$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: emDs6zG6P1hXkqLPqnE9BV50GbSnD+2U2VUdnnQO7t0= Subject key identifier: 42:8C:81:34:6C:BC:9D:1C:A6:70:42:48:0C:AD:51:BB:49:25:E3:BA Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0286 Signing time: Sun 19 Oct 2025 03:49:58 +0000 Manifest this update: Sun 19 Oct 2025 03:49:57 +0000 Manifest next update: Sun 26 Oct 2025 03:49:57 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: 90nSm8gPnTkStKyTmD1HXWPEG0EetXsMW7rLtFNJ2yg=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Oct 19 03:49:57 2025 GMT Not After : Oct 26 03:49:57 2025 GMT Subject: CN=68f45fe6-742a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:47:52:51:fb:85:30:dd:52:b1:99:99:40: 8b:cb:3b:38:11:e5:05:8d:f7:26:91:6f:2f:b6:05: 0a:f4:3f:f9:2f:74:d8:ca:ff:31:bb:5c:73:a7:41: c9:85:56:6d:b3:9b:7e:0b:ac:6b:2d:5c:7f:98:87: 1a:a3:c0:08:2c:2a:ab:30:48:76:96:e1:5a:ea:0e: 2c:f5:54:60:a9:a8:14:10:7e:9a:fc:1b:87:92:d7: 0f:85:e1:32:ff:b2:06:99:20:0f:5c:6b:dd:7c:e3: 52:42:cc:e3:6d:90:a2:28:33:cc:df:af:06:7b:fc: 77:2f:19:c2:c2:dd:b8:41:11:f3:58:0f:7e:63:26: 0b:e5:ae:91:37:32:ac:19:c3:b6:57:ce:9a:e0:08: c0:a6:30:ae:27:89:68:6e:49:f4:13:05:12:41:1c: fa:5a:10:70:d2:81:cf:5c:38:c3:cc:df:dd:ca:87: e9:1d:9a:f9:91:a0:a8:23:58:73:8c:5d:66:5c:bd: 11:32:34:98:3a:7c:63:2a:d4:03:87:68:e1:0d:2b: 5a:39:15:57:c0:63:87:ff:c2:dc:69:c1:94:71:96: e9:7d:05:6e:68:5f:da:57:b9:df:86:e0:05:a6:6f: f1:49:d4:f0:57:c3:78:a9:56:93:df:48:7e:76:23: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:81:34:6C:BC:9D:1C:A6:70:42:48:0C:AD:51:BB:49:25:E3:BA X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:6b:25:25:98:1c:c0:04:40:2a:b3:26:3e:93:fe:26:e5: a2:45:7a:ad:77:eb:dd:3e:ee:4b:8b:8d:62:28:08:ec:d6:a9: ba:db:66:71:0b:38:c0:83:ee:c0:17:dc:78:e3:a5:a6:6a:56: 7d:f2:0a:26:09:c9:0a:85:16:fd:25:b4:f7:3d:d4:59:d2:f7: 0b:0e:9a:c5:fb:f0:79:db:20:b6:dc:2c:fd:5c:98:da:80:ef: 7b:b1:b0:1a:41:f9:3a:6e:a5:99:0c:fc:a9:16:e8:a4:e9:56: 53:aa:ed:17:7f:21:5c:10:c2:46:68:92:1e:8e:73:bf:cc:f1: 8c:f7:79:22:13:95:31:d5:69:85:12:14:d8:08:f0:7f:63:3e: 3b:99:1b:3c:ba:9a:54:7c:ad:26:57:ae:77:31:07:62:78:a8: 9d:7a:0f:02:9c:0c:2d:4a:99:25:3a:6f:38:1a:be:7d:b9:ca: 11:87:5e:90:cd:e9:83:a1:18:20:8e:4e:59:2c:04:54:6a:ad: a6:42:97:f0:31:96:c9:41:2d:17:91:47:fd:ff:02:11:47:df: 22:c6:77:62:f2:81:12:15:de:bc:a6:f7:d0:70:c3:8e:39:f4: 3d:5a:e0:e0:e5:d5:7b:b0:33:d5:b5:45:cb:cd:27:63:05:15: 63:fb:6e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUxMDE5MDM0OTU3WhcNMjUxMDI2MDM0OTU3WjAYMRYwFAYD VQQDEw02OGY0NWZlNi03NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJlHUlH7hTDdUrGZmUCLyzs4EeUFjfcmkW8vtgUK9D/5L3TYyv8xu1xzp0HJ hVZts5t+C6xrLVx/mIcao8AILCqrMEh2luFa6g4s9VRgqagUEH6a/BuHktcPheEy /7IGmSAPXGvdfONSQszjbZCiKDPM368Ge/x3LxnCwt24QRHzWA9+YyYL5a6RNzKs GcO2V86a4AjApjCuJ4lobkn0EwUSQRz6WhBw0oHPXDjDzN/dyofpHZr5kaCoI1hz jF1mXL0RMjSYOnxjKtQDh2jhDStaORVXwGOH/8LcacGUcZbpfQVuaF/aV7nfhuAF pm/xSdTwV8N4qVaT30h+diOPqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKMgTRs vJ0cpnBCSAytUbtJJeO6MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA3mslJZgcwARAKrMmPpP+JuWiRXqtd+vdPu5Li41iKAjs1qm622Zx CzjAg+7AF9x446WmalZ98gomCckKhRb9JbT3PdRZ0vcLDprF+/B52yC23Cz9XJja gO97sbAaQfk6bqWZDPypFuik6VZTqu0XfyFcEMJGaJIejnO/zPGM93kiE5Ux1WmF EhTYCPB/Yz47mRs8uppUfK0mV653MQdieKideg8CnAwtSpklOm84Gr59ucoRh16Q zemDoRggjk5ZLARUaq2mQpfwMZbJQS0XkUf9/wIRR98ixndi8oESFd68pvfQcMOO OfQ9WuDg5dV7sDPVtUXLzSdjBRVj+26r -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:38 2025 by rpki-client