$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: VnrewM8GOa4ANcYaf6tOg2701gKzfk2Bz8nTi9KhgwI= Subject key identifier: 63:06:28:DD:C2:4A:AC:CF:C8:5B:EF:72:1B:DD:FE:53:93:C7:6D:10 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: B5 Signing time: Wed 05 Nov 2025 06:15:38 +0000 Manifest this update: Wed 05 Nov 2025 06:15:37 +0000 Manifest next update: Wed 12 Nov 2025 06:15:37 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: zaPXYZl1bNvPuXD9A/wEOvdoTEOEFY7fKfZOTPDa6yI=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Nov 5 06:15:37 2025 GMT Not After : Nov 12 06:15:37 2025 GMT Subject: CN=690aeb89-72b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:84:d6:a1:7f:d8:92:38:ed:bf:72:d6:f9: de:30:c3:25:99:b9:58:22:e1:a9:fa:b2:df:4e:6b: 4c:91:68:3c:06:e3:39:d3:95:bc:e3:e9:84:94:ce: a7:84:05:53:fd:d5:6f:c6:83:8b:81:f3:20:94:a5: 0f:94:e3:3e:9d:1d:a3:29:40:fd:57:6d:d2:11:f5: 77:9e:04:81:1a:a5:a5:a5:1f:89:73:b2:4f:5a:6a: 5e:56:ab:f3:5a:96:19:23:9e:5d:95:98:5a:9c:43: 9a:73:44:d1:13:28:45:7c:07:c0:67:e0:a9:4e:ee: 0b:f5:b7:5d:bc:54:ca:31:68:76:6a:71:38:cd:ef: 48:50:83:c4:bc:90:48:a3:7b:b6:2d:17:4c:cf:c9: 48:db:a5:44:a8:3d:10:05:c7:fb:79:d4:34:79:f1: 62:fc:ac:f1:c2:fc:f5:e2:08:04:46:f2:3f:a6:df: 81:b1:05:6d:ab:43:ef:8c:34:be:36:a6:25:72:1b: 13:56:eb:fb:58:3e:9f:c8:48:23:82:b8:a9:b8:c4: 39:c9:fa:87:5d:ec:b2:0e:fd:e8:dd:1f:bb:e9:a9: f6:bb:3c:8a:8a:d7:5c:1b:1f:42:04:52:54:c7:44: a5:ed:bd:18:49:ea:5f:4e:26:d4:ac:a7:5c:da:15: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:06:28:DD:C2:4A:AC:CF:C8:5B:EF:72:1B:DD:FE:53:93:C7:6D:10 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:70:ab:91:f6:c8:37:f2:dc:00:46:b6:1c:ac:4a:00:45:ff: d4:25:2b:62:ef:52:fc:90:fa:cc:e9:d9:e9:ff:74:53:3f:cf: b3:62:bd:dd:dd:8b:36:2e:66:04:50:d0:64:7b:44:6a:83:65: db:c6:97:fd:6d:d6:9a:ab:e4:d2:03:01:b9:5c:5c:dd:98:0a: 03:63:72:78:db:c6:d5:fe:58:56:2e:f3:a4:5a:cb:d7:67:73: 68:71:0d:18:bb:9a:c9:b5:3a:43:0b:4e:cc:1b:3c:62:c2:fc: a0:fa:8f:ab:ca:e4:a5:62:bc:c3:3c:05:44:e9:e6:24:d7:56: e8:fe:60:59:2f:b1:de:6a:92:00:c6:29:b9:8f:fa:06:ef:8b: 6e:1d:8f:c4:3b:47:4a:5d:1f:27:c1:12:9a:90:ea:02:37:0d: 98:c3:80:48:35:62:ec:13:49:2d:09:a4:12:27:fa:23:85:20: 59:74:1a:34:3f:41:f8:4f:0a:cb:a7:1a:31:47:ef:89:ea:a3: 3f:cc:b2:8a:3f:ea:bc:6d:c8:2f:89:d3:27:98:51:5c:2e:df: 90:bc:7c:30:68:14:d2:6b:40:dd:6d:69:17:db:dd:c9:0c:fe: d7:96:9d:15:b7:ef:9f:71:df:54:ba:f4:9b:ea:26:2e:7b:86: 58:4a:ed:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUxMTA1MDYxNTM3WhcNMjUxMTEyMDYxNTM3WjAYMRYwFAYD VQQDEw02OTBhZWI4OS03MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CeE1qF/2JI47b9y1vneMMMlmblYIuGp+rLfTmtMkWg8BuM505W84+mElM6n hAVT/dVvxoOLgfMglKUPlOM+nR2jKUD9V23SEfV3ngSBGqWlpR+Jc7JPWmpeVqvz WpYZI55dlZhanEOac0TREyhFfAfAZ+CpTu4L9bddvFTKMWh2anE4ze9IUIPEvJBI o3u2LRdMz8lI26VEqD0QBcf7edQ0efFi/Kzxwvz14ggERvI/pt+BsQVtq0PvjDS+ NqYlchsTVuv7WD6fyEgjgripuMQ5yfqHXeyyDv3o3R+76an2uzyKitdcGx9CBFJU x0Sl7b0YSepfTibUrKdc2hUMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMGKN3C SqzPyFvvchvd/lOTx20QMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDcKuR9sg38twARrYcrEoARf/UJSti71L8kPrM6dnp/3RTP8+zYr3d 3Ys2LmYEUNBke0Rqg2Xbxpf9bdaaq+TSAwG5XFzdmAoDY3J428bV/lhWLvOkWsvX Z3NocQ0Yu5rJtTpDC07MGzxiwvyg+o+ryuSlYrzDPAVE6eYk11bo/mBZL7HeapIA xim5j/oG74tuHY/EO0dKXR8nwRKakOoCNw2Yw4BINWLsE0ktCaQSJ/ojhSBZdBo0 P0H4TwrLpxoxR++J6qM/zLKKP+q8bcgvidMnmFFcLt+QvHwwaBTSa0DdbWkX293J DP7Xlp0Vt++fcd9UuvSb6iYue4ZYSu2n -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:21 2025 by rpki-client