$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json) Hash identifier: Dm+AU2NIlmKcT0yZjOrCby6h0J4zsMxJfp0732uJMRY= Subject key identifier: 19:07:AA:2E:A3:5B:DF:6C:BF:DF:3E:15:49:2B:82:0B:66:78:D9:F1 Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53 Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft Manifest number: 0AE8 Signing time: Tue 04 Nov 2025 19:30:28 +0000 Manifest this update: Tue 04 Nov 2025 19:30:27 +0000 Manifest next update: Tue 11 Nov 2025 19:30:27 +0000 Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: XIq61301ChbGwV3A4L2fDIRJwYooFgRoh/gmZ33oI7U=) 2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: ZDs2CUVgufghQf+Lc8A/Bot+97mQvkMQ7xGXz6nIftU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53 Validity Not Before: Nov 4 19:30:27 2025 GMT Not After : Nov 11 19:30:27 2025 GMT Subject: CN=690a5454-aaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:0b:05:f4:16:5b:24:d0:90:da:b0:29:cc: 3f:b8:aa:82:5f:f3:7d:f9:fc:04:8b:e2:61:7a:46: 6a:d4:ee:1f:ce:c4:e8:9c:2e:32:cd:c1:ff:9a:e5: af:33:2c:01:cc:93:9a:81:d2:d6:24:38:ce:e8:b1: 34:91:80:4a:63:a7:1a:96:40:c3:6c:b3:ef:be:0a: b1:71:83:86:79:84:b1:cf:59:a8:01:41:5c:7d:e1: 87:35:21:3e:63:4f:b6:4c:53:c7:35:2c:24:db:f3: eb:8c:43:68:04:56:1a:23:7d:87:4d:ba:c5:7f:d3: a2:91:29:f7:4a:ee:9c:31:a7:bd:fb:c0:61:3f:23: 1c:ab:29:b0:53:02:7b:9c:8e:10:06:97:21:76:84: 1a:76:48:09:55:88:a1:6b:3b:5e:f3:d2:41:78:d9: b2:d3:53:f6:0f:52:76:22:44:fb:30:83:cb:1c:74: 8f:f8:40:b4:53:be:5f:f6:fa:1f:d1:ba:a1:48:b5: 83:00:1e:de:92:ef:3d:86:ba:0d:c2:ce:4e:cb:73: 3a:51:f3:8e:83:50:77:9b:c7:b0:ad:06:43:b2:f3: cf:64:98:a9:32:fa:d8:f9:f8:bb:2b:1a:61:73:fe: 85:5a:6e:77:a8:fa:1f:7b:72:64:c0:a9:46:33:f4: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:AA:2E:A3:5B:DF:6C:BF:DF:3E:15:49:2B:82:0B:66:78:D9:F1 X509v3 Authority Key Identifier: keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:29:19:20:f7:f4:ec:04:2b:6e:6e:35:c3:82:25:86:f2:69: 6e:68:e3:f8:74:ec:40:d3:69:85:f6:d0:fd:d6:ae:51:e0:0a: de:99:e5:69:f7:12:d8:9e:fe:91:4e:4f:f5:72:de:2e:1b:b4: 07:e0:0d:86:8c:82:b9:ac:f5:06:5a:92:d3:e0:46:d2:9c:07: 42:7e:ff:84:9c:53:bf:ef:bc:29:4a:d4:bf:7a:bf:f0:2a:8b: 9a:7c:37:eb:e2:19:1d:ea:d8:5b:2c:24:69:dc:67:d7:a9:8d: ce:91:5b:53:4f:38:0a:04:29:b2:17:dd:1f:a4:94:23:03:83: c1:8d:60:2b:a1:f2:b6:da:2e:e9:24:1f:be:ee:df:32:7f:21: 18:da:1b:47:1f:04:84:85:46:e7:26:d3:f0:98:3b:a3:02:1f: 2f:e0:39:4d:1b:a1:3b:02:7e:3e:3a:69:88:ca:d1:9d:d8:a2: e7:b7:87:f9:dd:0c:38:85:69:04:1d:0b:5f:73:f2:dd:8a:1b: 84:b1:c5:c1:7b:c4:fd:a4:24:47:a5:a3:2e:35:b7:7e:54:b4: 83:84:dd:57:79:f0:8f:b5:7f:a8:3b:04:0a:e7:68:18:18:c4: c7:fb:47:c8:50:1c:48:fa:3f:3b:f0:1a:70:eb:89:c5:af:c5: 8f:80:53:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwNEQxMTAvBgNVBAUTKDRFQjlDQzRBMzg3N0IzRkY5RDQwQkMxQkIzRTYwQzkw QURGQUNENTMwHhcNMjUxMTA0MTkzMDI3WhcNMjUxMTExMTkzMDI3WjAYMRYwFAYD VQQDEw02OTBhNTQ1NC1hYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOsLBfQWWyTQkNqwKcw/uKqCX/N9+fwEi+JhekZq1O4fzsTonC4yzcH/muWv MywBzJOagdLWJDjO6LE0kYBKY6calkDDbLPvvgqxcYOGeYSxz1moAUFcfeGHNSE+ Y0+2TFPHNSwk2/PrjENoBFYaI32HTbrFf9OikSn3Su6cMae9+8BhPyMcqymwUwJ7 nI4QBpchdoQadkgJVYihazte89JBeNmy01P2D1J2IkT7MIPLHHSP+EC0U75f9vof 0bqhSLWDAB7eku89hroNws5Oy3M6UfOOg1B3m8ewrQZDsvPPZJipMvrY+fi7Kxph c/6FWm53qPofe3JkwKlGM/QFIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkHqi6j W99sv98+FUkrggtmeNnxMB8GA1UdIwQYMBaAFE65zEo4d7P/nUC8G7PmDJCt+s1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTA0RC8yMUMyQTA4QzU4 NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3NfLWRRTHdicy1ZTWtLMzZ6 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rybk1Tamgzc18tZFFMd2JzLVlNa0szNnpWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTA0RC8yMUMyQTA4QzU4NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3Nf LWRRTHdicy1ZTWtLMzZ6Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVKRkg9/TsBCtubjXDgiWG8mluaOP4dOxA02mF9tD91q5R4AremeVp 9xLYnv6RTk/1ct4uG7QH4A2GjIK5rPUGWpLT4EbSnAdCfv+EnFO/77wpStS/er/w KouafDfr4hkd6thbLCRp3GfXqY3OkVtTTzgKBCmyF90fpJQjA4PBjWArofK22i7p JB++7t8yfyEY2htHHwSEhUbnJtPwmDujAh8v4DlNG6E7An4+OmmIytGd2KLnt4f5 3Qw4hWkEHQtfc/LdihuEscXBe8T9pCRHpaMuNbd+VLSDhN1XefCPtX+oOwQK52gY GMTH+0fIUBxI+j878Bpw64nFr8WPgFO1 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client