$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: FvCtZuZmiPYQ9XtiIYWDlUsJF/yaqFh98QqzRon33do= Subject key identifier: EA:C2:2C:5E:EA:A6:CC:8E:36:99:57:84:88:3A:87:E9:97:A9:AE:5D Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C59 Signing time: Sun 02 Nov 2025 18:33:58 +0000 Manifest this update: Sun 02 Nov 2025 18:33:57 +0000 Manifest next update: Sun 09 Nov 2025 18:33:57 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: T4lOzYf3QuAU9RTdRT5sPCjk8NIAf6ZUbpblqt/GesA=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Nov 2 18:33:57 2025 GMT Not After : Nov 9 18:33:57 2025 GMT Subject: CN=6907a416-b893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:f9:60:e1:05:a4:da:30:42:53:20:cf:f8: f1:0d:ff:59:bf:06:c7:6c:06:b2:6d:bd:47:08:65: de:61:91:4f:db:4d:a4:64:33:67:22:dd:64:91:4c: 59:50:fd:27:15:ce:2c:90:4d:b0:30:4c:6c:be:21: 80:af:28:86:f4:ae:c9:69:5b:ef:25:63:0a:7a:b9: f4:24:eb:64:b9:68:dd:25:8f:6f:4b:25:36:c6:8a: f7:d4:c9:20:00:5c:f1:22:c7:3d:be:13:7b:d4:b2: c4:30:df:3c:29:94:f7:2a:f3:45:28:6a:ba:57:30: 71:2f:f6:a0:a7:84:1b:57:07:bc:f6:b1:c4:88:30: 8d:5a:c8:a3:f7:76:86:fc:1f:54:5a:49:8b:fc:10: 31:68:70:0a:48:89:36:e0:42:85:b4:69:fd:6a:62: 4a:20:3e:c9:96:5e:de:79:74:dd:fa:34:ba:59:b4: 55:66:29:84:01:56:f3:b4:26:e6:03:d8:6e:99:8b: 05:1e:9e:00:f5:07:60:81:f1:2f:3a:89:65:1f:8f: c1:a6:c2:8f:fb:f4:a9:18:95:5f:6a:c2:4a:fd:ec: 64:e7:8b:74:20:42:0c:85:e7:37:11:36:7a:d7:75: 4a:62:56:61:77:32:b8:94:4d:a3:26:e5:08:73:f9: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:2C:5E:EA:A6:CC:8E:36:99:57:84:88:3A:87:E9:97:A9:AE:5D X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:67:6f:b5:6f:cf:d9:73:12:3c:da:de:4f:14:5c:33:f9:0a: 65:e1:26:af:76:c6:0e:ea:45:58:ca:8e:c9:b0:ed:f2:4e:66: 5e:77:55:cb:6b:a3:6d:f0:78:73:47:df:bc:20:af:c6:fa:42: fc:0c:49:21:56:63:c2:ce:2a:d3:13:da:6b:1d:14:2d:32:97: 09:13:41:8d:ee:2d:f3:e0:bb:90:87:1e:4f:c2:f3:ad:03:31: 88:bb:87:bd:f9:8c:82:fb:a7:29:3e:1e:3c:a8:ac:64:47:fe: 85:d0:f1:69:17:5c:6b:69:7d:cf:60:4b:fe:db:d7:68:c2:0d: 18:aa:d8:41:a5:9f:f4:6a:6d:41:ec:f5:59:a4:e7:08:f2:6d: 50:8e:07:68:69:6f:7a:4e:f3:c6:8e:b8:87:dd:2a:fd:0c:9c: 43:61:b2:0b:c4:19:0b:ae:98:25:09:27:12:29:6f:8b:50:0f: 1b:dd:b8:b2:d1:28:90:b5:35:11:9b:70:8d:06:31:0c:ab:37: 57:cf:77:86:16:9a:51:28:f3:7d:d9:af:42:ef:d9:5c:cb:53: fb:45:d9:ec:d8:0a:c4:82:5b:f0:9e:2b:76:d6:41:4a:7d:45: 7f:79:a6:de:0d:5a:7c:66:55:44:5d:b0:e4:a0:17:57:9b:1a: 7d:0d:7a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUxMTAyMTgzMzU3WhcNMjUxMTA5MTgzMzU3WjAYMRYwFAYD VQQDEw02OTA3YTQxNi1iODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QT5YOEFpNowQlMgz/jxDf9ZvwbHbAaybb1HCGXeYZFP202kZDNnIt1kkUxZ UP0nFc4skE2wMExsviGAryiG9K7JaVvvJWMKern0JOtkuWjdJY9vSyU2xor31Mkg AFzxIsc9vhN71LLEMN88KZT3KvNFKGq6VzBxL/agp4QbVwe89rHEiDCNWsij93aG /B9UWkmL/BAxaHAKSIk24EKFtGn9amJKID7Jll7eeXTd+jS6WbRVZimEAVbztCbm A9humYsFHp4A9QdggfEvOollH4/BpsKP+/SpGJVfasJK/exk54t0IEIMhec3ETZ6 13VKYlZhdzK4lE2jJuUIc/lS3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrCLF7q psyONplXhIg6h+mXqa5dMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSZ2+1b8/ZcxI82t5PFFwz+Qpl4SavdsYO6kVYyo7JsO3yTmZed1XL a6Nt8HhzR9+8IK/G+kL8DEkhVmPCzirTE9prHRQtMpcJE0GN7i3z4LuQhx5PwvOt AzGIu4e9+YyC+6cpPh48qKxkR/6F0PFpF1xraX3PYEv+29dowg0YqthBpZ/0am1B 7PVZpOcI8m1QjgdoaW96TvPGjriH3Sr9DJxDYbILxBkLrpglCScSKW+LUA8b3biy 0SiQtTURm3CNBjEMqzdXz3eGFppRKPN92a9C79lcy1P7Rdns2ArEglvwnit21kFK fUV/eabeDVp8ZlVEXbDkoBdXmxp9DXr+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:36 2025 by rpki-client