$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: bDpMsfTQrC9JOUbELUhtuKCuxmXk6GnxFLNRzellBZo= Subject key identifier: 03:A5:2F:D2:04:BC:A0:BE:70:EB:24:A6:58:C1:2A:75:A2:ED:FA:87 Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 29A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 2994 Signing time: Tue 04 Nov 2025 15:40:30 +0000 Manifest this update: Tue 04 Nov 2025 15:40:30 +0000 Manifest next update: Tue 11 Nov 2025 15:40:30 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: aFtFXOikkbdieiQAauqq87caRoF2fTjacd+XOlkH6dM=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: XWmzI2yeMf3apt5DHsKgv60jONcTAI6E+TZgl5OMpW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10665 (0x29a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Nov 4 15:40:30 2025 GMT Not After : Nov 11 15:40:30 2025 GMT Subject: CN=690a1e6e-5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:a6:25:4e:c9:90:a7:3f:3b:9f:b1:10:9a: a4:55:df:88:53:cc:fb:ff:39:01:25:75:85:74:b0: 14:d2:f0:ae:e6:8a:38:7a:c6:54:e8:0d:3a:b0:55: aa:71:07:b7:77:fa:f5:c2:75:51:93:cc:77:e8:f5: f1:33:3b:e5:66:00:00:64:c9:d1:60:1c:e9:e1:31: 66:37:12:33:fe:b8:d6:a2:2e:63:17:af:b6:6e:06: 7b:58:ba:0c:81:90:8e:3c:d0:ea:48:f7:97:9e:a0: 73:9e:b6:13:60:ae:35:a7:53:ec:81:f7:0d:59:bc: 00:0d:e2:aa:6b:06:ef:b9:e2:c4:a8:60:0a:dd:96: a1:1b:bc:fd:7a:86:36:fa:6b:f2:41:dc:95:1d:03: db:f6:fb:86:a5:b3:74:7d:55:bc:e3:64:43:2c:49: 9f:7f:ae:49:8e:ef:b1:67:85:13:eb:6b:f2:64:9b: 96:4e:b4:32:8b:3a:7c:34:5e:29:cf:13:2f:63:13: 8d:7b:b5:92:91:38:96:8d:a4:a5:84:19:00:da:a0: b2:50:3f:11:f8:2c:ff:68:30:8e:cc:cf:f9:33:dc: 22:38:f2:b6:ca:d3:6c:3b:17:1e:64:25:74:05:d0: c2:6c:8f:ef:1e:44:de:c0:53:ac:e1:47:48:7b:90: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A5:2F:D2:04:BC:A0:BE:70:EB:24:A6:58:C1:2A:75:A2:ED:FA:87 X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9e:63:c8:88:a2:92:d8:1b:6f:a4:08:86:5c:2b:16:83:97: 17:9e:75:9b:2c:4b:de:a9:bd:5d:3b:85:55:7d:51:45:a0:1a: 6e:9a:7b:27:15:32:1e:a6:28:87:4c:0b:df:4f:87:62:9a:30: 86:be:c8:58:d5:e3:1b:27:97:9d:e6:12:2a:13:ad:ba:36:a6: 29:9d:cb:b1:f0:82:98:b3:12:20:11:b3:64:24:7f:e8:5a:ab: 3f:ee:2b:a4:9a:df:68:1d:f9:bb:6b:cb:0c:ab:f3:37:b5:7b: d0:55:81:db:45:2f:1a:af:a4:17:03:86:f3:d4:6b:84:be:b5: f4:61:ec:f5:2d:a7:10:8e:6c:3e:4c:83:45:32:fe:c5:2b:a7: 98:46:75:42:bf:01:ea:76:ed:71:fb:97:a0:f3:fd:57:14:ac: 2a:3e:75:13:0e:7d:38:94:76:ac:90:de:b9:79:4c:1a:38:cc: d7:28:e1:e2:e6:e0:10:27:17:f4:ba:a8:ed:eb:df:10:14:66: b9:54:21:e7:30:66:12:26:2f:65:d6:57:f9:b1:2a:41:3a:49: 9e:0b:9a:37:98:91:41:7b:61:21:97:55:39:20:fb:e5:4e:e0: 14:e5:90:4a:74:c1:36:08:33:ff:ed:8d:b6:27:fa:18:66:b8: f0:6f:43:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjUxMTA0MTU0MDMwWhcNMjUxMTExMTU0MDMwWjAYMRYwFAYD VQQDEw02OTBhMWU2ZS01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KOmJU7JkKc/O5+xEJqkVd+IU8z7/zkBJXWFdLAU0vCu5oo4esZU6A06sFWq cQe3d/r1wnVRk8x36PXxMzvlZgAAZMnRYBzp4TFmNxIz/rjWoi5jF6+2bgZ7WLoM gZCOPNDqSPeXnqBznrYTYK41p1PsgfcNWbwADeKqawbvueLEqGAK3ZahG7z9eoY2 +mvyQdyVHQPb9vuGpbN0fVW842RDLEmff65Jju+xZ4UT62vyZJuWTrQyizp8NF4p zxMvYxONe7WSkTiWjaSlhBkA2qCyUD8R+Cz/aDCOzM/5M9wiOPK2ytNsOxceZCV0 BdDCbI/vHkTewFOs4UdIe5CMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOlL9IE vKC+cOskpljBKnWi7fqHMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4nmPIiKKS2BtvpAiGXCsWg5cXnnWbLEveqb1dO4VVfVFFoBpumnsn FTIepiiHTAvfT4dimjCGvshY1eMbJ5ed5hIqE626NqYpncux8IKYsxIgEbNkJH/o Wqs/7iukmt9oHfm7a8sMq/M3tXvQVYHbRS8ar6QXA4bz1GuEvrX0Yez1LacQjmw+ TINFMv7FK6eYRnVCvwHqdu1x+5eg8/1XFKwqPnUTDn04lHaskN65eUwaOMzXKOHi 5uAQJxf0uqjt698QFGa5VCHnMGYSJi9l1lf5sSpBOkmeC5o3mJFBe2Ehl1U5IPvl TuAU5ZBKdME2CDP/7Y22J/oYZrjwb0MC -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:45 2025 by rpki-client