$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: cTlleF15C5fZzut8bgW7sWIPCBTemr1skRf0tahkZY0= Subject key identifier: 2F:97:FA:BE:67:58:84:C7:A9:9A:98:A8:6C:46:26:FA:56:2B:B1:46 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 01E5 Signing time: Sun 19 Oct 2025 05:01:59 +0000 Manifest this update: Sun 19 Oct 2025 05:01:58 +0000 Manifest next update: Sun 26 Oct 2025 05:01:58 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: uQ9QZDQP7U9nbmCayOGTQl85//thH32Q6SnlThFXnT0=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Oct 19 05:01:58 2025 GMT Not After : Oct 26 05:01:58 2025 GMT Subject: CN=68f470c7-ec58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:f4:5f:9a:92:b3:d3:57:f7:b6:d4:ac:cb: bc:50:13:ab:06:49:96:f5:62:9d:36:3e:8f:58:1a: 6f:96:c0:8b:cd:37:18:ca:b1:08:df:81:7c:36:d3: f2:03:cc:15:20:5d:eb:ec:c7:3f:c7:69:3d:38:c8: 6d:14:bb:62:98:c9:d0:da:78:3c:fb:7a:f5:35:2c: f9:00:97:cc:1b:70:aa:48:5a:1b:6a:a3:e5:f6:98: c5:f3:63:fc:e6:46:59:4b:17:bb:2b:08:47:38:54: 6e:70:49:d3:d9:3d:7e:4a:65:09:87:0d:3b:80:33: 75:5c:5f:f5:a4:24:95:fc:e5:38:56:7a:01:14:47: a7:57:f8:98:fa:e2:82:4f:3e:59:d6:f4:d9:c4:b9: 53:b9:95:05:dc:fb:50:a4:b7:0a:30:de:9d:1b:87: 16:51:22:05:c5:7f:07:ff:67:97:e3:8e:ad:8e:58: 9f:03:c8:22:1c:93:29:94:1c:8a:82:ba:b2:2b:3b: 84:8e:6b:80:93:8d:1f:91:5a:fb:95:27:36:98:5b: 55:dd:c5:40:f1:23:13:f3:ae:03:1f:72:0c:f6:1c: d9:87:98:81:ed:51:88:7e:f1:21:fe:87:94:27:86: bd:dd:48:c0:01:89:49:8d:f7:22:c3:00:bb:1d:94: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:97:FA:BE:67:58:84:C7:A9:9A:98:A8:6C:46:26:FA:56:2B:B1:46 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b9:1f:f7:fb:58:d6:ab:39:0c:90:ed:b5:d6:0b:b7:c4:45: 5d:2c:79:fe:1d:16:a2:5a:5b:80:e7:9a:41:e3:8c:8d:ea:af: e3:49:10:75:62:ef:47:4a:ca:a8:9f:9f:ad:78:95:52:5f:5b: 85:d4:cf:52:f2:b5:00:22:84:25:a3:fb:09:49:0a:b5:99:56: d2:01:76:61:96:70:54:26:86:aa:61:8c:92:7b:7f:5c:51:38: 5e:0f:a5:f1:75:cd:e8:e9:4c:4b:08:e0:73:3f:2c:57:4b:86: 92:c5:62:96:9b:58:f4:4f:e9:1b:87:88:fb:46:e8:cd:3f:d5: 52:67:6b:f1:f7:3c:0e:f8:aa:9b:51:3c:50:9e:48:43:b1:64: c4:d8:26:cd:bd:38:9e:1d:24:ea:ef:db:df:b9:f4:4d:0a:de: a1:cd:4f:d2:60:f9:74:e5:09:8a:bf:9a:07:78:5f:fe:83:83: 12:6f:a0:c5:6d:93:f8:8d:66:6d:a6:82:d1:0f:fc:9e:64:fb: cc:f8:5e:b9:af:44:22:4d:98:ae:b4:0b:4d:44:fe:01:04:23: 17:c0:a4:21:a6:f4:22:d6:3a:17:22:ac:5e:b3:1f:57:40:9e: df:1e:42:9c:9f:cb:bd:4f:6f:a0:8c:a3:f9:00:51:61:f3:ff: 7d:eb:58:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUxMDE5MDUwMTU4WhcNMjUxMDI2MDUwMTU4WjAYMRYwFAYD VQQDEw02OGY0NzBjNy1lYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu/0X5qSs9NX97bUrMu8UBOrBkmW9WKdNj6PWBpvlsCLzTcYyrEI34F8NtPy A8wVIF3r7Mc/x2k9OMhtFLtimMnQ2ng8+3r1NSz5AJfMG3CqSFobaqPl9pjF82P8 5kZZSxe7KwhHOFRucEnT2T1+SmUJhw07gDN1XF/1pCSV/OU4VnoBFEenV/iY+uKC Tz5Z1vTZxLlTuZUF3PtQpLcKMN6dG4cWUSIFxX8H/2eX446tjlifA8giHJMplByK grqyKzuEjmuAk40fkVr7lSc2mFtV3cVA8SMT864DH3IM9hzZh5iB7VGIfvEh/oeU J4a93UjAAYlJjfciwwC7HZQptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+X+r5n WITHqZqYqGxGJvpWK7FGMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHuR/3+1jWqzkMkO211gu3xEVdLHn+HRaiWluA55pB44yN6q/jSRB1 Yu9HSsqon5+teJVSX1uF1M9S8rUAIoQlo/sJSQq1mVbSAXZhlnBUJoaqYYySe39c UTheD6Xxdc3o6UxLCOBzPyxXS4aSxWKWm1j0T+kbh4j7RujNP9VSZ2vx9zwO+Kqb UTxQnkhDsWTE2CbNvTieHSTq79vfufRNCt6hzU/SYPl05QmKv5oHeF/+g4MSb6DF bZP4jWZtpoLRD/yeZPvM+F65r0QiTZiutAtNRP4BBCMXwKQhpvQi1joXIqxesx9X QJ7fHkKcn8u9T2+gjKP5AFFh8/9961j6 -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:56 2025 by rpki-client