$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: CooEXKKB0AQ2ugdB/7T9LniAbKihYj0HDnWqeV+5Mas= Subject key identifier: EA:4D:AB:D0:32:9A:F7:32:BF:46:B6:A0:48:98:7F:F2:FF:AA:B6:34 Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 0225 Signing time: Sun 19 Oct 2025 04:19:54 +0000 Manifest this update: Sun 19 Oct 2025 04:19:54 +0000 Manifest next update: Sun 26 Oct 2025 04:19:54 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: 1dquPUjnb/WG7LvCg/CuMfx7VOQM2g3sNrcYlsefrQc=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Oct 19 04:19:54 2025 GMT Not After : Oct 26 04:19:54 2025 GMT Subject: CN=68f466ea-a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:43:a0:6f:b3:9e:80:8f:4a:b6:73:3b:af: 6f:51:1b:10:2f:6e:c3:de:3e:fc:52:01:c8:7a:a2: c0:94:4e:f3:b5:77:f3:b5:f5:95:00:93:65:91:39: 2b:aa:3e:df:70:66:e8:89:71:c3:8b:a0:9a:81:2a: 39:7e:dd:d4:22:92:f5:07:cf:85:81:10:a5:68:aa: b3:58:53:ad:d8:18:7a:96:1b:ec:17:00:8f:5a:e0: be:bc:b4:18:f2:06:a7:df:79:47:84:70:7c:71:a1: b2:68:75:e0:57:8b:c9:63:2e:40:fe:22:0a:a9:89: 52:f0:57:43:41:00:ba:e8:18:33:6d:1b:ba:de:90: fc:f8:2a:7c:26:73:65:74:99:fe:ce:85:4a:ab:75: 22:d5:7b:8c:18:9d:2a:75:96:19:79:3a:b5:c0:db: 37:65:79:2b:32:b8:eb:aa:bc:75:71:9b:ab:15:c0: 15:5d:4b:c3:7b:0b:d8:91:11:f5:09:57:72:8e:08: cd:91:7f:40:e8:2d:35:55:ae:9e:61:b4:33:20:a2: bf:66:ac:83:cc:0a:3b:d1:8c:f9:75:5d:ba:1c:3b: 46:4d:9f:37:8a:18:ae:ec:f8:51:13:57:57:59:ac: 20:07:4d:4c:52:4c:94:6a:0a:d4:5c:58:a6:43:f5: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:AB:D0:32:9A:F7:32:BF:46:B6:A0:48:98:7F:F2:FF:AA:B6:34 X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1f:a9:14:a8:e6:76:0c:5b:3a:f8:58:4f:43:c3:91:ec:6e: b2:a1:83:27:0d:d7:bf:b6:88:3c:e5:b7:53:64:25:77:64:ff: 30:46:6d:a5:12:96:de:02:f2:ab:27:42:32:b2:27:95:09:09: 6d:98:1b:8a:da:57:c7:74:b7:7d:42:c8:65:c8:27:65:6f:1a: 56:07:1c:bc:6f:e3:e1:d1:34:91:80:0c:1e:b8:dc:49:a0:77: 6c:6e:f4:3e:43:7f:70:d8:0e:9b:52:42:be:12:49:c7:e7:ad: e1:61:5b:58:13:30:4b:75:28:f2:14:66:ab:0d:81:e3:a3:80: a6:74:ee:60:c5:a9:29:89:f7:14:e1:b5:32:57:d8:77:c3:47: 0d:7d:2e:3f:b4:fc:9c:95:59:46:26:13:40:1e:81:57:bb:7c: d7:c2:a2:23:cf:1a:39:bf:ce:b5:9d:ca:8a:15:eb:8a:e2:d1: 0d:8e:ba:3b:55:f6:b3:d3:41:59:8f:52:bf:a2:8c:83:37:21: 1a:69:de:64:e1:08:a9:25:8a:fa:92:74:46:97:61:a4:14:25: 7c:9d:17:f2:91:1f:16:ec:23:c4:ac:72:31:1d:f3:45:b2:33: 41:57:90:50:d6:9a:86:5e:f1:cd:dd:61:2d:c2:92:ee:76:34: 18:50:cb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjUxMDE5MDQxOTU0WhcNMjUxMDI2MDQxOTU0WjAYMRYwFAYD VQQDEw02OGY0NjZlYS1hMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4FDoG+znoCPSrZzO69vURsQL27D3j78UgHIeqLAlE7ztXfztfWVAJNlkTkr qj7fcGboiXHDi6CagSo5ft3UIpL1B8+FgRClaKqzWFOt2Bh6lhvsFwCPWuC+vLQY 8gan33lHhHB8caGyaHXgV4vJYy5A/iIKqYlS8FdDQQC66BgzbRu63pD8+Cp8JnNl dJn+zoVKq3Ui1XuMGJ0qdZYZeTq1wNs3ZXkrMrjrqrx1cZurFcAVXUvDewvYkRH1 CVdyjgjNkX9A6C01Va6eYbQzIKK/ZqyDzAo70Yz5dV26HDtGTZ83ihiu7PhRE1dX WawgB01MUkyUagrUXFimQ/U4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpNq9Ay mvcyv0a2oEiYf/L/qrY0MB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmH6kUqOZ2DFs6+FhPQ8OR7G6yoYMnDde/tog85bdTZCV3ZP8wRm2l EpbeAvKrJ0IysieVCQltmBuK2lfHdLd9QshlyCdlbxpWBxy8b+Ph0TSRgAweuNxJ oHdsbvQ+Q39w2A6bUkK+EknH563hYVtYEzBLdSjyFGarDYHjo4CmdO5gxakpifcU 4bUyV9h3w0cNfS4/tPyclVlGJhNAHoFXu3zXwqIjzxo5v861ncqKFeuK4tENjro7 Vfaz00FZj1K/ooyDNyEaad5k4QipJYr6knRGl2GkFCV8nRfykR8W7CPErHIxHfNF sjNBV5BQ1pqGXvHN3WEtwpLudjQYUMtl -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:29 2025 by rpki-client