$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: uHp6J4z+o1OaWmhuFAZK29j9xek53Mrm5HVqhCPAuzg= Subject key identifier: B1:29:5C:20:88:06:C8:12:42:18:40:01:4C:6E:5D:A2:56:12:35:5D Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 05B3 Signing time: Sun 19 Oct 2025 00:49:16 +0000 Manifest this update: Sun 19 Oct 2025 00:49:16 +0000 Manifest next update: Sun 26 Oct 2025 00:49:16 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: 4OGfNhVEjxNaSosrEK/LzVDaexDz7VWpvKrGQZGVc14=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Oct 19 00:49:16 2025 GMT Not After : Oct 26 00:49:16 2025 GMT Subject: CN=68f4358c-7c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:a2:f2:bd:60:12:bb:38:da:16:aa:f8:9f: a2:85:f0:8c:ee:2e:9d:80:27:34:17:b4:14:fc:54: 78:d9:12:96:ec:29:de:22:a4:71:61:3f:23:51:50: ba:f8:40:13:13:fe:41:80:6a:49:97:8a:76:6b:9f: 52:a5:65:7e:2c:ef:c9:4a:e1:dd:0c:ff:b3:0c:99: c2:2a:91:6a:4c:30:db:7d:03:09:78:27:23:d0:b0: a8:6e:14:f4:06:d2:79:bb:ee:eb:53:8b:24:c6:5d: a7:9a:3e:d6:d2:1b:4a:7d:01:d6:29:5f:d9:a6:66: e7:94:88:09:0f:f2:de:72:df:06:8c:2d:b8:08:2b: 37:f7:52:b1:99:10:47:b2:20:ca:bc:fb:18:be:2b: 87:ac:91:28:0d:7c:e8:ec:75:5a:6a:29:f6:f7:75: 98:d3:58:8e:13:06:b6:c9:b3:b8:c1:fe:6c:1e:dd: f3:01:db:44:af:ba:c1:7f:72:04:28:68:9f:d4:99: 3d:9f:f1:ec:db:c3:02:32:8d:c0:51:bc:12:c5:55: b5:2a:57:55:f0:ef:7b:a1:49:b3:90:5a:2e:4b:66: 5c:67:0b:99:2c:c4:89:5b:23:74:23:04:15:e1:db: 3e:00:ab:ef:ed:dc:e7:a7:0e:61:be:98:c6:0d:5a: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:29:5C:20:88:06:C8:12:42:18:40:01:4C:6E:5D:A2:56:12:35:5D X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1e:6c:b3:a3:66:e4:7c:52:a4:ae:a1:66:7f:ba:87:73:ea: a1:e4:54:4c:fc:ca:e2:c2:1d:27:44:59:1d:8a:9f:44:1d:f8: a8:63:b3:ae:21:05:6f:bd:4f:ac:5d:2c:b3:4b:cc:8f:11:3a: ab:c8:a0:d9:19:08:24:9c:dc:ee:f3:23:34:eb:53:d5:60:7d: 1a:71:1b:ad:2b:f5:88:e8:de:21:fd:d3:5b:4c:37:b4:cf:d4: 69:09:93:36:3b:b7:bc:6f:a5:e4:f4:96:1a:f8:e3:d7:16:0f: 1a:c0:38:26:f4:91:6a:f8:a6:28:02:1b:2a:e5:f4:10:36:18: 75:8a:49:29:dd:51:04:db:8f:db:37:be:8d:c2:35:4f:85:11: 7e:ff:4f:d3:b4:fe:5a:35:3c:8f:30:c6:50:2c:7b:60:96:a0: 42:31:78:79:e3:26:40:ff:83:43:d3:42:c2:3e:4c:bf:95:b7: fa:9f:35:14:2c:d6:dd:ef:aa:58:ef:0b:de:fe:a3:40:d7:10: a9:44:e1:3c:3d:7c:dd:9e:1c:64:da:ab:b5:f5:d4:b1:b1:62: 8a:91:c3:df:75:52:d4:2f:a2:6f:29:e9:46:57:a0:ae:22:8b: 5b:48:c6:ab:b7:a5:c8:88:82:37:f2:8a:a4:63:04:45:a1:c9: 75:fa:33:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUxMDE5MDA0OTE2WhcNMjUxMDI2MDA0OTE2WjAYMRYwFAYD VQQDEw02OGY0MzU4Yy03YzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHGi8r1gErs42haq+J+ihfCM7i6dgCc0F7QU/FR42RKW7CneIqRxYT8jUVC6 +EATE/5BgGpJl4p2a59SpWV+LO/JSuHdDP+zDJnCKpFqTDDbfQMJeCcj0LCobhT0 BtJ5u+7rU4skxl2nmj7W0htKfQHWKV/ZpmbnlIgJD/Lect8GjC24CCs391KxmRBH siDKvPsYviuHrJEoDXzo7HVaain293WY01iOEwa2ybO4wf5sHt3zAdtEr7rBf3IE KGif1Jk9n/Hs28MCMo3AUbwSxVW1KldV8O97oUmzkFouS2ZcZwuZLMSJWyN0IwQV 4ds+AKvv7dznpw5hvpjGDVqGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEpXCCI BsgSQhhAAUxuXaJWEjVdMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoHmyzo2bkfFKkrqFmf7qHc+qh5FRM/Mriwh0nRFkdip9EHfioY7Ou IQVvvU+sXSyzS8yPETqryKDZGQgknNzu8yM061PVYH0acRutK/WI6N4h/dNbTDe0 z9RpCZM2O7e8b6Xk9JYa+OPXFg8awDgm9JFq+KYoAhsq5fQQNhh1ikkp3VEE24/b N76NwjVPhRF+/0/TtP5aNTyPMMZQLHtglqBCMXh54yZA/4ND00LCPky/lbf6nzUU LNbd76pY7wve/qNA1xCpROE8PXzdnhxk2qu19dSxsWKKkcPfdVLUL6JvKelGV6Cu IotbSMart6XIiII38oqkYwRFocl1+jNO -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:50 2025 by rpki-client