$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: Fw+IGOH2MmxekKnhikGensbGAOZyDa8B70U9nDHirao= Subject key identifier: 31:1A:F3:F7:01:94:32:A2:D9:D7:43:DE:DE:FC:30:FB:AA:DB:AF:A5 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 0823 Signing time: Sun 02 Nov 2025 20:51:26 +0000 Manifest this update: Sun 02 Nov 2025 20:51:25 +0000 Manifest next update: Sun 09 Nov 2025 20:51:25 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: hNM7EvbJ5Nxc5wRh/mYdWNQaP9iYlWXWyB6UJsjLX2o=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Nov 2 20:51:25 2025 GMT Not After : Nov 9 20:51:25 2025 GMT Subject: CN=6907c44e-38c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:82:0c:40:b2:8b:c8:02:06:df:09:24:a2: 3d:4e:c8:b9:a7:46:a7:15:91:6d:12:d8:96:43:ed: 36:da:58:b3:84:d3:93:b1:1c:1b:11:f0:61:03:db: 56:4d:4e:fc:0a:d6:05:2e:e0:55:7c:66:e0:50:ca: 09:ec:f4:58:ec:4a:17:d2:5b:cd:fd:48:34:38:f4: 58:e2:18:33:37:e6:a4:4b:78:cc:05:44:0b:04:f5: 59:cb:d1:9f:32:76:c3:02:f1:76:f6:3a:ea:31:30: ed:30:11:de:51:b9:86:b1:9e:98:cf:7c:7a:6c:7b: 69:5a:78:51:90:59:48:a2:94:fb:db:6d:47:92:63: 73:4a:00:a7:a0:54:fb:d7:00:44:43:77:08:61:83: f7:31:16:de:40:2c:76:84:3d:ae:22:09:fb:d8:f0: 06:fb:dd:45:1f:2b:23:16:79:5a:a4:3a:2b:f6:cd: 45:5d:9d:1d:1f:b9:a8:38:3f:64:11:69:0f:4e:e5: 22:ff:b5:3b:e8:a7:7d:de:c1:50:7d:0f:51:65:cc: 89:50:44:6d:e6:44:e0:52:c7:ad:27:d8:4f:4e:09: a6:06:d9:c7:f8:55:c5:01:8e:c6:78:82:4d:ea:bd: 9b:11:91:bb:37:0a:86:d3:81:c7:fa:6c:2e:25:11: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1A:F3:F7:01:94:32:A2:D9:D7:43:DE:DE:FC:30:FB:AA:DB:AF:A5 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:84:a3:3e:37:dc:91:ee:0a:3d:cb:10:26:cc:56:22:9b:bf: fa:f7:39:c2:08:3f:a3:22:58:40:1c:1e:54:22:e6:1f:55:f8: 68:55:1c:60:a1:49:f0:58:a2:41:28:95:a9:9c:1b:20:03:8c: 9a:74:9c:67:93:f9:3e:2d:7c:70:23:d2:e2:e6:07:07:40:f8: 8f:7f:76:67:26:70:ce:0d:f1:0f:f6:e3:d4:78:ad:6b:2f:79: ee:17:ac:c3:7c:c6:b8:42:e3:57:5b:af:51:7f:2d:1c:e1:70: e3:78:f2:c8:41:0e:54:52:7e:5b:59:92:2f:8e:d9:55:78:a8: 62:de:05:99:3c:1d:11:31:fa:68:22:6e:4b:65:2b:b3:12:f8: 54:70:1e:fa:f7:26:4c:c4:44:1c:fa:d3:98:7f:00:89:94:53: 40:84:1b:71:46:4a:1b:f0:92:c8:2e:61:dd:fa:88:0a:59:0c: 6b:29:3f:e8:77:ca:c7:5c:fb:6e:a4:4d:f2:ca:2f:5c:e0:6d: ad:e0:02:f5:f9:60:99:c7:87:26:55:dd:65:6c:c5:a3:49:5c: bd:66:b5:fd:92:5d:db:db:dc:3d:8b:56:5a:32:71:78:21:24: f6:77:c8:c6:95:b8:f0:2f:26:a5:53:3d:c1:28:fc:03:f7:00: 86:f5:e4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUxMTAyMjA1MTI1WhcNMjUxMTA5MjA1MTI1WjAYMRYwFAYD VQQDEw02OTA3YzQ0ZS0zOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHOCDECyi8gCBt8JJKI9Tsi5p0anFZFtEtiWQ+022lizhNOTsRwbEfBhA9tW TU78CtYFLuBVfGbgUMoJ7PRY7EoX0lvN/Ug0OPRY4hgzN+akS3jMBUQLBPVZy9Gf MnbDAvF29jrqMTDtMBHeUbmGsZ6Yz3x6bHtpWnhRkFlIopT7221HkmNzSgCnoFT7 1wBEQ3cIYYP3MRbeQCx2hD2uIgn72PAG+91FHysjFnlapDor9s1FXZ0dH7moOD9k EWkPTuUi/7U76Kd93sFQfQ9RZcyJUERt5kTgUsetJ9hPTgmmBtnH+FXFAY7GeIJN 6r2bEZG7NwqG04HH+mwuJRGKWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEa8/cB lDKi2ddD3t78MPuq26+lMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhKM+N9yR7go9yxAmzFYim7/69znCCD+jIlhAHB5UIuYfVfhoVRxg oUnwWKJBKJWpnBsgA4yadJxnk/k+LXxwI9Li5gcHQPiPf3ZnJnDODfEP9uPUeK1r L3nuF6zDfMa4QuNXW69Rfy0c4XDjePLIQQ5UUn5bWZIvjtlVeKhi3gWZPB0RMfpo Im5LZSuzEvhUcB769yZMxEQc+tOYfwCJlFNAhBtxRkob8JLILmHd+ogKWQxrKT/o d8rHXPtupE3yyi9c4G2t4AL1+WCZx4cmVd1lbMWjSVy9ZrX9kl3b29w9i1ZaMnF4 IST2d8jGlbjwLyalUz3BKPwD9wCG9eTR -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:45 2025 by rpki-client