$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: AZZ3EqpMghz45MN83XWhdZjBWM3rI/SjozS7pqGou8g= Subject key identifier: 9A:5F:23:49:6E:F8:08:E5:62:78:6E:E5:98:37:46:06:FB:A7:11:49 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 2A Signing time: Sun 19 Oct 2025 11:14:51 +0000 Manifest this update: Sun 19 Oct 2025 11:14:50 +0000 Manifest next update: Sun 26 Oct 2025 11:14:50 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: MvL93uULJxIPVtTGmktLyijUgFh2fRKDFXs4Ox7rQzQ=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: FVLynhifvDV8KPyOIjr7ThKejT3Wh2GtJVJ/0rkPagg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Oct 19 11:14:50 2025 GMT Not After : Oct 26 11:14:50 2025 GMT Subject: CN=68f4c82a-b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:dc:a3:25:df:00:11:f5:fa:99:4e:b0:1d: 21:5a:a7:9f:d9:d2:a0:87:d3:34:2b:8b:50:2e:d2: be:fc:1c:1a:e4:7b:3a:bf:55:35:2c:ce:e9:d6:ed: 77:e3:9f:4a:db:c5:3e:2a:89:db:08:49:00:28:0f: 6a:bd:be:09:3e:f0:c4:2b:34:b6:a8:df:10:b5:e4: 4c:a0:61:8b:9c:8e:d4:f6:96:1b:a4:1f:65:2b:0a: 62:73:6a:2c:8d:b3:22:03:a1:5c:5f:ff:83:29:b8: 4e:6c:6c:9e:c1:52:e3:5b:c2:4c:8a:e1:98:6d:20: 4e:53:37:b3:71:23:df:79:6f:be:89:a4:ba:a3:d5: 7a:f7:54:e0:19:13:8a:25:cb:37:52:94:ff:ce:ab: 66:07:6b:3a:68:a8:b1:93:4f:41:86:63:63:a2:ac: 10:8b:2f:00:2d:2f:fb:dd:1a:8c:93:f4:c0:a5:ef: 56:12:69:7e:da:f0:0c:9f:e8:76:77:18:d8:db:6e: f4:42:2c:15:88:51:3c:e4:e1:1c:f0:35:1e:38:bc: dc:7b:ef:fc:86:a2:da:30:2d:7a:60:eb:1e:db:83: 7d:0c:8b:fb:b0:b4:e7:1c:37:a6:e7:91:71:86:b3: 12:ac:0a:95:14:56:fc:b1:9c:99:6e:0a:5b:d5:98: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:23:49:6E:F8:08:E5:62:78:6E:E5:98:37:46:06:FB:A7:11:49 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:52:bd:66:f9:1f:f7:dc:ce:16:e1:20:d3:92:0c:b7:d1:64: a4:0b:70:1a:1e:d7:a1:3e:75:b0:15:83:4b:5a:f0:b7:24:c7: d6:57:60:23:10:eb:3c:41:95:14:7f:f6:e2:dd:6b:40:b8:b1: c1:6d:d4:d7:ea:a7:33:be:eb:a5:44:97:65:21:ab:b4:1e:3d: 34:90:de:30:27:bc:8f:f4:8d:c3:94:01:7f:ad:28:bb:4d:60: 83:65:fb:7d:29:4e:06:31:6b:f1:83:26:53:65:78:27:8a:27: 58:82:c0:e2:a5:fb:b1:bf:90:db:e4:c4:56:25:3d:e8:ec:97: 85:f1:c6:a6:9a:ae:7c:1c:fd:46:7a:ae:da:de:d2:98:cd:45: 7b:40:25:bb:3e:0b:29:09:79:4c:0d:f4:69:74:84:6f:61:4d: 69:fe:10:5d:a8:d2:c4:2f:8b:1b:86:22:fb:28:8a:90:56:67: 47:75:73:4f:44:aa:07:99:10:e0:c4:df:ac:04:a7:5a:82:6e: 58:ce:13:f5:63:86:53:98:6e:ba:db:be:c4:1c:c0:8e:c4:8f: d4:45:88:b5:09:47:ea:83:5b:e6:33:cf:47:02:76:17:a5:46: e0:c3:5d:94:fd:db:d3:64:56:fa:06:aa:00:98:13:81:24:63: 91:34:25:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI2RDExMC8GA1UEBRMoNEQ0RjNBQUNDNzM5NUExM0Q2NDIwMDdGOTkxMERGODgw NDBFNEJBQjAeFw0yNTEwMTkxMTE0NTBaFw0yNTEwMjYxMTE0NTBaMBgxFjAUBgNV BAMTDTY4ZjRjODJhLWIyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj59yjJd8AEfX6mU6wHSFap5/Z0qCH0zQri1Au0r78HBrkezq/VTUszunW7Xfj n0rbxT4qidsISQAoD2q9vgk+8MQrNLao3xC15EygYYucjtT2lhukH2UrCmJzaiyN syIDoVxf/4MpuE5sbJ7BUuNbwkyK4ZhtIE5TN7NxI995b76JpLqj1Xr3VOAZE4ol yzdSlP/Oq2YHazpoqLGTT0GGY2OirBCLLwAtL/vdGoyT9MCl71YSaX7a8Ayf6HZ3 GNjbbvRCLBWIUTzk4RzwNR44vNx77/yGotowLXpg6x7bg30Mi/uwtOccN6bnkXGG sxKsCpUUVvyxnJluClvVmI/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUml8jSW74 COVieG7lmDdGBvunEUkwHwYDVR0jBBgwFoAUTU86rMc5WhPWQgB/mRDfiAQOS6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjZELzg2REY2QzdFNzEw NTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFU4NnJNYzVXaFBXUWdCX21SRGZpQVFPUzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy QjZELzg2REY2QzdFNzEwNTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQ V1FnQl9tUkRmaUFRT1M2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJSvWb5H/fczhbhINOSDLfRZKQLcBoe16E+dbAVg0ta8Lckx9ZXYCMQ 6zxBlRR/9uLda0C4scFt1NfqpzO+66VEl2Uhq7QePTSQ3jAnvI/0jcOUAX+tKLtN YINl+30pTgYxa/GDJlNleCeKJ1iCwOKl+7G/kNvkxFYlPejsl4Xxxqaarnwc/UZ6 rtre0pjNRXtAJbs+CykJeUwN9Gl0hG9hTWn+EF2o0sQvixuGIvsoipBWZ0d1c09E qgeZEODE36wEp1qCbljOE/VjhlOYbrrbvsQcwI7Ej9RFiLUJR+qDW+Yzz0cCdhel RuDDXZT929NkVvoGqgCYE4EkY5E0Jb8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:02 2025 by rpki-client