$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: xgTHyDu7mE6cSVYRIvTJT8NNK4sc3oNRlH0LrD/uo/0= Subject key identifier: E4:08:D2:88:63:1B:DB:EF:5C:B0:70:51:47:52:6D:72:27:1E:99:8E Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 29A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 298C Signing time: Mon 20 Oct 2025 15:46:18 +0000 Manifest this update: Mon 20 Oct 2025 15:46:17 +0000 Manifest next update: Mon 27 Oct 2025 15:46:17 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: n3vV8C33E82G5Tbc3RfQOE0X/i3v19sgzkccGMImfJc=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: XWmzI2yeMf3apt5DHsKgv60jONcTAI6E+TZgl5OMpW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10657 (0x29a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Oct 20 15:46:17 2025 GMT Not After : Oct 27 15:46:17 2025 GMT Subject: CN=68f65949-b788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:67:81:6e:e2:8d:d1:c1:85:fb:17:4a:a3: 19:d2:b8:05:17:16:83:22:84:00:22:ad:e5:83:49: 30:a9:46:97:2d:57:9a:9f:34:5e:49:a9:a8:8c:cf: d3:12:dc:8f:da:65:15:c0:07:4f:96:57:fc:76:ba: 4a:b3:df:7c:c8:a5:72:bc:a3:90:d8:9a:7d:01:f7: 2c:cf:21:84:f2:f2:3c:ad:f3:07:19:04:ba:62:d2: 76:40:4e:93:b3:bf:e9:90:66:f7:55:55:3e:8b:16: 41:1e:33:94:ef:02:a8:9b:12:00:0a:0d:51:db:38: 9b:fa:b0:36:c4:bc:ed:1d:24:61:33:17:ed:15:fe: 68:60:51:88:a4:8e:01:ed:ea:47:c9:a7:1e:b9:cd: ce:d2:09:4e:07:5d:a4:c7:86:c5:da:a7:d1:b2:85: d7:e1:1d:63:4e:6d:cd:37:a5:5b:db:e2:40:0c:c2: 19:74:f1:e6:c3:80:79:5d:88:53:64:fb:1c:ba:7f: 0c:7a:2e:41:1a:5b:ee:00:a1:85:dd:d0:7c:f6:e2: 53:95:94:07:0c:ad:de:ba:7a:45:63:c6:ab:d1:ea: c5:e8:d3:4f:b9:af:24:42:a7:1f:22:ce:cb:05:89: ed:ad:9b:ea:5d:70:2b:c3:e7:94:cb:49:c3:81:5e: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:D2:88:63:1B:DB:EF:5C:B0:70:51:47:52:6D:72:27:1E:99:8E X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bd:7e:38:7a:54:8a:96:07:39:06:9f:a8:ea:85:f9:c1:3d: e7:78:63:60:a4:34:02:ef:49:d9:b9:e7:bf:27:76:50:37:ef: 45:09:e1:80:79:9e:21:b3:fc:76:e9:c6:ca:c0:fa:d9:42:54: 2c:da:c2:2f:e3:de:ea:f0:a4:e7:c7:f1:ae:4f:7f:ea:eb:04: 14:c2:3e:16:8e:f4:54:88:7e:9d:c0:2d:b5:48:d8:7d:5c:0f: bb:9d:11:5a:82:72:20:aa:71:03:f6:f6:23:23:38:f9:23:14: 61:b6:71:a4:38:71:1f:53:eb:4c:5c:59:c4:5d:22:82:fe:03: 16:2d:ff:c0:a9:8c:f0:64:2d:06:47:d5:27:79:e1:bb:81:25: f7:d1:40:17:d1:29:9f:7e:1e:c1:fe:ed:8d:5f:01:08:95:43: 62:aa:b1:94:52:bb:94:b0:94:e0:fd:9c:3b:5b:1b:39:66:9d: 9b:e0:91:4a:9f:6e:cc:07:4e:ad:6b:89:05:84:38:f8:fc:78: 64:6a:e1:f9:03:a9:a8:34:81:33:bd:7b:ab:08:5f:a1:49:0d: 13:b8:53:df:2b:64:bb:59:fa:06:04:e1:04:d1:9a:f6:4d:d8: 71:e5:c5:48:5f:7b:7c:89:e4:52:8b:e6:88:f1:5e:05:91:01: 78:e1:3a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjUxMDIwMTU0NjE3WhcNMjUxMDI3MTU0NjE3WjAYMRYwFAYD VQQDEw02OGY2NTk0OS1iNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9RngW7ijdHBhfsXSqMZ0rgFFxaDIoQAIq3lg0kwqUaXLVeanzReSamojM/T EtyP2mUVwAdPllf8drpKs998yKVyvKOQ2Jp9AfcszyGE8vI8rfMHGQS6YtJ2QE6T s7/pkGb3VVU+ixZBHjOU7wKomxIACg1R2zib+rA2xLztHSRhMxftFf5oYFGIpI4B 7epHyaceuc3O0glOB12kx4bF2qfRsoXX4R1jTm3NN6Vb2+JADMIZdPHmw4B5XYhT ZPscun8Mei5BGlvuAKGF3dB89uJTlZQHDK3eunpFY8ar0erF6NNPua8kQqcfIs7L BYntrZvqXXArw+eUy0nDgV65fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQI0ohj G9vvXLBwUUdSbXInHpmOMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvX44elSKlgc5Bp+o6oX5wT3neGNgpDQC70nZuee/J3ZQN+9FCeGA eZ4hs/x26cbKwPrZQlQs2sIv497q8KTnx/GuT3/q6wQUwj4WjvRUiH6dwC21SNh9 XA+7nRFagnIgqnED9vYjIzj5IxRhtnGkOHEfU+tMXFnEXSKC/gMWLf/AqYzwZC0G R9UneeG7gSX30UAX0Smffh7B/u2NXwEIlUNiqrGUUruUsJTg/Zw7Wxs5Zp2b4JFK n27MB06ta4kFhDj4/HhkauH5A6moNIEzvXurCF+hSQ0TuFPfK2S7WfoGBOEE0Zr2 Tdhx5cVIX3t8ieRSi+aI8V4FkQF44Trt -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:41 2025 by rpki-client