 3e:bb:38:0d:4a:24:85:46:64:ec:42:9f:a4:04:50:f9:cc:b3: c3:f4:93:f2:03:2f:1b:8a:72:b2:24:a5:cf:73:8f:44:6f:fb: 93:54:47:73:82:ac:a5:53:a6:e2:18:09:c9:26:8f:03:66:39: bf:eb:84:65:c4:65:e5:a6:a6:b9:ea:74:2e:c7:26:db:d9:41: ef:bb:ac:45:d2:11:b2:a2:2f:7a:ee:c4:fd:5f:13:02:db:77: 9b:10:1c:76:49:b9:b7:2d:7a:40:97:20:96:c1:8e:41:85:62: ee:75:88:ac:d2:43:00:36:1d:b3:00:a8:67:bd:f8:54:c4:9d: 08:dd:58:da:d9:65:2c:47:0f:2f:65:3d:7a:b5:8b:0c:e6:9d: 04:84:0d:97:c4:d8:97:5b:f3:68:8d:09:f8:d2:65:8b:d2:29: 8e:fd:b7:e2:23:bc:60:61:53:45:56:df:1f:93:85:cf:a0:3d: cd:32:26:b3:b2:37:27:10:45:14:7c:45:c6:a8:12:d2:72:95: c3:a8:0e:1a:60:8b:dd:4a:6c:c5:72:08:2c:a2:23:18:07:e7: 5d:d3:eb:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTExMDMwNzA0MjNaFw0yNTExMTAwNzA0MjNaMBgxFjAUBgNV BAMTDTY5MDg1M2Y3LTQ4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KQ767DQAqJUvwwXgEecu+w/6TVrDWYXeFYE+kshBuBlZ2dVOagYd9Hr87s1h 6NG0OtwczTtVKlBDQNwYrF5GEx0TcVC5Y0YMF0MT/KOApO5Ju3PBwxMdBD4erwEX HqU99/7ydRtjEAtic7SdJalbp08LOwY7gvh48ldS08UJcwiPN8JFkoiw5BHZAVi+ XFYnONXOhdY3nGdKJhEVrGtL4Tmhe/WvGoj1MeBGr980CEvXCe93cmsj4EnZo/ae KyDxHHm337IST/NxFUeuGNtnzaNikDZCbkyRQOfy9nVAPpC6itjvj57LiJBr06Jc BZpIS+TcBI65Xq1fw4RbeF5dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmWWtsoq3 1hfS/JED7TPWZrV2vuQwHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/hZ6c84iJU6jqx/OoED3srvDEqFfDG8V1ZWt/qAT5zz2BeYj67OA1K JIVGZOxCn6QEUPnMs8P0k/IDLxuKcrIkpc9zj0Rv+5NUR3OCrKVTpuIYCckmjwNm Ob/rhGXEZeWmprnqdC7HJtvZQe+7rEXSEbKiL3ruxP1fEwLbd5sQHHZJubctekCX IJbBjkGFYu51iKzSQwA2HbMAqGe9+FTEnQjdWNrZZSxHDy9lPXq1iwzmnQSEDZfE 2Jdb82iNCfjSZYvSKY79t+IjvGBhU0VW3x+Thc+gPc0yJrOyNycQRRR8RcaoEtJy lcOoDhpgi91KbMVyCCyiIxgH513T66Y= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:12 2025 by rpki-client