$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: K9if9ZEoP2VCubR0G02ADXTm/H7LnRxRWPH7SNALhnI= Subject key identifier: 33:F8:6E:AA:ED:22:E2:53:CA:66:60:D2:2F:C3:5A:DA:53:36:9D:36 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 04 Signing time: Sun 19 Oct 2025 11:41:06 +0000 Manifest this update: Sun 19 Oct 2025 11:41:05 +0000 Manifest next update: Sun 26 Oct 2025 11:41:05 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: 2Dt7/o08ft9s051YcEKL9/rcA4dobRiLqQhrwh8qSM8=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: TNOMyUTzIQDmtZMNg4RAepXI8EHziIAFioU9/cJC+ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Oct 19 11:41:05 2025 GMT Not After : Oct 26 11:41:05 2025 GMT Subject: CN=68f4ce51-3ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:ea:18:38:39:aa:c2:a9:49:5c:97:9a:51: 77:48:37:9e:f9:5d:6a:ed:70:2a:60:f0:2d:89:01: 1d:11:bf:8b:83:45:9f:05:0b:ca:d2:83:3f:cf:9b: cd:90:20:81:13:0e:2c:95:53:12:2f:96:64:c5:45: 33:ca:45:bc:be:c1:4d:ee:92:3d:41:3f:3a:f5:35: 67:88:f0:47:63:bd:c5:d6:92:48:81:74:fc:4d:5f: 19:7b:59:57:0a:ec:00:df:db:65:a2:ad:44:aa:56: 3b:85:77:94:92:6b:6b:a3:d9:75:b7:08:80:6b:89: 70:7b:e7:a6:32:e9:e4:a9:ce:30:35:f6:fc:68:19: 56:d3:cc:04:20:59:07:4a:f8:99:d3:22:97:14:80: 8c:b6:37:e6:4f:76:4b:43:15:15:68:a0:1a:36:3d: 5b:e4:77:4b:78:93:92:03:66:ed:ad:33:f3:70:7f: 65:ff:da:dc:dc:fd:73:a0:47:18:87:e0:2e:6f:fb: d0:4e:aa:ec:44:12:f0:64:7d:4d:03:70:9c:83:05: 45:be:7c:39:e7:1a:76:35:33:4b:7e:19:72:ba:48: d5:5e:7f:60:33:19:15:c3:47:6f:55:77:cf:f5:33: e3:8e:e8:41:88:ba:16:c9:43:43:ec:0b:c4:3f:76: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F8:6E:AA:ED:22:E2:53:CA:66:60:D2:2F:C3:5A:DA:53:36:9D:36 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:61:8a:12:bf:38:34:f7:38:43:00:8a:62:6d:db:41:3c: 9b:49:a2:5e:63:97:28:a8:34:68:41:6b:91:7c:d4:ed:81:67: ae:4c:0e:e6:03:c5:9d:3c:f1:a9:ab:31:1f:bc:1f:00:49:8e: 6d:c7:42:b6:e3:67:15:ee:d2:d7:ee:20:2a:15:93:e9:aa:3c: 16:31:cb:69:df:a8:44:7e:9e:9c:e2:ee:68:67:4b:fd:c4:66: eb:75:cc:a8:8c:fa:03:70:22:03:61:99:d2:1c:02:02:e3:f1: 3c:9a:d6:03:4c:ec:5d:a0:95:73:09:f9:4d:b5:8c:8a:50:5c: 50:dd:ef:c1:7c:94:87:97:8e:10:b0:50:93:b8:09:82:fe:6f: be:fa:71:93:bc:bc:55:e8:3b:03:74:14:ea:41:34:73:ec:df: b2:70:08:c9:36:56:02:68:7b:ff:d4:3a:27:86:a2:f3:2b:09: 15:8c:e9:14:58:6f:b0:42:21:96:0b:f0:62:8b:1a:00:a5:52: 80:5c:dc:c3:7f:1b:46:08:d6:01:3e:ee:2a:6d:4e:2b:1b:9e: 56:e3:5d:73:59:e4:80:86:3b:e6:ac:88:71:6a:bf:98:0b:e2: 4b:e7:cd:c1:20:43:ec:e6:5c:5e:2d:16:34:b6:09:2b:38:47: 80:4d:29:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQjY0M0ZFQjMwMzI3NDIxNDhGM0FGOUMzNTM5MzM4RDU1 NDkzNzIyODAeFw0yNTEwMTkxMTQxMDVaFw0yNTEwMjYxMTQxMDVaMBgxFjAUBgNV BAMTDTY4ZjRjZTUxLTNhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8XOoYODmqwqlJXJeaUXdIN575XWrtcCpg8C2JAR0Rv4uDRZ8FC8rSgz/Pm82Q IIETDiyVUxIvlmTFRTPKRby+wU3ukj1BPzr1NWeI8EdjvcXWkkiBdPxNXxl7WVcK 7ADf22WirUSqVjuFd5SSa2uj2XW3CIBriXB756Yy6eSpzjA19vxoGVbTzAQgWQdK +JnTIpcUgIy2N+ZPdktDFRVooBo2PVvkd0t4k5IDZu2tM/Nwf2X/2tzc/XOgRxiH 4C5v+9BOquxEEvBkfU0DcJyDBUW+fDnnGnY1M0t+GXK6SNVef2AzGRXDR29Vd8/1 M+OO6EGIuhbJQ0PsC8Q/dl0JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM/huqu0i 4lPKZmDSL8Na2lM2nTYwHwYDVR0jBBgwFoAUtkP+swMnQhSPOvnDU5M41VSTcigw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzRGNzY5RDU4QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNp Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGtQLXN3TW5RaFNQT3ZuRFU1TTQxVlNUY2lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzRGNzY5RDU4QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhT UE92bkRVNU00MVZTVGNpZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1SYYoSvzg09zhDAIpibdtBPJtJol5jlyioNGhBa5F81O2BZ65MDuYD xZ088amrMR+8HwBJjm3HQrbjZxXu0tfuICoVk+mqPBYxy2nfqER+npzi7mhnS/3E Zut1zKiM+gNwIgNhmdIcAgLj8Tya1gNM7F2glXMJ+U21jIpQXFDd78F8lIeXjhCw UJO4CYL+b776cZO8vFXoOwN0FOpBNHPs37JwCMk2VgJoe//UOieGovMrCRWM6RRY b7BCIZYL8GKLGgClUoBc3MN/G0YI1gE+7iptTisbnlbjXXNZ5ICGO+asiHFqv5gL 4kvnzcEgQ+zmXF4tFjS2CSs4R4BNKbo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:57:53 2025 by rpki-client