$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft File: tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json) Hash identifier: 2byUWBeZ90tgKlhFZMh4/xOyk3va+Dx7M8qYh8nZrfk= Subject key identifier: 48:5C:80:C2:78:5E:86:3E:FC:33:75:10:8D:EB:34:E7:F7:A0:07:94 Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft Manifest number: 1A Signing time: Sun 19 Oct 2025 11:28:11 +0000 Manifest this update: Sun 19 Oct 2025 11:28:10 +0000 Manifest next update: Sun 26 Oct 2025 11:28:10 +0000 Files and hashes: 1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: 0qNlSoXANTaH9EHHPlIl4TDX2qxpsGwEgwmY1kYIPZg=) 2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: 49rBi75NWLedbZFV/zCs/LhYwYBaC9SkJOjaSAzVrHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Oct 19 11:28:10 2025 GMT Not After : Oct 26 11:28:10 2025 GMT Subject: CN=68f4cb4a-a65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:65:05:40:2c:fa:37:2f:ab:61:20:b4:07: e3:c3:51:76:71:76:de:3f:6d:94:f4:7c:26:d4:48: 12:1d:7f:87:1b:62:8b:3d:60:f2:10:36:5e:0f:86: 2d:c7:28:90:69:bb:88:c7:0f:2a:79:a3:35:85:71: 44:00:c8:92:4d:5c:41:73:e9:87:7a:3f:bc:2c:df: 1f:a7:0b:f1:98:f3:2c:84:96:ea:6b:f3:0c:69:22: bb:f2:99:1c:02:03:5b:53:15:47:4c:24:05:dd:34: 7a:98:2c:27:55:da:3e:49:00:3a:8f:7d:78:c4:e9: a8:2a:b8:83:c1:dd:7c:3f:05:0a:2a:0a:44:60:20: 3f:99:a2:a3:75:7f:21:70:45:6f:d7:cd:25:7e:3d: 50:68:80:2f:38:24:2b:fc:8c:f0:67:b7:de:fa:11: ce:a3:a0:2d:66:6c:fb:60:eb:5a:8a:bb:00:51:18: 42:00:d9:4e:c9:c5:8c:1a:d8:57:f5:32:cd:16:4e: 20:89:ce:25:86:88:3c:89:33:3e:a8:72:99:e9:14: f8:52:39:83:1f:23:bd:fc:80:18:38:59:46:d5:42: a1:98:eb:93:fd:50:3d:b2:a9:20:c5:85:1b:8e:b9: 66:0e:0d:ca:51:86:9a:65:60:0e:9a:6c:8b:f5:bd: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:80:C2:78:5E:86:3E:FC:33:75:10:8D:EB:34:E7:F7:A0:07:94 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a7:0d:8e:ab:f5:59:03:7e:e1:1a:24:eb:04:7d:8c:89:95: 02:d5:2d:55:99:49:2c:21:1f:74:04:cc:76:8c:61:0e:9b:0c: a2:fa:46:2b:94:a1:38:ce:39:13:9e:f3:8f:ef:7a:86:88:24: 97:ee:bf:a2:32:3f:c8:00:97:06:48:8a:c3:c0:02:7f:ea:11: c8:ec:be:d7:77:19:c0:98:e0:55:8c:3b:53:04:93:5f:a0:ad: 6d:1d:c5:de:16:ff:a5:4f:49:7a:5f:f8:17:10:a1:c0:9d:64: 41:6c:d0:65:80:74:e5:dc:63:d4:9b:c2:1e:26:3e:a8:68:ed: 92:e4:8a:71:3e:12:39:22:ea:67:97:c5:c5:60:70:c7:1d:17: 8e:9e:c9:59:df:3a:ee:17:b5:bd:69:e4:46:08:71:14:78:3c: 97:d2:3f:2d:09:59:14:a0:4b:4e:0d:ab:db:a8:1a:5e:ff:66: 59:d2:35:2b:06:fe:7f:3b:19:27:9d:5b:49:dc:9c:97:6f:7a: 2a:dc:77:e8:44:86:2f:dc:c2:ea:fb:93:65:92:0a:4a:73:3b: 02:3a:df:1f:0d:5c:73:3f:76:3a:14:24:9c:b5:ec:3c:c9:fd: 79:94:b0:16:2c:7e:50:0b:78:d8:03:a4:d6:4e:61:ed:42:9c: 70:9e:02:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzAzNzExMC8GA1UEBRMoQjY0QjgxMDQyQUI0MTE2MDdEODYwNzZGRUZDOUU1OTYy NkJCODgxNjAeFw0yNTEwMTkxMTI4MTBaFw0yNTEwMjYxMTI4MTBaMBgxFjAUBgNV BAMTDTY4ZjRjYjRhLWE2NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRjGUFQCz6Ny+rYSC0B+PDUXZxdt4/bZT0fCbUSBIdf4cbYos9YPIQNl4Phi3H KJBpu4jHDyp5ozWFcUQAyJJNXEFz6Yd6P7ws3x+nC/GY8yyElupr8wxpIrvymRwC A1tTFUdMJAXdNHqYLCdV2j5JADqPfXjE6agquIPB3Xw/BQoqCkRgID+ZoqN1fyFw RW/XzSV+PVBogC84JCv8jPBnt976Ec6joC1mbPtg61qKuwBRGEIA2U7JxYwa2Ff1 Ms0WTiCJziWGiDyJMz6ocpnpFPhSOYMfI738gBg4WUbVQqGY65P9UD2yqSDFhRuO uWYODcpRhpplYA6abIv1vf9/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSFyAwnhe hj78M3UQjes05/egB5QwHwYDVR0jBBgwFoAUtkuBBCq0EWB9hgdv78nllia7iBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDM3LzhCOERFMjdFOEVE QzExRjA5ODgwQzQ3OEM0RjlBRTAyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGt1QkJDcTBFV0I5aGdkdjc4bmxsaWE3aUJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MDM3LzhCOERFMjdFOEVEQzExRjA5ODgwQzQ3OEM0RjlBRTAyL3RrdUJCQ3EwRVdC OWhnZHY3OG5sbGlhN2lCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6nDY6r9VkDfuEaJOsEfYyJlQLVLVWZSSwhH3QEzHaMYQ6bDKL6RiuU oTjOOROe84/veoaIJJfuv6IyP8gAlwZIisPAAn/qEcjsvtd3GcCY4FWMO1MEk1+g rW0dxd4W/6VPSXpf+BcQocCdZEFs0GWAdOXcY9Sbwh4mPqho7ZLkinE+Ejki6meX xcVgcMcdF46eyVnfOu4Xtb1p5EYIcRR4PJfSPy0JWRSgS04Nq9uoGl7/ZlnSNSsG /n87GSedW0ncnJdveircd+hEhi/cwur7k2WSCkpzOwI63x8NXHM/djoUJJy17DzJ /XmUsBYsflALeNgDpNZOYe1CnHCeAoE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:57 2025 by rpki-client