$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: l9h/FVW/UKNcrHPBZ9c2TKkmsAEmslElMT5j6j6OHj0= Subject key identifier: 97:84:03:45:FD:17:82:A7:18:52:3D:68:CB:DA:1B:85:F9:DF:B7:75 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: EA Signing time: Sun 19 Oct 2025 08:20:42 +0000 Manifest this update: Sun 19 Oct 2025 08:20:41 +0000 Manifest next update: Sun 26 Oct 2025 08:20:41 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: TxweNuwrULh0RgpnDWQrUan7LZJC8DCzWygcmO1M8ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Oct 19 08:20:41 2025 GMT Not After : Oct 26 08:20:41 2025 GMT Subject: CN=68f49f59-37aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:97:20:48:88:ad:11:ac:81:44:62:78:8f: 2b:d8:04:69:dc:c9:a6:4f:c3:66:99:e3:11:c8:3a: 2a:85:7f:a0:45:0a:21:62:e5:cc:45:e9:8c:cc:75: 99:f6:2a:bd:42:02:38:83:bd:bf:bf:9a:a8:7b:f2: 62:42:73:f4:a2:5c:63:94:a5:1a:92:8c:18:09:65: d1:09:88:32:15:c6:1e:59:d6:47:d2:38:85:30:3d: 90:2f:33:92:04:5c:6c:77:83:08:7a:ca:24:f6:89: 26:61:db:0d:9a:22:52:b5:93:4d:d1:67:ac:d2:f7: f4:7a:b6:98:e0:f0:c3:b2:3a:30:32:2b:f3:ad:49: 53:f0:9a:7d:07:25:cc:e0:ed:6e:68:4a:cd:8b:ae: 27:26:9a:c3:41:be:06:60:91:22:d4:bc:18:9b:15: 36:56:9d:42:3f:57:7f:e5:63:b5:e4:aa:3b:31:47: 45:d0:c7:d5:7c:cd:30:3a:74:c1:89:f0:8e:38:e0: ae:ed:67:8e:6d:27:5b:15:9b:24:a5:42:f0:04:c5: b4:16:ae:b4:84:85:4a:aa:52:48:4d:30:ac:7c:fc: bb:85:a9:a5:81:15:33:74:aa:c0:f1:3d:1e:73:57: 7c:f9:61:38:b4:4a:13:74:74:6a:65:b2:46:8e:8c: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:03:45:FD:17:82:A7:18:52:3D:68:CB:DA:1B:85:F9:DF:B7:75 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b2:76:c2:3e:a6:7d:66:0d:57:3e:60:2a:5f:c1:1a:07:ac: 6d:83:1d:f5:e5:6c:32:f1:38:a6:3f:f3:93:6e:f1:81:bf:3f: 1f:f4:d6:fe:83:90:d1:9b:88:57:86:aa:3c:ca:f1:46:b4:f6: 9d:fe:ee:97:8a:0b:97:6c:40:f6:ea:95:1c:03:a0:16:ce:1a: f9:a2:22:72:c9:17:93:9e:df:b2:d0:d1:3e:5d:0b:2d:9e:f1: aa:e7:21:89:ec:98:3c:3e:9c:8b:67:21:cc:24:26:3a:d0:2d: 5c:5a:78:f3:b1:3e:24:46:84:27:d1:fb:65:0a:66:7e:c5:b2: 31:bd:bf:40:72:f6:2b:cd:70:9e:a7:62:50:5c:3a:1b:69:b8: 34:18:1c:18:ae:84:d6:7c:62:8e:48:e0:c4:9a:66:e4:fd:d0: 4c:10:85:ab:87:f6:27:c4:96:53:59:d1:47:80:52:3e:ab:68: be:fb:0d:ca:da:cd:1d:d1:5e:ac:d2:d3:2f:65:9e:dc:33:73: 41:2a:fd:a6:ea:a9:87:a9:fd:b9:38:03:b6:4a:ea:76:14:91: ca:f2:f2:a1:7b:43:5c:9f:a3:78:77:30:22:e4:25:ec:bc:15: eb:19:03:07:91:79:e2:2b:91:99:8e:a0:2e:f8:cf:db:bd:d8: b9:f7:2a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUxMDE5MDgyMDQxWhcNMjUxMDI2MDgyMDQxWjAYMRYwFAYD VQQDEw02OGY0OWY1OS0zN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9+XIEiIrRGsgURieI8r2ARp3MmmT8NmmeMRyDoqhX+gRQohYuXMRemMzHWZ 9iq9QgI4g72/v5qoe/JiQnP0olxjlKUakowYCWXRCYgyFcYeWdZH0jiFMD2QLzOS BFxsd4MIesok9okmYdsNmiJStZNN0Wes0vf0eraY4PDDsjowMivzrUlT8Jp9ByXM 4O1uaErNi64nJprDQb4GYJEi1LwYmxU2Vp1CP1d/5WO15Ko7MUdF0MfVfM0wOnTB ifCOOOCu7WeObSdbFZskpULwBMW0Fq60hIVKqlJITTCsfPy7hamlgRUzdKrA8T0e c1d8+WE4tEoTdHRqZbJGjoyBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeEA0X9 F4KnGFI9aMvaG4X537d1MB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdsnbCPqZ9Zg1XPmAqX8EaB6xtgx315Wwy8TimP/OTbvGBvz8f9Nb+ g5DRm4hXhqo8yvFGtPad/u6XiguXbED26pUcA6AWzhr5oiJyyReTnt+y0NE+XQst nvGq5yGJ7Jg8PpyLZyHMJCY60C1cWnjzsT4kRoQn0ftlCmZ+xbIxvb9AcvYrzXCe p2JQXDobabg0GBwYroTWfGKOSODEmmbk/dBMEIWrh/YnxJZTWdFHgFI+q2i++w3K 2s0d0V6s0tMvZZ7cM3NBKv2m6qmHqf25OAO2Sup2FJHK8vKhe0Ncn6N4dzAi5CXs vBXrGQMHkXniK5GZjqAu+M/bvdi59yrr -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:40 2025 by rpki-client