$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: DNPVctyD4kfhzdJrHAfRTxmQmjTgm9DbWAhlQ84KAJg= Subject key identifier: 57:5C:58:98:F9:69:23:29:8F:67:B3:F4:EB:2D:32:06:B1:00:E5:2A Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 6F Signing time: Sun 19 Oct 2025 10:17:43 +0000 Manifest this update: Sun 19 Oct 2025 10:17:42 +0000 Manifest next update: Sun 26 Oct 2025 10:17:42 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: AKfLRjb1/Oqz+lDrej81uaKGm7UcrFyQ6vYX+3uzdj0=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Oct 19 10:17:42 2025 GMT Not After : Oct 26 10:17:42 2025 GMT Subject: CN=68f4bac7-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:0e:5a:cc:51:ef:7c:9e:0c:73:ce:5a:02: 5a:a5:4b:62:5f:12:ba:18:22:d3:cb:b3:cc:be:6e: 86:4d:84:3f:d8:32:aa:ab:72:2e:ca:6a:5b:04:37: b7:5f:eb:9f:d4:90:6b:40:7b:2b:d1:38:31:34:9d: 3f:be:ef:10:40:29:b6:8c:3f:50:24:53:4b:2e:4a: 9f:95:2a:76:f7:58:70:dc:de:d1:1a:87:89:ab:2d: 1a:e7:e3:da:7d:99:d4:34:e6:41:92:e5:5a:62:46: fe:be:3a:a0:85:7e:39:9c:a3:b4:86:5c:60:9f:a2: 7e:9e:f9:ae:33:5a:a2:12:fd:08:e6:58:f5:b5:73: 27:9c:5d:5b:80:e6:e8:83:f9:34:4c:07:82:b2:75: 1c:71:6b:5e:b2:ce:a7:39:22:7e:6c:79:da:5d:bc: 44:f3:21:b6:01:fa:e9:1c:90:4b:01:4c:8d:44:5e: b1:9e:cb:2e:73:d9:0a:8c:0c:6e:57:b6:4a:9c:b1: a6:e0:26:d6:26:74:fc:4c:1a:99:a2:b4:63:93:47: 07:2f:ea:d2:01:2a:d6:6c:92:54:52:cb:d0:28:f7: 4b:55:fc:b6:13:2a:88:27:ee:34:15:ef:60:80:17: 09:e3:2f:57:d7:a6:90:22:27:9d:08:ab:21:3c:58: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:58:98:F9:69:23:29:8F:67:B3:F4:EB:2D:32:06:B1:00:E5:2A X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bc:86:8d:06:64:f9:d4:b8:bd:86:7b:e2:a1:47:be:61:e4: 61:b6:fb:0c:1d:ad:84:3a:a5:fb:fa:e7:66:40:6b:c9:f6:bc: e5:b0:c8:d8:6a:8b:c1:17:e7:2c:00:62:aa:6e:d5:1f:8e:04: 7d:f9:24:eb:6b:73:b5:56:fb:a2:d5:15:3b:75:f2:c3:65:a7: b5:e7:42:c9:e1:96:1e:67:e5:ab:8f:41:20:34:77:e8:90:a2: c6:21:6b:d5:b4:8c:fc:f7:58:7e:d2:11:d7:5e:fd:3e:d1:89: d2:be:1b:06:49:35:38:36:75:06:a4:84:31:18:6e:c9:2d:ac: 11:d7:6a:d3:5a:2c:82:1c:f6:24:55:99:d1:d5:bd:46:f5:78: d9:3b:54:be:93:00:18:ed:23:02:63:0e:79:08:fe:c0:1a:58: 68:f4:e8:8f:9c:d4:9e:cc:fd:b5:9d:cd:f0:93:68:71:d8:c4: eb:39:d2:1f:c5:54:a9:02:35:27:13:3b:fd:2b:5e:2a:65:12: 75:5c:d4:de:b3:48:f9:d0:66:86:64:e2:81:77:49:67:60:f5: d8:a1:a9:93:50:5c:60:9e:51:16:c2:61:e8:f6:83:9d:36:62: df:13:86:58:af:e0:8e:63:c0:f0:26:81:6c:16:b9:ac:00:28: 88:bb:dc:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTEwMTkxMDE3NDJaFw0yNTEwMjYxMDE3NDJaMBgxFjAUBgNV BAMTDTY4ZjRiYWM3LTBjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4hw5azFHvfJ4Mc85aAlqlS2JfEroYItPLs8y+boZNhD/YMqqrci7KalsEN7df 65/UkGtAeyvRODE0nT++7xBAKbaMP1AkU0suSp+VKnb3WHDc3tEah4mrLRrn49p9 mdQ05kGS5VpiRv6+OqCFfjmco7SGXGCfon6e+a4zWqIS/QjmWPW1cyecXVuA5uiD +TRMB4KydRxxa16yzqc5In5sedpdvETzIbYB+ukckEsBTI1EXrGeyy5z2QqMDG5X tkqcsabgJtYmdPxMGpmitGOTRwcv6tIBKtZsklRSy9Ao90tV/LYTKogn7jQV72CA FwnjL1fXppAiJ50IqyE8WCThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV1xYmPlp IymPZ7P06y0yBrEA5SowHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACC8ho0GZPnUuL2Ge+KhR75h5GG2+wwdrYQ6pfv652ZAa8n2vOWwyNhq i8EX5ywAYqpu1R+OBH35JOtrc7VW+6LVFTt18sNlp7XnQsnhlh5n5auPQSA0d+iQ osYha9W0jPz3WH7SEdde/T7RidK+GwZJNTg2dQakhDEYbsktrBHXatNaLIIc9iRV mdHVvUb1eNk7VL6TABjtIwJjDnkI/sAaWGj06I+c1J7M/bWdzfCTaHHYxOs50h/F VKkCNScTO/0rXiplEnVc1N6zSPnQZoZk4oF3SWdg9dihqZNQXGCeURbCYej2g502 Yt8Thliv4I5jwPAmgWwWuawAKIi73Cw= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:31 2025 by rpki-client