$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: 0f/6j3gonjvjN7jqYqXwpeHcWzYLA6fe1tLC8Ukmio4= Subject key identifier: 48:EF:3F:93:85:30:69:07:31:D8:F8:87:93:00:03:62:CC:C5:1F:C2 Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0BB0 Signing time: Sun 02 Nov 2025 18:55:29 +0000 Manifest this update: Sun 02 Nov 2025 18:55:28 +0000 Manifest next update: Sun 09 Nov 2025 18:55:28 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: kDNpdRSrS3q4+oXOLwHWoSvEi8EWUXpuZvPRpx3X484=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: ACheYQYEXBleb6DdPHzkUhEDmzrchulLT+Neb0c5vYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: Nov 2 18:55:28 2025 GMT Not After : Nov 9 18:55:28 2025 GMT Subject: CN=6907a920-493a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:bf:47:7b:0b:1b:ce:8b:2a:94:27:b7:bd: da:7c:7e:21:25:e0:8d:31:20:49:9c:57:2d:b8:06: 24:5a:76:89:96:fc:3a:28:c9:5e:63:b8:ec:cc:ea: 47:ff:39:7d:f3:cf:21:8f:dc:99:c0:40:1b:26:c4: cd:1e:9e:53:56:c0:27:3b:ec:66:fd:8b:8f:9d:13: ff:19:0f:30:70:56:3f:a3:a6:93:7a:dc:86:15:3c: 12:20:90:18:09:10:f1:9a:23:a0:9c:21:22:51:3f: e3:ed:4a:5c:26:a6:58:84:ce:7a:40:47:3e:af:53: 3e:39:00:56:e9:85:fe:22:f7:3b:af:c8:b4:a2:61: 1d:bc:0a:f2:50:dc:cb:08:cb:dc:eb:e6:41:fe:0e: b9:ac:de:cb:46:57:92:a9:fe:d4:28:1c:6c:be:55: 37:4b:86:3a:e5:ea:bc:97:6f:4c:33:26:85:93:71: 93:ec:e1:70:9c:35:91:9a:a8:ae:36:81:9d:8b:18: 2b:33:f8:16:d1:cb:b5:fb:25:6a:3e:3a:e7:f5:b0: 78:78:42:51:6c:aa:60:9d:4b:89:81:47:c7:88:e5: b9:56:5a:ed:0e:79:38:77:43:54:06:76:6d:84:00: 10:dc:c6:a5:aa:e4:01:85:b0:c2:b2:a5:12:a6:8f: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EF:3F:93:85:30:69:07:31:D8:F8:87:93:00:03:62:CC:C5:1F:C2 X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:56:ff:54:d2:6e:bf:b1:d8:de:63:fc:e7:ed:c9:0d:3e: bb:7a:8c:18:93:f5:4d:0e:6c:88:a4:13:3d:02:49:bb:54:74: 2b:c2:b2:3b:ab:ee:82:9d:f6:de:cf:96:65:85:38:c5:cf:f9: 32:e2:e4:0d:61:94:74:6c:2e:26:9d:51:f1:be:83:37:4e:56: 8b:8d:2b:7c:53:0e:b0:17:7d:c9:c6:63:da:68:2f:8f:78:50: 67:4a:bd:9e:18:df:25:1e:a0:98:e9:0f:87:c3:e9:39:4d:33: 7d:5b:cc:4d:31:90:f4:9d:e5:f8:0d:4f:00:61:5c:b9:06:1b: fd:2a:cd:bc:3d:6d:11:3e:86:78:1d:8c:5f:bc:f6:92:87:fc: b7:c2:c7:f0:17:e8:6d:2e:d7:fe:44:ca:7b:18:05:57:0e:16: 94:fc:d1:70:a5:23:90:a1:41:7d:0f:c5:38:93:25:cd:18:ff: bd:10:ab:3c:40:0a:dc:c7:b2:3d:08:ce:bb:63:57:a8:f9:e9: ed:cd:e8:f2:ce:75:a4:91:b8:1f:91:38:a3:83:f5:cd:75:31: 3c:cb:d3:62:fa:03:50:48:50:69:53:4b:a8:06:23:82:aa:8a: e7:30:53:ee:bc:32:4c:ba:2e:46:66:66:56:e8:a6:48:5b:56: 74:97:65:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUxMTAyMTg1NTI4WhcNMjUxMTA5MTg1NTI4WjAYMRYwFAYD VQQDEw02OTA3YTkyMC00OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UC/R3sLG86LKpQnt73afH4hJeCNMSBJnFctuAYkWnaJlvw6KMleY7jszOpH /zl9888hj9yZwEAbJsTNHp5TVsAnO+xm/YuPnRP/GQ8wcFY/o6aTetyGFTwSIJAY CRDxmiOgnCEiUT/j7UpcJqZYhM56QEc+r1M+OQBW6YX+Ivc7r8i0omEdvAryUNzL CMvc6+ZB/g65rN7LRleSqf7UKBxsvlU3S4Y65eq8l29MMyaFk3GT7OFwnDWRmqiu NoGdixgrM/gW0cu1+yVqPjrn9bB4eEJRbKpgnUuJgUfHiOW5VlrtDnk4d0NUBnZt hAAQ3MalquQBhbDCsqUSpo+NzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjvP5OF MGkHMdj4h5MAA2LMxR/CMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjP1b/VNJuv7HY3mP85+3JDT67eowYk/VNDmyIpBM9Akm7VHQrwrI7 q+6Cnfbez5ZlhTjFz/ky4uQNYZR0bC4mnVHxvoM3TlaLjSt8Uw6wF33JxmPaaC+P eFBnSr2eGN8lHqCY6Q+Hw+k5TTN9W8xNMZD0neX4DU8AYVy5Bhv9Ks28PW0RPoZ4 HYxfvPaSh/y3wsfwF+htLtf+RMp7GAVXDhaU/NFwpSOQoUF9D8U4kyXNGP+9EKs8 QArcx7I9CM67Y1eo+entzejyznWkkbgfkTijg/XNdTE8y9Ni+gNQSFBpU0uoBiOC qornMFPuvDJMui5GZmZW6KZIW1Z0l2Up -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:25 2025 by rpki-client