$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: bFUH0Wx5bBArXYB9hJ0kuD8v7gxFhaudC9Iu3FCI+TI= Subject key identifier: 3B:65:29:AD:3E:0E:08:77:B7:B0:51:AF:43:31:DA:70:C8:75:19:4E Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0C1B Signing time: Sat 18 Oct 2025 19:31:07 +0000 Manifest this update: Sat 18 Oct 2025 19:31:06 +0000 Manifest next update: Sat 25 Oct 2025 19:31:06 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: XmBWwQbEQSjr8/MQB74nlaSaSnu6hUfg3KWddDp67Ho=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fuEIOJZ2g7nFL90Iih/ZQree35PAM4VcWuWuu09soDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Oct 18 19:31:06 2025 GMT Not After : Oct 25 19:31:06 2025 GMT Subject: CN=68f3eafb-1eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:c9:03:90:5f:25:b9:b9:e5:01:2a:2a:dd: a1:a4:86:b0:05:71:55:f0:45:6d:82:e4:ac:ed:68: 20:30:6c:c4:db:67:c1:f6:15:5e:d8:1b:b8:08:f7: 7c:3e:86:96:71:47:e6:11:4f:ba:7f:c5:81:86:01: 08:0c:9e:b7:4a:63:d2:9c:dc:f1:92:6f:f9:0a:19: ed:45:f9:1d:01:1a:a6:3f:31:02:fc:ec:04:04:86: 9d:02:51:dd:1a:78:9a:d7:ab:0c:e4:cf:16:ce:43: 7b:5f:e1:92:44:9b:9f:f3:9f:59:80:fb:0a:fc:82: 50:d0:39:e7:6c:92:0e:b1:d0:14:7b:04:c9:31:b8: 86:96:eb:7c:01:7e:cf:2c:ca:2b:99:79:25:c6:55: a7:76:f2:e2:29:bd:53:a9:fb:c3:5c:5b:98:11:2b: c2:75:1f:73:0d:cd:15:b6:37:8d:ba:e7:92:f7:27: f4:9c:15:32:d4:d5:a5:68:31:98:70:93:df:45:79: eb:48:f6:fb:2a:8d:79:56:e9:ca:9a:36:f1:b9:57: fa:e3:8c:dc:3c:5a:12:68:9f:32:ab:0c:b1:e7:19: 0f:51:56:d3:1c:13:97:6b:7f:10:8e:19:b5:07:10: 24:9b:0a:b8:f3:a2:bc:21:8c:8b:7b:c9:e4:b9:6c: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:29:AD:3E:0E:08:77:B7:B0:51:AF:43:31:DA:70:C8:75:19:4E X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:69:37:30:fb:5c:94:02:ca:cb:cf:90:c2:e5:45:f6:a0: 09:fa:27:bc:31:9b:42:a8:13:49:2f:be:57:74:e6:48:d8:8e: 5d:66:79:f7:39:d8:2c:e8:00:ff:96:15:d5:8a:31:9b:31:72: d7:b3:98:1d:87:ce:2e:ae:1f:06:ce:6c:21:24:cb:85:78:f7: 4b:93:96:da:2b:df:e8:04:65:24:7a:37:d5:2c:64:0e:89:2e: 59:12:70:63:52:e2:8d:7c:06:61:07:a9:04:01:fc:6a:35:36: 4e:cf:4d:cd:a6:7a:4d:e5:ca:dd:6a:11:46:90:56:05:c7:61: ca:4b:dd:75:e8:16:ba:72:8d:10:b9:f1:d3:32:fe:04:5d:17: 27:8d:e9:f6:b6:9b:36:dd:6d:08:dc:fd:8a:af:32:55:67:58: cf:3b:06:d1:57:b7:93:85:9e:84:a3:70:d1:de:1c:48:0d:58: 0d:58:91:88:89:92:d4:53:ed:7d:b7:42:12:b8:f0:d3:dc:d4: 67:f1:c0:9b:d6:6a:c3:08:3a:57:77:cd:dd:df:1e:44:1b:d3: f3:bb:a0:49:59:f7:d6:e0:68:e9:8f:af:11:a2:48:30:e6:9a: af:7c:d8:40:7a:72:2c:25:46:fd:d7:bc:d5:ce:84:96:78:71: 31:da:1c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjUxMDE4MTkzMTA2WhcNMjUxMDI1MTkzMTA2WjAYMRYwFAYD VQQDEw02OGYzZWFmYi0xZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1V/JA5BfJbm55QEqKt2hpIawBXFV8EVtguSs7WggMGzE22fB9hVe2Bu4CPd8 PoaWcUfmEU+6f8WBhgEIDJ63SmPSnNzxkm/5ChntRfkdARqmPzEC/OwEBIadAlHd Gnia16sM5M8WzkN7X+GSRJuf859ZgPsK/IJQ0DnnbJIOsdAUewTJMbiGlut8AX7P LMormXklxlWndvLiKb1TqfvDXFuYESvCdR9zDc0VtjeNuueS9yf0nBUy1NWlaDGY cJPfRXnrSPb7Ko15VunKmjbxuVf644zcPFoSaJ8yqwyx5xkPUVbTHBOXa38Qjhm1 BxAkmwq486K8IYyLe8nkuWxlCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtlKa0+ Dgh3t7BRr0Mx2nDIdRlOMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDN2k3MPtclALKy8+QwuVF9qAJ+ie8MZtCqBNJL75XdOZI2I5dZnn3 Odgs6AD/lhXVijGbMXLXs5gdh84urh8GzmwhJMuFePdLk5baK9/oBGUkejfVLGQO iS5ZEnBjUuKNfAZhB6kEAfxqNTZOz03NpnpN5crdahFGkFYFx2HKS9116Ba6co0Q ufHTMv4EXRcnjen2tps23W0I3P2KrzJVZ1jPOwbRV7eThZ6Eo3DR3hxIDVgNWJGI iZLUU+19t0ISuPDT3NRn8cCb1mrDCDpXd83d3x5EG9Pzu6BJWffW4Gjpj68Rokgw 5pqvfNhAenIsJUb917zVzoSWeHEx2hyZ -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:21 2025 by rpki-client