$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: m/wghgMqVKTewl3TtOinqHcM0+YDenZuUrI2Mtk0hls= Subject key identifier: 63:95:F0:AA:2C:56:F7:A6:7B:14:43:A9:B7:67:CB:91:66:7A:9B:F8 Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 69 Signing time: Sun 19 Oct 2025 10:24:07 +0000 Manifest this update: Sun 19 Oct 2025 10:24:06 +0000 Manifest next update: Sun 26 Oct 2025 10:24:06 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: ouM8OgMIwdQYUnigc64vQ21lJFTkYXeU/3DES6Jx5Ho=) 2: AB942EE0607C11F0A8F5A261C4F9AE02.roa (hash: Ib7XrV2UdhfMc2uSkqN8sJc2pYT7HHMtYcCkEQkD9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Oct 19 10:24:06 2025 GMT Not After : Oct 26 10:24:06 2025 GMT Subject: CN=68f4bc46-d2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:b0:d1:87:7b:bc:c6:4c:17:bb:e6:e4:11: 57:25:99:cf:39:8b:34:28:9e:93:06:46:1b:ad:18: 12:f9:14:4e:01:f4:01:1d:49:e5:08:09:26:6f:b8: f4:65:ed:0c:7b:b1:50:18:2e:2e:86:39:15:4f:b8: 6d:f5:b1:d0:26:3e:ab:f2:c7:d5:00:16:21:d8:cb: a6:71:0e:bc:29:49:2d:ef:35:5b:41:e7:45:3b:c4: f8:5f:b9:d7:9f:ae:6e:9a:d4:77:d1:06:38:2a:94: 4f:1f:df:45:a4:a2:b7:92:e3:d0:4c:3a:f5:85:c8: 0e:1e:b1:5f:17:0c:02:38:d9:78:ea:5d:4b:46:57: b1:91:fd:ed:27:3c:f7:a4:d3:42:74:b2:67:29:c6: 71:f6:22:64:6d:b2:d2:14:77:a9:e0:3a:1a:bc:01: 6e:57:89:38:d2:c7:ad:52:b6:f8:2e:25:93:a5:67: 2e:19:48:9d:94:7f:b1:f5:7f:5c:07:ba:db:a7:39: be:4d:27:67:28:7d:07:eb:73:f1:63:08:26:4a:da: a3:22:13:96:c9:04:5e:a1:b2:d3:3e:3b:66:8f:42: 8f:9d:61:a0:ff:8e:3e:69:0c:2c:66:51:74:b7:5b: ea:4a:40:2b:c5:e6:dd:76:25:34:34:38:fc:91:92: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:F0:AA:2C:56:F7:A6:7B:14:43:A9:B7:67:CB:91:66:7A:9B:F8 X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ad:ec:ec:0e:a9:4e:d9:04:c9:4c:de:5f:e7:67:21:65:50: a5:1f:36:62:ff:32:81:32:1c:4e:50:d6:2d:c6:7d:9d:2f:1e: f1:6e:13:df:e9:ec:d2:7c:df:94:40:4b:ad:8b:84:c1:8f:16: f3:3e:48:78:5d:2f:3d:12:bd:51:9f:28:05:e2:26:6b:b6:76: bd:c3:73:6e:86:a1:da:40:5f:b9:57:71:68:9a:58:ee:58:13: 33:f8:d6:a5:f4:eb:32:d9:2d:11:6b:93:fa:47:0e:ce:ad:37: 44:df:1e:d6:cf:48:f1:dd:d0:e1:92:6c:ab:b7:16:36:38:f3: 77:1a:69:68:4f:d1:57:4d:05:c5:81:71:32:d9:5e:98:f4:13: b3:0e:b6:ac:ac:b5:19:ae:3e:65:b2:34:73:ce:fe:46:16:cc: a1:70:7a:ca:2c:05:af:dc:94:9b:f9:4a:87:d8:03:05:4b:cc: 44:f5:82:0c:ff:92:05:3f:63:9d:91:c5:99:8a:d8:a6:9f:59: 6c:e0:e1:3b:61:6a:07:23:61:7f:f8:4f:2a:51:61:81:28:8e: 93:1a:7f:b3:ca:1d:b9:61:58:fb:80:c5:e7:b3:87:b1:4c:58: 1e:cd:f8:dc:cb:54:d2:4b:3a:29:91:9d:5f:00:cd:1b:f0:07: c5:12:ed:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTEwMTkxMDI0MDZaFw0yNTEwMjYxMDI0MDZaMBgxFjAUBgNV BAMTDTY4ZjRiYzQ2LWQyZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGXbDRh3u8xkwXu+bkEVclmc85izQonpMGRhutGBL5FE4B9AEdSeUICSZvuPRl 7Qx7sVAYLi6GORVPuG31sdAmPqvyx9UAFiHYy6ZxDrwpSS3vNVtB50U7xPhfudef rm6a1HfRBjgqlE8f30WkoreS49BMOvWFyA4esV8XDAI42XjqXUtGV7GR/e0nPPek 00J0smcpxnH2ImRtstIUd6ngOhq8AW5XiTjSx61StvguJZOlZy4ZSJ2Uf7H1f1wH utunOb5NJ2cofQfrc/FjCCZK2qMiE5bJBF6hstM+O2aPQo+dYaD/jj5pDCxmUXS3 W+pKQCvF5t12JTQ0OPyRkp/NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY5XwqixW 96Z7FEOpt2fLkWZ6m/gwHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOt7OwOqU7ZBMlM3l/nZyFlUKUfNmL/MoEyHE5Q1i3GfZ0vHvFuE9/p 7NJ835RAS62LhMGPFvM+SHhdLz0SvVGfKAXiJmu2dr3Dc26GodpAX7lXcWiaWO5Y EzP41qX06zLZLRFrk/pHDs6tN0TfHtbPSPHd0OGSbKu3FjY483caaWhP0VdNBcWB cTLZXpj0E7MOtqystRmuPmWyNHPO/kYWzKFwesosBa/clJv5SofYAwVLzET1ggz/ kgU/Y52RxZmK2KafWWzg4TthagcjYX/4TypRYYEojpMaf7PKHblhWPuAxeezh7FM WB7N+NzLVNJLOimRnV8AzRvwB8US7e4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:08 2025 by rpki-client