$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: HrOJ+o18E6Crn0p6GOJQwvF1RN6yLFeQJ65X8ZJEKZY= Subject key identifier: 7B:1F:A8:F6:C1:7F:B8:19:D2:E8:39:08:3A:88:F1:53:DB:E4:B8:6A Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05B5 Signing time: Sun 02 Nov 2025 23:06:51 +0000 Manifest this update: Sun 02 Nov 2025 23:06:50 +0000 Manifest next update: Sun 09 Nov 2025 23:06:50 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: U0W/CnpdGmA0z+n3awc7TCyo+WXXOLTiENgZlDH5YjQ=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Nov 2 23:06:50 2025 GMT Not After : Nov 9 23:06:50 2025 GMT Subject: CN=6907e40b-2a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:65:59:98:d7:f2:b3:3b:11:a9:a7:b7:86: 74:3b:a5:ea:a3:49:8f:df:a8:5c:b3:85:c7:82:7c: 48:32:61:4b:8a:70:a8:bd:f9:56:fa:da:b3:f7:a9: a1:24:46:09:54:4e:a5:ae:9b:60:93:fa:99:e2:49: e5:2a:a1:9f:d2:bf:28:c0:f7:0a:7f:47:23:bb:41: 02:23:1e:d3:a9:9c:07:93:a5:a3:1c:82:22:61:bb: 23:64:c6:c2:2e:58:85:02:a9:01:36:b4:f0:0e:3b: 16:8f:8e:5a:bf:51:fa:c0:5c:7f:93:c4:d1:5d:12: 6e:b5:03:8c:11:9a:5f:5f:9f:94:97:80:03:64:25: 84:b0:06:60:84:d7:fc:af:fb:28:d7:8f:da:a2:30: 0d:73:bf:2f:6b:71:ea:d2:85:c0:cd:19:7e:ba:1b: 03:54:5f:e7:d8:b2:e7:c4:a0:58:34:eb:10:c5:54: 91:83:ef:8f:2d:6e:6d:b9:e5:2f:ac:4f:0c:cf:d3: f9:b2:cc:5d:20:c6:02:2f:0f:32:09:bd:c5:75:91: 01:68:d1:9f:4a:b8:21:46:25:12:43:27:54:5c:cc: 47:35:80:82:0b:ca:62:be:b2:6a:17:d7:66:10:d5: 8b:dc:ae:86:b8:86:6f:78:9f:ac:8a:29:2e:2c:76: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:A8:F6:C1:7F:B8:19:D2:E8:39:08:3A:88:F1:53:DB:E4:B8:6A X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d4:51:5d:50:6c:a5:0e:5f:fc:41:db:c0:13:c0:a0:f3:b0: 1c:e5:a4:60:4a:11:97:21:0f:a8:4a:32:17:8b:01:b2:a6:58: 74:80:72:cb:8c:df:3d:09:0d:ac:fa:de:1f:b7:16:12:e9:1b: dd:ef:08:f5:7d:43:97:d7:6e:4e:07:36:98:35:ff:c7:f6:80: 4e:98:50:59:a9:ad:7b:f4:6d:c1:c0:2e:47:c1:03:e3:62:fc: 4e:ff:90:33:e0:58:35:69:c6:8e:14:2a:e9:ee:cf:38:45:5c: d0:ec:89:4d:01:fb:a9:35:40:f3:0c:3b:6a:c2:c2:77:95:ea: e1:ce:b6:aa:0c:c8:b6:8b:da:37:f4:6f:8d:b9:f3:65:a5:69: ae:09:e6:f7:f5:d6:4c:78:79:b4:7b:9d:46:e9:c7:cc:25:31: 1d:3e:91:24:63:02:96:42:1e:03:30:ff:f2:c8:28:ab:90:a0: a6:a6:49:36:a8:9f:4c:ce:65:2f:17:1e:5f:9d:77:1b:c7:ce: ea:df:03:47:9b:b1:02:b6:dc:15:68:e9:bc:eb:e5:df:87:80: a0:82:fb:46:d7:59:c6:f1:fe:bf:f6:11:38:46:ff:78:d3:9c: 4a:1f:25:97:87:02:8d:e0:5a:0a:52:d6:0d:6d:29:ab:8e:3e: fb:2d:78:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUxMTAyMjMwNjUwWhcNMjUxMTA5MjMwNjUwWjAYMRYwFAYD VQQDEw02OTA3ZTQwYi0yYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq15lWZjX8rM7Eamnt4Z0O6Xqo0mP36hcs4XHgnxIMmFLinCovflW+tqz96mh JEYJVE6lrptgk/qZ4knlKqGf0r8owPcKf0cju0ECIx7TqZwHk6WjHIIiYbsjZMbC LliFAqkBNrTwDjsWj45av1H6wFx/k8TRXRJutQOMEZpfX5+Ul4ADZCWEsAZghNf8 r/so14/aojANc78va3Hq0oXAzRl+uhsDVF/n2LLnxKBYNOsQxVSRg++PLW5tueUv rE8Mz9P5ssxdIMYCLw8yCb3FdZEBaNGfSrghRiUSQydUXMxHNYCCC8pivrJqF9dm ENWL3K6GuIZveJ+siikuLHbvFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsfqPbB f7gZ0ug5CDqI8VPb5LhqMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1FFdUGylDl/8QdvAE8Cg87Ac5aRgShGXIQ+oSjIXiwGyplh0gHLL jN89CQ2s+t4ftxYS6Rvd7wj1fUOX125OBzaYNf/H9oBOmFBZqa179G3BwC5HwQPj YvxO/5Az4Fg1acaOFCrp7s84RVzQ7IlNAfupNUDzDDtqwsJ3lerhzraqDMi2i9o3 9G+NufNlpWmuCeb39dZMeHm0e51G6cfMJTEdPpEkYwKWQh4DMP/yyCirkKCmpkk2 qJ9MzmUvFx5fnXcbx87q3wNHm7ECttwVaOm86+Xfh4CggvtG11nG8f6/9hE4Rv94 05xKHyWXhwKN4FoKUtYNbSmrjj77LXjp -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:33 2025 by rpki-client