$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: 9QHkCPBnhzYdPh7xws62N6kci7X/ywipNK0tab53Nd0= Subject key identifier: 36:2E:8E:2A:0C:C0:82:96:8F:89:35:65:F6:3E:52:F8:4F:8C:A8:EE Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 2053 Signing time: Mon 20 Oct 2025 16:59:36 +0000 Manifest this update: Mon 20 Oct 2025 16:59:35 +0000 Manifest next update: Mon 27 Oct 2025 16:59:35 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: gDelhl6ae25LFDo+jflbjaiFxJzBWsp/1tsskqiEwXY=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Oct 20 16:59:35 2025 GMT Not After : Oct 27 16:59:35 2025 GMT Subject: CN=68f66a77-24af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:9a:5d:fa:e9:85:9f:36:34:d9:aa:4a:09: 87:9d:f2:a7:4e:4a:c4:b0:1a:72:da:b9:37:09:91: ad:b7:30:d1:4e:1a:25:8b:b5:33:d7:ab:1a:a9:98: ad:f1:7e:b9:fd:d8:2d:7c:14:7d:18:a8:c1:20:d3: 78:b0:25:58:a6:a0:80:1b:0b:e3:2b:79:e4:f7:c3: 65:5c:bc:1b:f7:fb:35:4c:3f:f7:b7:85:b2:84:0a: 80:e3:a7:ef:2f:61:31:cc:5b:50:b2:2c:8a:d8:1d: 13:81:22:33:c8:cb:e5:ca:ec:5d:85:63:4a:a0:7b: b5:1a:84:fc:e7:a7:16:e1:a7:6f:b1:c1:5b:0c:67: 0f:13:e8:77:79:de:bf:ce:ff:2f:ed:c5:53:58:41: ca:35:07:a1:cb:bf:b5:f7:a1:d7:4c:2f:eb:01:79: d6:52:ee:65:21:b9:b5:3e:76:f5:a7:ad:cd:f5:e0: d9:b9:da:bf:9a:6f:1c:0e:20:28:0d:7a:35:f1:91: 31:45:f3:84:94:c3:2f:1a:33:0d:c6:f2:f9:29:8f: c7:1c:93:a0:1a:32:ee:94:f4:b3:8d:63:ec:b4:ae: 6a:7d:33:f7:fa:dc:c3:e0:30:ba:81:8b:e3:f0:17: 8b:d9:c3:dd:9e:3a:8e:d8:1e:ae:9f:e3:af:e1:94: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:8E:2A:0C:C0:82:96:8F:89:35:65:F6:3E:52:F8:4F:8C:A8:EE X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:07:ae:92:3c:4a:e9:ff:79:f3:2e:b0:d5:c8:b7:b9:e8:79: 46:97:29:dd:9c:a4:cf:84:0e:e9:51:94:12:9d:2b:1c:2f:4d: 17:78:e3:d4:55:ae:f6:a3:63:53:95:7d:84:e7:6d:89:58:3f: 28:c5:41:25:5e:0f:0b:d0:8a:f9:8e:08:0c:d6:32:19:ab:73: fc:25:55:83:36:6c:01:67:41:2b:fa:1e:52:2b:e7:27:7f:25: 41:95:9f:ef:49:d0:5c:21:e8:b6:f3:92:1b:78:a7:8c:6a:72: 57:6b:c2:e7:32:a1:02:84:cf:8a:54:d1:5f:40:5f:a3:76:b9: 0e:18:a8:5d:99:3a:92:5c:08:38:8e:49:07:3a:b2:d4:d3:cf: 9f:1d:cd:9e:66:18:a4:3c:22:c7:df:3d:3d:fb:b3:df:c1:4d: 3f:f0:b7:ec:7f:d8:ff:45:c6:f5:d0:19:b6:bb:0e:92:94:c6: 8e:e1:86:b8:00:0c:6d:e7:95:fa:07:91:d9:40:26:35:38:80: 51:64:9b:3c:ee:52:6e:b3:e1:20:14:33:6a:31:e2:c5:df:a8: 1d:e2:b6:3d:86:68:7b:d7:8d:ed:f8:4d:4e:bb:ca:9b:7a:5d: 81:1b:45:b8:a5:7d:96:51:8a:0e:aa:ce:03:4e:8d:10:94:16: af:80:b3:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUxMDIwMTY1OTM1WhcNMjUxMDI3MTY1OTM1WjAYMRYwFAYD VQQDEw02OGY2NmE3Ny0yNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8aaXfrphZ82NNmqSgmHnfKnTkrEsBpy2rk3CZGttzDRTholi7Uz16saqZit 8X65/dgtfBR9GKjBINN4sCVYpqCAGwvjK3nk98NlXLwb9/s1TD/3t4WyhAqA46fv L2ExzFtQsiyK2B0TgSIzyMvlyuxdhWNKoHu1GoT856cW4advscFbDGcPE+h3ed6/ zv8v7cVTWEHKNQehy7+196HXTC/rAXnWUu5lIbm1Pnb1p63N9eDZudq/mm8cDiAo DXo18ZExRfOElMMvGjMNxvL5KY/HHJOgGjLulPSzjWPstK5qfTP3+tzD4DC6gYvj 8BeL2cPdnjqO2B6un+Ov4ZRLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYujioM wIKWj4k1ZfY+UvhPjKjuMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFB66SPErp/3nzLrDVyLe56HlGlyndnKTPhA7pUZQSnSscL00XeOPU Va72o2NTlX2E522JWD8oxUElXg8L0Ir5jggM1jIZq3P8JVWDNmwBZ0Er+h5SK+cn fyVBlZ/vSdBcIei285IbeKeManJXa8LnMqEChM+KVNFfQF+jdrkOGKhdmTqSXAg4 jkkHOrLU08+fHc2eZhikPCLH3z09+7PfwU0/8Lfsf9j/Rcb10Bm2uw6SlMaO4Ya4 AAxt55X6B5HZQCY1OIBRZJs87lJus+EgFDNqMeLF36gd4rY9hmh7143t+E1Ou8qb el2BG0W4pX2WUYoOqs4DTo0QlBavgLMA -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:26 2025 by rpki-client