$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: Ikk2yJq6eMIRDRILd89wr5j8Z56fj7OC0f89WejCH/o= Subject key identifier: 91:F8:DA:F1:4D:08:C5:D9:69:70:0F:C9:7F:29:7A:55:59:D6:25:D4 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0CA6 Signing time: Tue 04 Nov 2025 18:20:59 +0000 Manifest this update: Tue 04 Nov 2025 18:20:58 +0000 Manifest next update: Tue 11 Nov 2025 18:20:58 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: FYkMRd2zl82cXpz2Xri7ufwaEloHAS3wFO9bhdhesmo=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Nov 4 18:20:58 2025 GMT Not After : Nov 11 18:20:58 2025 GMT Subject: CN=690a440b-d499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:84:7a:7d:bf:6f:ad:36:f1:9c:37:b2:df: 58:19:8d:a5:01:dd:a8:e5:6b:db:4f:b8:7f:fc:3b: c2:4c:09:b9:5b:86:d1:43:0f:5b:e2:cd:a1:1b:ff: 96:11:27:74:dd:d2:2d:85:15:3a:a4:d3:65:e0:2e: b2:17:0e:1b:d1:66:7f:a0:14:b0:13:93:8d:e4:89: a7:63:d9:db:0d:49:d6:15:0d:32:13:a2:a3:61:51: 5e:79:b7:5a:61:3d:e4:78:b5:a5:0e:9b:f1:32:e1: 0b:33:42:d2:92:e3:7a:7c:7a:54:e4:52:3c:6b:58: 49:2f:eb:5b:b8:27:43:0d:92:7f:1f:a7:4d:b8:21: 4e:36:8d:e1:d2:b3:9b:cf:1f:77:1c:04:29:72:a9: b7:a1:a9:54:50:c2:23:c6:e2:3c:f7:4b:44:8c:35: b9:39:2b:22:89:63:7b:ae:91:fb:db:9f:f8:a7:be: 47:dc:b0:6a:59:32:93:32:5d:24:1d:d5:2f:a4:a2: b7:95:3a:5f:62:e3:79:04:77:66:bf:b4:aa:52:3d: 1b:bb:89:fc:d8:30:1e:2f:16:32:4b:6c:9c:ed:34: e7:2c:a1:a3:84:3b:bf:6f:62:58:c3:8c:5e:07:f8: 28:59:19:4a:95:10:40:0c:64:e4:00:7c:f5:6c:b0: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F8:DA:F1:4D:08:C5:D9:69:70:0F:C9:7F:29:7A:55:59:D6:25:D4 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:6d:34:4b:54:83:d9:60:b2:55:7f:0d:0c:36:0d:ce:c0: e1:34:2e:e7:69:21:6c:ac:b8:88:3f:1b:d2:b6:ab:b2:e9:7e: 90:bc:e7:5a:8d:4d:ed:ac:64:5a:f2:ab:e3:c7:70:3a:2e:aa: 3f:c2:c6:d1:d5:6f:50:1d:21:85:dd:a7:05:ee:5a:64:41:b4: 28:e3:e9:c7:13:82:08:d3:af:70:e2:ab:eb:d3:e4:37:c5:a8: 52:40:ee:96:81:aa:7e:bd:1a:dc:b8:69:44:92:0d:98:18:f0: 7b:91:9b:04:c9:c8:d7:1d:12:e8:44:0d:a5:26:98:5f:1b:10: b5:5e:e3:c1:ff:4f:0b:2b:33:7c:fc:b3:6a:af:8f:9d:86:70: c8:0e:6b:45:50:a9:7e:c9:56:56:ba:f8:b3:03:12:e6:f3:61: b1:92:e9:72:7f:46:43:dc:8e:9d:27:74:7d:44:71:88:0b:1f: e1:e2:79:b6:c0:0a:26:ed:79:01:6b:2b:2a:a3:44:ea:2c:e4: 45:6b:fd:a0:8a:ca:80:8b:5b:d6:5a:14:ee:3f:bf:4f:cb:94: 4c:87:e6:59:d0:59:51:e0:7d:70:78:9a:95:3f:04:1e:fc:e5: 92:a5:9e:af:97:99:47:f1:5f:5c:81:d4:73:07:d2:6d:aa:ab: 49:20:bf:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUxMTA0MTgyMDU4WhcNMjUxMTExMTgyMDU4WjAYMRYwFAYD VQQDEw02OTBhNDQwYi1kNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW2Een2/b6028Zw3st9YGY2lAd2o5WvbT7h//DvCTAm5W4bRQw9b4s2hG/+W ESd03dIthRU6pNNl4C6yFw4b0WZ/oBSwE5ON5ImnY9nbDUnWFQ0yE6KjYVFeebda YT3keLWlDpvxMuELM0LSkuN6fHpU5FI8a1hJL+tbuCdDDZJ/H6dNuCFONo3h0rOb zx93HAQpcqm3oalUUMIjxuI890tEjDW5OSsiiWN7rpH725/4p75H3LBqWTKTMl0k HdUvpKK3lTpfYuN5BHdmv7SqUj0bu4n82DAeLxYyS2yc7TTnLKGjhDu/b2JYw4xe B/goWRlKlRBADGTkAHz1bLDR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH42vFN CMXZaXAPyX8pelVZ1iXUMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8j200S1SD2WCyVX8NDDYNzsDhNC7naSFsrLiIPxvStquy6X6QvOda jU3trGRa8qvjx3A6Lqo/wsbR1W9QHSGF3acF7lpkQbQo4+nHE4II069w4qvr0+Q3 xahSQO6Wgap+vRrcuGlEkg2YGPB7kZsEycjXHRLoRA2lJphfGxC1XuPB/08LKzN8 /LNqr4+dhnDIDmtFUKl+yVZWuvizAxLm82Gxkulyf0ZD3I6dJ3R9RHGICx/h4nm2 wAom7XkBaysqo0TqLORFa/2gisqAi1vWWhTuP79Py5RMh+ZZ0FlR4H1weJqVPwQe /OWSpZ6vl5lH8V9cgdRzB9JtqqtJIL9j -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:33 2025 by rpki-client