$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: JrPCoxAh/R9WluK24Vg/pOm4wQNdI+d9+9oY+6egTmw= Subject key identifier: 19:E0:FB:F1:B5:6F:69:B8:6A:1A:FF:DF:79:B9:7B:D2:56:4B:B6:E7 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 05BB Signing time: Tue 04 Nov 2025 23:12:26 +0000 Manifest this update: Tue 04 Nov 2025 23:12:25 +0000 Manifest next update: Tue 11 Nov 2025 23:12:25 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: fGsCl3kgPaD3xqvwuEsQyNvUUrfQJFhHtwfBL3VGRxM=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Nov 4 23:12:25 2025 GMT Not After : Nov 11 23:12:25 2025 GMT Subject: CN=690a885a-3e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:79:38:6a:d9:30:b0:49:91:b7:2b:0e:56: 93:b2:57:b1:f8:44:a7:1e:b8:76:9b:3b:5a:9f:69: af:54:4a:d9:38:f0:28:8e:56:48:77:24:a8:d1:b7: 41:1c:8c:fe:6f:0b:c5:9c:44:09:de:27:0f:93:16: 0e:fc:f5:d5:69:35:9e:ea:06:7d:29:5f:f1:9e:7b: 87:d5:65:2a:27:34:76:a6:73:9c:fc:fb:cd:42:aa: e8:f0:0f:f6:79:1e:97:a3:1e:e5:49:ad:6f:44:53: fd:08:e2:e7:c8:d9:35:95:4e:e1:55:17:72:83:b7: 4d:02:7e:e9:20:2b:0d:7d:fd:b1:86:ce:75:02:10: 25:4d:ca:96:f2:db:75:5f:41:ad:df:36:33:db:f8: 25:7e:e1:4a:ff:ed:05:5a:f7:82:e9:ae:81:37:7f: 2e:bf:20:11:c1:49:5d:7c:f3:42:fd:28:ee:c6:2b: 69:1c:19:83:54:a0:5a:0f:4e:fe:10:c7:2b:72:53: 54:9b:0f:63:c9:d9:c9:14:ef:f3:fb:79:85:97:54: a0:bc:dd:cd:af:59:2d:c0:84:7b:07:69:fe:fc:e7: 10:45:9b:55:84:21:a0:93:3b:91:93:4a:ae:37:b6: 9c:88:12:5e:69:ef:33:fd:6b:1d:b1:a5:2e:7b:6a: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E0:FB:F1:B5:6F:69:B8:6A:1A:FF:DF:79:B9:7B:D2:56:4B:B6:E7 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7a:6e:92:06:41:17:5a:1f:84:99:f4:67:24:f5:d9:00:a5: 3d:87:e7:f2:aa:19:67:4d:12:09:9a:0f:ff:0f:5e:91:01:b7: 82:6e:4e:db:25:ed:df:40:7d:b8:18:5f:00:16:b6:3b:66:e5: ca:29:c9:88:53:2f:91:f5:90:81:c3:f2:84:e2:41:d7:f6:bb: 58:63:ef:bf:0e:70:9f:d9:db:86:60:9f:3a:01:d6:e1:e5:83: 70:03:5e:05:18:58:b9:6d:88:dd:57:15:2f:f4:48:de:96:15: 9f:60:41:17:93:09:67:56:2e:a5:fe:a7:5d:da:2f:be:64:38: 21:d1:e3:1c:e2:71:1c:3c:b2:83:7d:33:9f:ca:ac:3b:cd:d1: 74:95:52:1a:e4:3e:63:6b:25:e4:9a:50:7b:1a:b2:02:9d:ff: 6b:a0:76:15:16:87:03:39:bb:da:92:e5:69:20:c9:32:eb:93: 0c:ce:94:bc:e9:bd:9e:f0:e0:41:36:8f:44:7a:cb:9e:32:df: 79:fe:34:09:26:d4:cf:cf:e8:a3:fa:d6:5b:fa:07:dc:d3:7d: 86:3a:3b:0d:37:b8:a2:df:e7:fb:e2:07:5c:04:73:a0:50:79: 82:f3:16:43:29:bd:e1:dd:01:49:ac:8f:bd:11:2b:5a:58:56: 83:3c:b1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUxMTA0MjMxMjI1WhcNMjUxMTExMjMxMjI1WjAYMRYwFAYD VQQDEw02OTBhODg1YS0zZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ95OGrZMLBJkbcrDlaTslex+ESnHrh2mztan2mvVErZOPAojlZIdySo0bdB HIz+bwvFnEQJ3icPkxYO/PXVaTWe6gZ9KV/xnnuH1WUqJzR2pnOc/PvNQqro8A/2 eR6Xox7lSa1vRFP9COLnyNk1lU7hVRdyg7dNAn7pICsNff2xhs51AhAlTcqW8tt1 X0Gt3zYz2/glfuFK/+0FWveC6a6BN38uvyARwUldfPNC/SjuxitpHBmDVKBaD07+ EMcrclNUmw9jydnJFO/z+3mFl1SgvN3Nr1ktwIR7B2n+/OcQRZtVhCGgkzuRk0qu N7aciBJeae8z/WsdsaUue2r+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBng+/G1 b2m4ahr/33m5e9JWS7bnMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfem6SBkEXWh+EmfRnJPXZAKU9h+fyqhlnTRIJmg//D16RAbeCbk7b Je3fQH24GF8AFrY7ZuXKKcmIUy+R9ZCBw/KE4kHX9rtYY++/DnCf2duGYJ86Adbh 5YNwA14FGFi5bYjdVxUv9EjelhWfYEEXkwlnVi6l/qdd2i++ZDgh0eMc4nEcPLKD fTOfyqw7zdF0lVIa5D5jayXkmlB7GrICnf9roHYVFocDObvakuVpIMky65MMzpS8 6b2e8OBBNo9EesueMt95/jQJJtTPz+ij+tZb+gfc032GOjsNN7ii3+f74gdcBHOg UHmC8xZDKb3h3QFJrI+9EStaWFaDPLG8 -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:47 2025 by rpki-client