$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: cM6sA/0L8+OU8UTnhCrZBW0vAAvU82lapPZMdQVhPhw= Subject key identifier: 9C:51:F9:0A:8D:8D:82:5F:C5:2D:1B:54:0B:72:77:CB:94:AA:97:FA Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 31 Signing time: Sun 19 Oct 2025 11:13:43 +0000 Manifest this update: Sun 19 Oct 2025 11:13:43 +0000 Manifest next update: Sun 26 Oct 2025 11:13:43 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: jQVsqV+q1+LuGnENiHkNhhlXXhWCr7RpX9TbmBnQx/Y=) 2: 02272F2E896711F0B42EC968C4F9AE02.roa (hash: rm/ey7rx0cPi5GCGr0/kJPWz5Y07ETlHSyUfOYZc1xo=) 3: F060118A896511F085932767C4F9AE02.roa (hash: NflGB5cG6iDGEXLAgTMkx8GjKVI5zeUepUeNC6PCvow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Oct 19 11:13:43 2025 GMT Not After : Oct 26 11:13:43 2025 GMT Subject: CN=68f4c7e7-d6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:fd:33:3d:85:e8:98:d7:9b:29:62:e0:9c: 5d:c7:5d:cf:5e:1a:b5:ac:59:eb:cc:a0:a5:3f:c9: 20:c3:c2:d0:e5:66:95:2e:a4:a0:af:02:d0:5d:56: 03:ac:6e:0d:0f:f4:cd:b3:f8:c2:1c:90:fe:78:35: df:26:94:37:d2:e4:66:a4:e6:5f:5c:ca:8f:0b:19: a3:41:ce:13:d6:1d:af:0a:78:ed:99:0f:56:f9:ce: 39:25:a3:94:f8:81:5d:cb:87:13:53:99:ca:28:b8: ae:cc:e3:c6:b2:75:41:16:36:86:1f:4f:20:c4:88: 52:4e:8e:d7:74:b5:13:26:25:3e:f8:3b:06:6e:f9: f5:b5:e8:c2:8b:52:8b:b5:41:97:8a:51:ab:c9:a1: 11:72:c9:c7:1e:65:14:28:2b:bc:c3:82:e0:ab:df: 05:6b:61:89:b4:ce:b2:8e:75:a4:5e:37:e8:b5:88: 17:44:67:2b:39:fb:2e:cb:c3:47:10:f0:5b:01:c1: 84:1a:f4:60:f8:c5:dd:74:dd:02:d8:67:7a:69:b1: 0b:4c:6f:cf:97:36:83:24:30:c6:13:61:c4:d4:b6: 9f:32:a0:98:ca:9e:c7:31:3c:23:11:2f:a2:ee:d4: f3:ab:55:cb:a2:1b:34:cd:74:4b:6a:28:67:13:f6: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:51:F9:0A:8D:8D:82:5F:C5:2D:1B:54:0B:72:77:CB:94:AA:97:FA X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:55:06:fc:16:d4:df:fe:53:e7:2b:77:2e:0d:f4:10:e1:4d: 9a:d4:89:5e:b2:b4:51:50:d5:ca:03:4a:e0:46:73:aa:86:2f: fd:7c:7c:16:88:ac:b3:74:a2:c3:61:28:74:26:7a:03:15:10: a3:b6:1f:28:8f:e7:5a:ac:69:7a:3d:2a:78:cd:e1:52:ed:8a: a8:86:ff:df:da:03:5e:72:32:e3:a6:61:90:43:65:f9:c6:e6: e7:73:62:c3:c9:8c:b3:7d:74:d8:76:db:06:f3:b5:36:68:fc: fb:d6:5b:2a:2b:d6:22:90:ba:98:ab:3b:dd:9c:c1:f5:a6:c9: e1:30:22:9d:7b:71:4e:d8:90:12:46:ef:c4:55:34:1e:53:49: 98:32:a8:81:43:94:c3:d3:b3:5f:66:e6:46:34:4f:f7:21:41: b8:96:bc:7e:5f:3c:b5:e5:2b:8c:f1:c9:dc:0b:60:89:d3:7a: 05:57:03:0e:cb:22:7b:13:19:1c:6d:0e:a3:9a:c8:12:4d:a8: 1a:34:46:91:35:c3:69:68:43:8c:0a:36:a4:33:9b:c4:cf:9e: 47:43:78:4f:80:cf:2d:3d:26:d1:89:5e:2d:55:1d:51:83:ad: 8a:a0:1a:15:b4:d1:66:ee:b3:9b:81:d0:53:b8:cf:6d:15:06: 53:3a:9f:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTEwMTkxMTEzNDNaFw0yNTEwMjYxMTEzNDNaMBgxFjAUBgNV BAMTDTY4ZjRjN2U3LWQ2YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn0f0zPYXomNebKWLgnF3HXc9eGrWsWevMoKU/ySDDwtDlZpUupKCvAtBdVgOs bg0P9M2z+MIckP54Nd8mlDfS5Gak5l9cyo8LGaNBzhPWHa8KeO2ZD1b5zjklo5T4 gV3LhxNTmcoouK7M48aydUEWNoYfTyDEiFJOjtd0tRMmJT74OwZu+fW16MKLUou1 QZeKUavJoRFyycceZRQoK7zDguCr3wVrYYm0zrKOdaReN+i1iBdEZys5+y7Lw0cQ 8FsBwYQa9GD4xd103QLYZ3ppsQtMb8+XNoMkMMYTYcTUtp8yoJjKnscxPCMRL6Lu 1POrVcuiGzTNdEtqKGcT9mJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnFH5Co2N gl/FLRtUC3J3y5Sql/owHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFVBvwW1N/+U+crdy4N9BDhTZrUiV6ytFFQ1coDSuBGc6qGL/18fBaI rLN0osNhKHQmegMVEKO2HyiP51qsaXo9KnjN4VLtiqiG/9/aA15yMuOmYZBDZfnG 5udzYsPJjLN9dNh22wbztTZo/PvWWyor1iKQupirO92cwfWmyeEwIp17cU7YkBJG 78RVNB5TSZgyqIFDlMPTs19m5kY0T/chQbiWvH5fPLXlK4zxydwLYInTegVXAw7L InsTGRxtDqOayBJNqBo0RpE1w2loQ4wKNqQzm8TPnkdDeE+Azy09JtGJXi1VHVGD rYqgGhW00Wbus5uB0FO4z20VBlM6n8M= -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:51 2025 by rpki-client