$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft File: TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft (raw, json) Hash identifier: 9DpYyRoUy7/Z2+kIB4lpLhW2fNloSKJmHTdBAUZvPog= Subject key identifier: 12:89:7D:96:EA:20:F6:DF:16:4C:13:8E:86:40:81:F2:9A:52:79:57 Authority key identifier: 4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B Certificate issuer: /CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft Manifest number: CB Signing time: Mon 03 Nov 2025 05:43:53 +0000 Manifest this update: Mon 03 Nov 2025 05:43:52 +0000 Manifest next update: Mon 10 Nov 2025 05:43:52 +0000 Files and hashes: 1: TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl (hash: cW5HRqJ33mQmltCu//O9Vhq50W+/vMlyiVitPaZQfuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Validity Not Before: Nov 3 05:43:52 2025 GMT Not After : Nov 10 05:43:52 2025 GMT Subject: CN=69084119-ecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:7f:60:46:e7:77:dc:f5:00:0e:4f:09:48: 3b:6f:49:b7:6a:49:4a:64:83:4f:11:d6:04:95:12: 74:ef:0e:c1:d5:51:4e:b7:7f:3a:71:b1:0a:6d:e2: 35:2c:62:2d:45:af:79:bd:dd:18:43:f8:2c:19:83: d2:f7:5c:9e:56:04:51:73:f2:c3:12:08:3c:4a:04: ff:be:e1:c8:38:ca:c0:05:4f:00:91:88:7e:c1:54: bc:84:6b:1d:bc:ae:8a:80:fd:7b:c9:47:14:ed:d7: 5f:06:17:8b:d2:5b:86:d4:9a:90:70:c2:4c:28:a1: 9d:c9:ee:ef:89:20:5e:ae:da:ed:ba:74:a6:19:6e: 6e:d1:8a:e2:b1:83:c7:76:7a:3b:ae:6c:aa:dc:ab: 45:2b:36:59:b2:b3:8d:97:14:f7:9c:e3:5e:30:df: 8b:8e:0b:36:4c:e6:dc:57:5f:04:eb:e4:4e:a9:3c: 1d:44:35:b3:f3:22:21:7a:bd:78:48:08:92:5f:0a: 8b:5d:4f:a1:0a:57:9f:2d:4f:8f:1f:07:7e:2b:3f: e6:2d:1c:81:67:d1:e9:b4:2f:8e:c4:97:17:3f:9b: 25:e8:63:e0:b0:ea:0d:c7:c2:c2:01:78:35:da:ae: ec:e4:bd:a4:65:eb:3a:73:25:db:7e:9c:55:aa:81: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:7D:96:EA:20:F6:DF:16:4C:13:8E:86:40:81:F2:9A:52:79:57 X509v3 Authority Key Identifier: keyid:4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2d:d2:2a:06:9a:58:fa:48:0c:54:4c:84:47:55:c1:69:43: 82:21:d0:94:a0:72:c1:66:29:07:7d:d5:ae:3d:5a:dd:59:f9: 6f:03:15:c3:02:25:fb:1c:a7:e1:6d:44:47:f9:ed:22:dd:cf: f3:ff:cb:c9:9a:40:49:6b:b0:cd:61:db:3f:79:a9:be:72:6c: 4c:94:29:7e:dc:d7:43:fc:e0:be:67:63:52:aa:2c:7a:b3:21: 02:1d:fb:04:21:19:d2:78:8d:41:63:cd:8a:6d:e5:3b:37:ed: f1:39:9c:bc:1f:e9:9a:62:8e:16:87:42:c5:6f:0f:b3:2d:61: 04:70:c3:e4:df:5c:11:5b:4a:b3:83:7b:c6:20:10:90:20:66: 52:f7:4f:33:05:42:6b:8c:1b:75:f3:d7:99:90:03:5d:54:e3: c5:55:1c:74:b9:47:cb:d0:f1:88:cc:1b:25:be:65:8e:23:3f: c3:73:91:68:32:8a:d4:6d:38:0c:62:86:08:f1:ae:db:bd:0e: 6b:ff:67:48:f6:f3:d6:40:f9:07:78:81:15:ae:69:4a:49:ba: 31:59:08:cc:46:94:d1:e1:b6:ee:ce:14:b3:f4:12:d1:78:8e: 40:17:f1:5e:b7:eb:73:8e:75:37:c5:db:06:0e:26:2e:d7:51: 12:fc:40:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDRDQjUxRUU4N0M4MjJFOEU2Q0IwNTQyODRDQjA3RTRD RjI0RjkyMUIwHhcNMjUxMTAzMDU0MzUyWhcNMjUxMTEwMDU0MzUyWjAYMRYwFAYD VQQDEw02OTA4NDExOS1lY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt61/YEbnd9z1AA5PCUg7b0m3aklKZINPEdYElRJ07w7B1VFOt386cbEKbeI1 LGItRa95vd0YQ/gsGYPS91yeVgRRc/LDEgg8SgT/vuHIOMrABU8AkYh+wVS8hGsd vK6KgP17yUcU7ddfBheL0luG1JqQcMJMKKGdye7viSBertrtunSmGW5u0YrisYPH dno7rmyq3KtFKzZZsrONlxT3nONeMN+Ljgs2TObcV18E6+ROqTwdRDWz8yIher14 SAiSXwqLXU+hClefLU+PHwd+Kz/mLRyBZ9HptC+OxJcXP5sl6GPgsOoNx8LCAXg1 2q7s5L2kZes6cyXbfpxVqoH26QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKJfZbq IPbfFkwTjoZAgfKaUnlXMB8GA1UdIwQYMBaAFEy1Huh8gi6ObLBUKEywfkzyT5Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi85MkRGRkM3ODgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9UTFVlNkh5Q0xvNXNzRlFvVExCLVRQSlBr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMVWU2SHlDTG81c3NGUW9UTEItVFBKUGtocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi85MkRGRkM3ODgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9UTFVlNkh5Q0xv NXNzRlFvVExCLVRQSlBraHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcLdIqBppY+kgMVEyER1XBaUOCIdCUoHLBZikHfdWuPVrdWflvAxXD AiX7HKfhbURH+e0i3c/z/8vJmkBJa7DNYds/eam+cmxMlCl+3NdD/OC+Z2NSqix6 syECHfsEIRnSeI1BY82KbeU7N+3xOZy8H+maYo4Wh0LFbw+zLWEEcMPk31wRW0qz g3vGIBCQIGZS908zBUJrjBt189eZkANdVOPFVRx0uUfL0PGIzBslvmWOIz/Dc5Fo MorUbTgMYoYI8a7bvQ5r/2dI9vPWQPkHeIEVrmlKSboxWQjMRpTR4bbuzhSz9BLR eI5AF/Fet+tzjnU3xdsGDiYu11ES/EBM -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:44 2025 by rpki-client