$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: uEUtQ35bNL1DOLCFyoK+96sUa/SfgzvToDsmCeE1gDQ= Subject key identifier: 4D:A1:66:19:26:CF:9A:A0:A1:BB:DC:EE:08:68:1D:08:A4:AC:DC:52 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 01BA Signing time: Sun 19 Oct 2025 05:30:16 +0000 Manifest this update: Sun 19 Oct 2025 05:30:16 +0000 Manifest next update: Sun 26 Oct 2025 05:30:16 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: 2f2tT9SvX+9pqgp80dttIwQMpUR867jPz+8oxEqo2r0=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Oct 19 05:30:16 2025 GMT Not After : Oct 26 05:30:16 2025 GMT Subject: CN=68f47768-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:9e:65:a7:06:a3:87:43:f3:b9:e2:30:83: 59:d3:ac:ee:33:c1:ee:8b:74:0b:22:3c:37:53:85: b5:05:0d:d5:59:65:9e:d0:45:35:d9:2d:2f:f8:01: 23:dd:0c:ce:3e:c5:a9:44:8f:0c:17:8c:ce:b1:80: 7f:a1:84:c1:f7:0d:bf:e7:23:36:9a:48:58:36:42: 14:e4:9c:c6:03:0e:fe:29:63:e7:7c:89:c7:d1:96: 48:24:eb:41:66:61:60:e0:bf:83:e3:c3:32:3a:61: 3f:71:89:21:d4:2f:6c:b0:91:49:7a:18:d4:d0:14: 94:e6:bc:21:7d:e8:7e:67:cd:2a:d6:71:1e:3e:fd: ed:75:54:ab:f1:3f:ea:85:1c:ce:3a:57:b8:81:c4: d1:0e:dc:3b:79:24:2b:28:a7:f0:ad:36:06:19:cc: 28:f1:77:38:eb:bd:4a:b9:3e:36:f3:6e:49:2a:30: ee:0f:2c:10:c4:66:49:fd:e8:75:e4:50:84:f3:8f: 10:6b:7b:98:1a:7a:82:ed:a1:9e:9a:98:83:05:4c: 55:23:27:d7:2a:45:59:27:7c:be:ea:2a:ee:2a:fc: d4:da:e2:2c:8b:25:c3:ce:33:2d:84:d7:b8:fe:5b: 75:b9:b5:95:6f:99:21:61:e5:21:73:4d:1d:d5:41: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A1:66:19:26:CF:9A:A0:A1:BB:DC:EE:08:68:1D:08:A4:AC:DC:52 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d6:e3:c5:1c:c2:37:4d:82:ad:c4:72:eb:84:bf:aa:62:f4: 16:67:89:45:c0:77:2f:3b:b8:3e:b0:15:50:e0:67:15:47:a7: e5:ea:6e:dc:a4:ca:90:fa:6b:66:96:ec:65:8b:20:40:45:f4: 13:07:41:94:63:47:10:15:d0:a3:b9:01:68:66:b3:bd:b3:d7: bf:bf:14:dc:21:3e:18:cc:2a:70:99:53:17:ff:f5:74:e8:78: c6:a0:d0:8e:26:bd:7e:7c:19:b4:cd:ea:cf:c4:a7:5a:e6:1e: 0c:ed:84:00:a0:48:26:b4:d0:65:70:09:41:81:04:8c:90:28: b8:74:19:4c:28:25:d7:25:15:27:42:cf:28:94:32:58:3d:29: 32:4e:67:e0:a6:67:ef:4a:6f:ed:45:d6:a7:b9:52:d9:59:23: a9:96:ce:6b:00:4c:ec:bd:0e:42:b8:c6:07:55:a1:69:6c:81: 83:b0:ad:49:67:17:98:a1:c1:d4:f6:a6:66:76:41:ba:fc:0c: 11:75:94:33:73:a1:ca:7e:b8:ec:ee:22:10:f5:6d:25:9c:8f: 32:e8:df:0d:f4:38:8e:cf:63:67:fe:3e:3f:39:62:0e:f8:60: 66:22:a1:44:e1:83:53:31:cd:b0:4e:5b:01:b5:49:34:c0:19: 79:66:fe:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUxMDE5MDUzMDE2WhcNMjUxMDI2MDUzMDE2WjAYMRYwFAYD VQQDEw02OGY0Nzc2OC1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4GeZacGo4dD87niMINZ06zuM8Hui3QLIjw3U4W1BQ3VWWWe0EU12S0v+AEj 3QzOPsWpRI8MF4zOsYB/oYTB9w2/5yM2mkhYNkIU5JzGAw7+KWPnfInH0ZZIJOtB ZmFg4L+D48MyOmE/cYkh1C9ssJFJehjU0BSU5rwhfeh+Z80q1nEePv3tdVSr8T/q hRzOOle4gcTRDtw7eSQrKKfwrTYGGcwo8Xc4671KuT42825JKjDuDywQxGZJ/eh1 5FCE848Qa3uYGnqC7aGempiDBUxVIyfXKkVZJ3y+6iruKvzU2uIsiyXDzjMthNe4 /lt1ubWVb5khYeUhc00d1UESVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2hZhkm z5qgobvc7ghoHQikrNxSMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs1uPFHMI3TYKtxHLrhL+qYvQWZ4lFwHcvO7g+sBVQ4GcVR6fl6m7c pMqQ+mtmluxliyBARfQTB0GUY0cQFdCjuQFoZrO9s9e/vxTcIT4YzCpwmVMX//V0 6HjGoNCOJr1+fBm0zerPxKda5h4M7YQAoEgmtNBlcAlBgQSMkCi4dBlMKCXXJRUn Qs8olDJYPSkyTmfgpmfvSm/tRdanuVLZWSOpls5rAEzsvQ5CuMYHVaFpbIGDsK1J ZxeYocHU9qZmdkG6/AwRdZQzc6HKfrjs7iIQ9W0lnI8y6N8N9DiOz2Nn/j4/OWIO +GBmIqFE4YNTMc2wTlsBtUk0wBl5Zv5u -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:20 2025 by rpki-client