$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft File: TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json) Hash identifier: gfK+jvR9Uiu58b1Jcaydti8rlEZONEhmINpis0TeFPY= Subject key identifier: BD:96:27:F9:40:EF:30:87:5B:9B:CD:1E:AB:88:BA:94:8B:49:B6:D7 Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC Certificate issuer: /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft Manifest number: 099F Signing time: Tue 04 Nov 2025 20:07:47 +0000 Manifest this update: Tue 04 Nov 2025 20:07:46 +0000 Manifest next update: Tue 11 Nov 2025 20:07:46 +0000 Files and hashes: 1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: fcVEOmY43YR3qi5opjuZ2nc70yOVDrxt8fIu5n6VBzo=) 2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: byJpKNPjQF7b2JFAHp+3RTx6U3vbcPnlcOVf0jom37s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Validity Not Before: Nov 4 20:07:46 2025 GMT Not After : Nov 11 20:07:46 2025 GMT Subject: CN=690a5d12-b21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:dd:a9:fe:9e:c9:fb:65:ff:83:57:8d:a3: 4a:dc:7a:0a:db:1c:29:c8:75:5b:b7:23:e3:13:cb: b0:ca:b6:3f:7e:9b:68:66:5d:5b:28:a3:21:6c:c7: 72:0a:e2:e1:62:91:54:49:22:cd:72:c4:e9:c8:5e: 38:c7:86:dc:d8:75:16:e9:d4:5c:6a:bc:e2:c9:4e: 88:ad:f6:98:88:31:4f:4d:eb:0e:3d:fb:93:02:66: 97:c8:bf:c4:2e:6a:0b:8a:06:a9:1c:04:6f:7b:c9: 7d:5e:d6:6f:e5:f8:1d:6f:fe:c7:de:e2:44:7d:ea: dc:5f:a0:a9:32:5f:21:9c:1e:f1:0e:45:8d:54:72: 37:f1:20:69:62:61:62:9e:a3:7f:70:18:0d:58:88: e2:19:c5:9a:ce:34:5e:7c:b5:a2:14:37:cf:b3:bd: 05:80:ff:9b:e1:3b:0b:42:2c:a7:f9:94:00:2d:bb: 77:92:0b:27:d4:5d:ad:f1:c7:ef:ff:51:70:ee:c1: 09:23:7f:e7:d3:a3:78:08:08:65:68:91:fd:5c:2a: 8e:78:61:1d:90:4e:65:0c:0b:dc:33:ae:c9:f3:eb: 6d:3f:cc:61:03:8b:18:54:b3:35:19:a8:b6:41:20: 9c:68:0e:ba:28:e2:45:06:f3:f4:f0:55:1e:29:42: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:27:F9:40:EF:30:87:5B:9B:CD:1E:AB:88:BA:94:8B:49:B6:D7 X509v3 Authority Key Identifier: keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:dc:04:05:23:b1:f2:d9:8f:4f:28:85:da:47:08:02:03:f4: 01:17:c8:09:5e:6f:c7:9d:cf:a1:79:2e:be:d8:b9:43:a8:ec: 63:4f:fc:d8:7d:55:44:9a:e2:52:d1:ed:cf:8a:52:cc:46:a6: 6b:cb:9c:1f:cf:23:58:20:49:3a:bb:eb:fb:fd:7a:2e:35:d6: 90:c0:05:56:e8:8c:3b:16:b5:4c:5f:61:31:79:b3:a2:ad:d9: b7:49:46:4f:94:36:73:14:98:64:04:f9:f9:58:91:50:cb:36: 4d:78:a2:ff:35:9c:26:3b:55:38:ee:9b:48:22:b3:b4:01:61: 89:aa:7d:2a:82:a6:d9:75:0d:b8:ff:c8:fb:0d:78:da:df:09: 4a:c5:9e:46:8d:b3:93:d3:02:d6:69:81:53:f2:67:08:27:e2: 33:e1:07:6b:64:5b:b8:7e:57:f5:01:18:6a:0d:2c:36:77:7e: e3:cf:5d:8f:37:0f:12:b3:7e:6a:42:01:44:65:62:e2:a7:0d: 30:05:b8:4f:38:08:79:57:da:69:bb:ac:85:3b:46:17:52:3c: a9:46:8c:4e:ed:5e:0a:30:8c:b9:cd:eb:36:4a:3d:4b:c6:51: 2d:f6:35:8b:b7:3a:5f:00:e9:67:3c:4f:4a:ff:09:ba:92:39: d1:04:f6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0QzMxMTAvBgNVBAUTKDRFRjk0NzNCNTU0QUUxQTcyQkEwOTgxRkZFRkUxMzhF MkQ0ODBFQ0MwHhcNMjUxMTA0MjAwNzQ2WhcNMjUxMTExMjAwNzQ2WjAYMRYwFAYD VQQDEw02OTBhNWQxMi1iMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zfdqf6eyftl/4NXjaNK3HoK2xwpyHVbtyPjE8uwyrY/fptoZl1bKKMhbMdy CuLhYpFUSSLNcsTpyF44x4bc2HUW6dRcarziyU6IrfaYiDFPTesOPfuTAmaXyL/E LmoLigapHARve8l9XtZv5fgdb/7H3uJEfercX6CpMl8hnB7xDkWNVHI38SBpYmFi nqN/cBgNWIjiGcWazjRefLWiFDfPs70FgP+b4TsLQiyn+ZQALbt3kgsn1F2t8cfv /1Fw7sEJI3/n06N4CAhlaJH9XCqOeGEdkE5lDAvcM67J8+ttP8xhA4sYVLM1Gai2 QSCcaA66KOJFBvP08FUeKUK0tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2WJ/lA 7zCHW5vNHquIupSLSbbXMB8GA1UdIwQYMBaAFE75RztVSuGnK6CYH/7+E44tSA7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRDMy9DMjNGNzY3Qzk5 ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRhY3JvSmdmX3Y0VGppMUlE c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2bEhPMVZLNGFjcm9KZ2ZfdjRUamkxSURzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRDMy9DMjNGNzY3Qzk5ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRh Y3JvSmdmX3Y0VGppMUlEc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD3AQFI7Hy2Y9PKIXaRwgCA/QBF8gJXm/Hnc+heS6+2LlDqOxjT/zY fVVEmuJS0e3PilLMRqZry5wfzyNYIEk6u+v7/XouNdaQwAVW6Iw7FrVMX2ExebOi rdm3SUZPlDZzFJhkBPn5WJFQyzZNeKL/NZwmO1U47ptIIrO0AWGJqn0qgqbZdQ24 /8j7DXja3wlKxZ5GjbOT0wLWaYFT8mcIJ+Iz4QdrZFu4flf1ARhqDSw2d37jz12P Nw8Ss35qQgFEZWLipw0wBbhPOAh5V9ppu6yFO0YXUjypRoxO7V4KMIy5zes2Sj1L xlEt9jWLtzpfAOlnPE9K/wm6kjnRBPZN -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:11 2025 by rpki-client