$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: 2P21TwTPDFvqu+fOrxnbXEPXU+so6uZq2DtFX8QMPHs= Subject key identifier: E0:4E:D0:D3:9B:22:0E:FF:BB:C6:A5:11:3F:0E:39:A0:59:E9:1A:B3 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 08C5 Signing time: Tue 04 Nov 2025 20:32:58 +0000 Manifest this update: Tue 04 Nov 2025 20:32:57 +0000 Manifest next update: Tue 11 Nov 2025 20:32:57 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: XIbCd1iaKMgRU/BwNNeWB/YiU9muFYsQTSXVrw1ca+c=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: opv4DBbLy0U1nxAJSQ/FW4lgkGanCqSRXcsssLo5kGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Nov 4 20:32:57 2025 GMT Not After : Nov 11 20:32:57 2025 GMT Subject: CN=690a62fa-9c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:30:79:f9:2b:6a:4f:17:e7:95:de:0c:76: da:73:1c:02:36:02:20:a0:0a:74:86:89:fb:a5:fe: f9:74:16:fe:62:7b:84:23:cb:ed:74:63:6f:2f:ae: 0f:1a:c2:e0:9b:6a:4b:c0:93:fa:21:be:ea:a3:93: 9f:89:c8:c5:f0:cc:2c:32:2d:b7:3e:eb:0e:b8:fb: d1:d9:0c:9d:f2:55:a8:a8:e3:fa:b6:85:82:02:c7: 81:8a:eb:03:19:5c:b2:85:ad:80:98:35:0d:2e:bb: 30:e6:55:c6:4e:51:2b:07:62:52:48:d7:36:65:6d: 2c:18:d6:89:b1:af:bc:d7:8f:5d:a0:1a:1b:39:a3: 57:be:41:8f:b4:06:8c:c1:5b:56:2a:fa:13:5d:d1: 42:19:cf:5d:ab:29:55:9d:f5:0c:60:94:65:60:58: 89:95:f4:0a:3f:35:50:69:8f:60:ff:aa:35:a4:92: 7f:b2:00:d1:2a:04:ee:c9:ee:5c:e6:b5:72:f7:a9: e6:9e:f6:1e:c6:54:cf:20:5c:55:01:77:f4:6e:3e: 82:48:d4:d5:72:1d:78:00:63:b5:85:ed:5c:ad:07: 28:61:1d:01:d5:b3:5f:f9:f3:96:10:78:9a:18:3c: 79:81:dc:37:ff:8a:5f:68:b2:0f:e0:64:8f:aa:f0: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4E:D0:D3:9B:22:0E:FF:BB:C6:A5:11:3F:0E:39:A0:59:E9:1A:B3 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bc:42:09:75:df:e1:85:fc:12:1d:ea:52:50:3c:39:cf:79: 45:7a:1b:32:1d:b0:4a:4a:ab:d8:19:bf:43:31:85:e1:c4:57: f0:4b:fb:57:c7:b7:46:41:4c:4a:6b:57:f8:55:23:b8:ae:e2: 78:ab:38:c9:69:94:e9:c5:aa:48:80:20:e1:a5:f0:0c:bb:57: 88:ad:a3:8a:89:8a:6a:e4:6c:03:30:b1:95:dd:5a:c5:2d:05: 68:75:f2:04:ae:28:02:af:84:d6:a0:9b:7e:dd:42:8e:fa:fc: 51:a6:6a:76:24:cc:55:a9:d7:78:e1:e9:c4:2d:2b:71:d0:b6: ab:96:0b:31:e5:7f:e3:20:d9:b2:6b:42:0f:02:e8:0f:2f:4b: 8d:69:44:71:e2:3f:21:54:eb:4e:4c:9b:f9:e4:16:9d:3c:06: ea:f2:19:d2:38:b0:34:52:b0:65:a3:86:24:f4:24:52:c6:ff: 9a:7f:b1:91:b9:7e:f7:fe:6b:11:11:19:f7:c8:2c:b7:44:4f: 8c:a0:98:52:ca:b5:47:79:d0:1b:90:83:ce:42:94:8f:97:ee: 5b:f7:fb:d8:f4:68:6f:eb:12:4d:de:59:91:c9:02:dc:ba:13: 49:a0:09:87:dd:c7:2d:3d:e5:27:b2:f7:a1:d2:8d:e7:f6:f1: 16:86:54:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUxMTA0MjAzMjU3WhcNMjUxMTExMjAzMjU3WjAYMRYwFAYD VQQDEw02OTBhNjJmYS05YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwywwefkrak8X55XeDHbacxwCNgIgoAp0hon7pf75dBb+YnuEI8vtdGNvL64P GsLgm2pLwJP6Ib7qo5OficjF8MwsMi23PusOuPvR2Qyd8lWoqOP6toWCAseBiusD GVyyha2AmDUNLrsw5lXGTlErB2JSSNc2ZW0sGNaJsa+8149doBobOaNXvkGPtAaM wVtWKvoTXdFCGc9dqylVnfUMYJRlYFiJlfQKPzVQaY9g/6o1pJJ/sgDRKgTuye5c 5rVy96nmnvYexlTPIFxVAXf0bj6CSNTVch14AGO1he1crQcoYR0B1bNf+fOWEHia GDx5gdw3/4pfaLIP4GSPqvBxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBO0NOb Ig7/u8alET8OOaBZ6RqzMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbvEIJdd/hhfwSHepSUDw5z3lFehsyHbBKSqvYGb9DMYXhxFfwS/tX x7dGQUxKa1f4VSO4ruJ4qzjJaZTpxapIgCDhpfAMu1eIraOKiYpq5GwDMLGV3VrF LQVodfIErigCr4TWoJt+3UKO+vxRpmp2JMxVqdd44enELStx0Larlgsx5X/jINmy a0IPAugPL0uNaURx4j8hVOtOTJv55BadPAbq8hnSOLA0UrBlo4Yk9CRSxv+af7GR uX73/msRERn3yCy3RE+MoJhSyrVHedAbkIPOQpSPl+5b9/vY9Ghv6xJN3lmRyQLc uhNJoAmH3cctPeUnsveh0o3n9vEWhlRq -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:11 2025 by rpki-client