$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: AE9IGte5vL+yJ+G2y8sGbCf0NY6C294COdMBAaIArrk= Subject key identifier: 8F:D8:71:C1:ED:93:AF:1A:41:2D:A0:98:B6:97:7C:7E:9F:71:05:70 Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 05CD Signing time: Sun 19 Oct 2025 00:48:19 +0000 Manifest this update: Sun 19 Oct 2025 00:48:19 +0000 Manifest next update: Sun 26 Oct 2025 00:48:19 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: JkgLs7Wih3kPhoA8GvTpPawU2NfcXqfJb0HowpKv7ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Oct 19 00:48:19 2025 GMT Not After : Oct 26 00:48:19 2025 GMT Subject: CN=68f43553-c8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:7e:73:83:aa:ab:1f:99:06:9a:8a:79:12: fe:6b:16:53:f4:b5:08:cc:b7:b0:a6:30:94:bf:82: 44:a3:73:10:74:23:92:0d:ad:8a:35:a3:11:d5:31: 85:74:5a:0d:66:b9:e7:5a:39:90:73:f3:cf:eb:69: e7:a5:e4:39:0c:6e:d1:7a:68:62:11:cd:e4:af:80: 56:f9:ed:ac:d1:8b:e5:fb:78:9b:33:0d:74:c8:92: a2:07:6b:09:af:a5:9f:7e:a8:81:54:72:a9:43:3d: 5b:48:4b:2c:ab:2f:19:22:52:6c:1a:45:f8:65:06: 98:6e:21:9a:2a:c9:0b:0c:f8:1c:0f:a8:2b:56:50: 58:27:6a:45:7a:11:5b:a2:af:38:2c:9d:a3:36:ce: d8:73:18:97:c9:c6:2e:3d:ef:6f:ff:8e:12:cc:27: 20:19:06:31:a9:5b:82:2e:0a:11:a1:a3:40:1f:6b: fd:85:6c:eb:3a:4b:34:48:7f:aa:a9:03:93:7a:58: 02:2e:32:34:e1:13:0f:2a:06:c3:75:96:29:fb:d2: 88:33:26:3b:7f:27:71:2f:9c:e9:80:ec:8f:c1:b1: 6f:ae:06:ec:d5:f2:93:7b:0f:04:df:08:c9:56:e5: d4:b5:04:ac:82:c9:2a:cb:3c:4a:c7:f7:7d:01:dd: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:71:C1:ED:93:AF:1A:41:2D:A0:98:B6:97:7C:7E:9F:71:05:70 X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b2:f9:4b:28:c8:ea:d4:68:1d:15:8b:a3:fa:9f:14:aa:d8: 6b:fe:d0:f5:d0:eb:06:f9:e7:8e:46:0e:8e:f1:b0:56:b1:4a: e4:cc:a5:8c:9a:39:a3:2a:dd:5a:c1:b0:c3:2a:0d:db:eb:f3: 6c:f1:96:e5:75:fb:73:53:4e:82:9c:fc:bc:7e:53:75:24:cd: 7c:dd:a8:5b:7c:3f:f4:bb:a1:80:d7:fd:06:cf:33:b3:06:dd: a1:fc:7a:0c:9b:ca:f4:a1:6c:72:e3:c1:6c:86:d7:d8:6f:d8: 1b:38:e0:15:c9:f2:49:9d:94:08:ba:e1:b4:a2:3f:02:44:8c: 15:e2:c1:08:71:40:1a:74:f9:9e:f6:da:13:fb:2f:5a:8f:06: e5:e9:ab:3f:c7:15:6d:a6:50:6e:5b:38:06:79:a8:3c:5c:9e: f5:b0:f1:53:3b:d9:21:6f:d2:3f:d7:3e:70:29:5d:c8:55:d9: ce:cc:e5:bb:1c:4c:5a:b2:3c:05:c0:e9:46:c1:c9:80:04:95: 60:79:50:ba:22:e0:09:5a:f2:81:4a:1b:db:34:5f:82:49:f9: 1b:26:1d:e9:90:73:68:50:31:09:f5:a2:e4:c7:68:b7:42:3e: 78:8e:67:9b:0b:8b:71:45:07:72:c7:e7:99:5e:dc:c6:aa:91: ee:c5:cc:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUxMDE5MDA0ODE5WhcNMjUxMDI2MDA0ODE5WjAYMRYwFAYD VQQDEw02OGY0MzU1My1jOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv35+c4Oqqx+ZBpqKeRL+axZT9LUIzLewpjCUv4JEo3MQdCOSDa2KNaMR1TGF dFoNZrnnWjmQc/PP62nnpeQ5DG7RemhiEc3kr4BW+e2s0Yvl+3ibMw10yJKiB2sJ r6WffqiBVHKpQz1bSEssqy8ZIlJsGkX4ZQaYbiGaKskLDPgcD6grVlBYJ2pFehFb oq84LJ2jNs7YcxiXycYuPe9v/44SzCcgGQYxqVuCLgoRoaNAH2v9hWzrOks0SH+q qQOTelgCLjI04RMPKgbDdZYp+9KIMyY7fydxL5zpgOyPwbFvrgbs1fKTew8E3wjJ VuXUtQSsgskqyzxKx/d9Ad1qMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/YccHt k68aQS2gmLaXfH6fcQVwMB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcsvlLKMjq1GgdFYuj+p8Uqthr/tD10OsG+eeORg6O8bBWsUrkzKWM mjmjKt1awbDDKg3b6/Ns8ZbldftzU06CnPy8flN1JM183ahbfD/0u6GA1/0GzzOz Bt2h/HoMm8r0oWxy48FshtfYb9gbOOAVyfJJnZQIuuG0oj8CRIwV4sEIcUAadPme 9toT+y9ajwbl6as/xxVtplBuWzgGeag8XJ71sPFTO9khb9I/1z5wKV3IVdnOzOW7 HExasjwFwOlGwcmABJVgeVC6IuAJWvKBShvbNF+CSfkbJh3pkHNoUDEJ9aLkx2i3 Qj54jmebC4txRQdyx+eZXtzGqpHuxcyL -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:14 2025 by rpki-client