$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: sMbd8TTIpJ/miSnj89gcFQ7xSCAD87LhRaM/FbON1+0= Subject key identifier: 0C:7A:6A:82:4B:4F:F9:19:7B:CD:2C:FC:8F:1E:DD:54:C1:DB:CE:C6 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: 0107 Signing time: Sun 19 Oct 2025 07:56:41 +0000 Manifest this update: Sun 19 Oct 2025 07:56:40 +0000 Manifest next update: Sun 26 Oct 2025 07:56:40 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: r8QyWDHlTfyut7vNCT2ctHdT1e6coBzpNfDDXSXM8lk=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: Eb8AfFxkY2lunIzmPfp9ZyHAYk+RBb0a8BG4v3YCxDc=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: Bg47WQyQqPO6vhS9f39oGO32kv0x8D/332r6YxTMVPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Oct 19 07:56:40 2025 GMT Not After : Oct 26 07:56:40 2025 GMT Subject: CN=68f499b9-d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:2d:58:18:06:a2:eb:f3:86:28:48:5d:3f: 6f:e9:49:45:6c:04:90:9b:8f:4a:d8:4e:f9:d8:53: 41:0b:d7:8f:27:cd:ac:44:93:d0:55:12:fc:cd:e6: 2f:82:65:e8:57:91:ee:46:2d:82:0d:9b:0e:d0:6d: 60:64:52:40:9d:a1:a7:3a:33:6e:48:7f:b9:85:9c: 4a:e7:fb:df:4d:8b:3f:5f:dc:0f:77:dc:51:d3:52: e8:75:17:06:df:be:d2:1d:d3:e2:de:a7:1e:b0:b9: 0b:c9:f7:61:48:30:da:9b:f5:cf:5b:3b:aa:18:97: 7b:be:de:6d:08:57:9e:bb:74:0c:3a:f3:f8:12:14: 40:95:0a:bd:31:5c:aa:18:32:a0:32:55:07:66:aa: 85:cc:42:40:4c:bf:44:d1:89:03:3c:aa:9a:f6:73: 0c:e5:f3:32:83:5d:c0:99:b4:d7:f8:99:d1:37:ae: a6:82:55:dc:9f:94:11:74:18:09:40:17:1d:9c:66: 91:84:b1:eb:62:9d:16:b0:0e:32:20:fb:bf:44:fc: 9d:3b:4a:27:22:e0:03:9f:e6:35:fb:1e:26:89:56: 12:97:af:72:d5:ad:bd:c2:2e:aa:e4:39:d4:06:16: 32:af:13:b9:5d:eb:ef:13:e4:d0:ab:17:e3:c0:b1: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:6A:82:4B:4F:F9:19:7B:CD:2C:FC:8F:1E:DD:54:C1:DB:CE:C6 X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:3e:6c:0b:e2:18:83:57:fb:51:fa:0b:1d:a0:cc:c7:dc: a8:b3:73:cc:fe:37:6d:24:6f:04:6f:39:fd:5e:13:59:e2:ce: e5:ae:aa:89:c4:4b:c6:72:f5:a4:a2:12:73:30:12:12:69:8a: 8f:40:e6:9b:e1:97:c8:ce:3d:fe:15:cc:75:55:40:e3:7e:70: 7d:d9:09:bb:50:c5:06:27:3e:78:75:12:eb:f4:8d:b1:d2:22: 76:7b:00:01:f8:08:49:fc:f4:bf:df:79:54:0d:f9:47:70:10: 62:6a:15:c5:03:6a:19:e8:0b:bc:32:9a:0a:81:49:c0:f7:af: f7:cf:7c:35:ac:1e:5b:39:66:19:5d:c5:97:69:8f:8a:18:15: 70:43:2a:11:fd:47:01:d5:61:31:2f:25:83:4c:29:6a:30:7d: 09:5d:7d:62:18:18:9c:a8:b8:77:bc:fb:17:6f:bd:d3:a6:f5: 60:55:2c:64:06:75:53:f8:fe:ac:de:cc:3a:8d:c7:4c:2d:ca: c5:db:91:49:d9:c0:9d:e0:5a:26:08:34:00:a0:a2:ac:9a:4a: 49:8f:c6:ec:cd:cb:3e:8c:77:1d:c4:85:62:a9:0a:fe:f3:48: 5f:c5:e3:b5:dd:6d:bd:b7:0e:a1:8c:61:d0:01:b7:42:c6:f0: b4:a8:90:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUxMDE5MDc1NjQwWhcNMjUxMDI2MDc1NjQwWjAYMRYwFAYD VQQDEw02OGY0OTliOS1kNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEEtWBgGouvzhihIXT9v6UlFbASQm49K2E752FNBC9ePJ82sRJPQVRL8zeYv gmXoV5HuRi2CDZsO0G1gZFJAnaGnOjNuSH+5hZxK5/vfTYs/X9wPd9xR01LodRcG 377SHdPi3qcesLkLyfdhSDDam/XPWzuqGJd7vt5tCFeeu3QMOvP4EhRAlQq9MVyq GDKgMlUHZqqFzEJATL9E0YkDPKqa9nMM5fMyg13AmbTX+JnRN66mglXcn5QRdBgJ QBcdnGaRhLHrYp0WsA4yIPu/RPydO0onIuADn+Y1+x4miVYSl69y1a29wi6q5DnU BhYyrxO5XevvE+TQqxfjwLEkDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx6aoJL T/kZe80s/I8e3VTB287GMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmHD5sC+IYg1f7UfoLHaDMx9yos3PM/jdtJG8Ebzn9XhNZ4s7lrqqJ xEvGcvWkohJzMBISaYqPQOab4ZfIzj3+Fcx1VUDjfnB92Qm7UMUGJz54dRLr9I2x 0iJ2ewAB+AhJ/PS/33lUDflHcBBiahXFA2oZ6Au8MpoKgUnA96/3z3w1rB5bOWYZ XcWXaY+KGBVwQyoR/UcB1WExLyWDTClqMH0JXX1iGBicqLh3vPsXb73TpvVgVSxk BnVT+P6s3sw6jcdMLcrF25FJ2cCd4FomCDQAoKKsmkpJj8bszcs+jHcdxIViqQr+ 80hfxeO13W29tw6hjGHQAbdCxvC0qJAS -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:45 2025 by rpki-client