$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: ELPE8QFotG1GqQZ1tzDxw0vsMv+LaWdxZY0R75etoSc= Subject key identifier: FB:D8:FD:A1:09:FB:EC:99:43:25:3D:4C:ED:02:35:67:D2:9B:D3:A3 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 081C Signing time: Sat 18 Oct 2025 22:07:29 +0000 Manifest this update: Sat 18 Oct 2025 22:07:28 +0000 Manifest next update: Sat 25 Oct 2025 22:07:28 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: K7L466DYRaSfNazOU4gRcS0z4Y+6f3bJH3wZrb3klg0=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Oct 18 22:07:28 2025 GMT Not After : Oct 25 22:07:28 2025 GMT Subject: CN=68f40fa1-7e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:a4:6a:e2:d9:09:88:ef:42:2c:ae:07:80: 1f:c9:17:f4:18:f6:a6:ad:ed:57:30:e0:66:40:dc: 64:4c:f0:1f:c6:91:c4:45:cd:51:78:82:ee:eb:58: 91:ba:72:95:85:d4:dd:76:29:a4:ab:85:d4:03:d3: 05:e3:b8:48:77:40:5b:5a:7f:9d:b6:f2:58:88:45: 13:0d:c8:57:03:3c:db:f7:20:ea:b6:d1:90:90:88: cc:47:3b:93:84:30:02:29:3e:1d:7a:be:18:fb:3d: 74:e3:d1:34:a0:8d:e6:d0:1d:85:8c:fd:d0:e3:c3: 5c:a7:34:a0:f0:cf:92:ec:ef:d6:d0:b1:ef:f1:4e: c4:c3:5f:70:7f:3f:3e:dc:a8:9e:1f:86:dd:74:b1: 4c:58:3b:c8:34:f9:68:bd:3d:80:82:0d:1b:49:4b: 72:af:ee:70:24:a2:c3:60:53:19:ae:0a:45:64:dd: a1:6f:c8:62:d9:7b:c4:7e:92:79:45:ea:16:8e:20: a1:3a:84:cc:f7:29:4a:1e:30:ae:d9:d6:6b:fc:3a: 60:9e:79:cb:81:68:d2:8b:72:6d:a4:c2:73:76:b8: 9d:8b:11:a0:e8:a3:68:78:ad:a3:c1:05:c5:6d:a4: b0:74:ac:74:cc:09:08:60:fb:a1:ab:dc:a3:d1:1b: 7c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D8:FD:A1:09:FB:EC:99:43:25:3D:4C:ED:02:35:67:D2:9B:D3:A3 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:eb:ea:b8:79:49:7e:03:9f:aa:b8:80:b5:95:a4:ae:7f:e7: 34:72:73:6a:16:83:3f:dc:11:de:bb:90:db:20:ab:90:dc:28: e2:a7:a2:0f:6c:6c:76:8d:71:ef:ff:89:8f:29:1e:95:58:8c: cd:02:8a:a7:30:9b:92:89:15:63:08:09:b5:3b:51:44:24:2c: b8:44:a5:32:96:80:cc:4b:c1:81:8e:1d:69:88:ae:34:15:c3: 45:14:27:2b:4a:2e:42:20:f6:37:6b:99:b3:53:ca:c3:54:e1: 1b:bc:64:8c:95:e7:9b:44:15:a7:64:56:64:2a:b9:72:be:84: 90:35:8c:3e:87:68:fe:b1:0d:f2:b7:9e:32:3c:c8:6f:c2:b2: 1a:0b:9a:73:d9:f9:7a:4d:2e:a9:7d:a2:4d:aa:2a:b4:03:a2: 32:fb:a6:61:1a:5b:2b:1c:46:0b:5d:17:66:45:db:af:5e:7f: 67:1e:09:8d:f3:d9:8c:1d:c6:b9:11:fc:c1:52:c8:2b:d7:b0: 17:df:af:fc:e2:64:31:08:31:fe:77:07:da:76:1a:46:cc:91: d1:4f:7b:88:80:d3:4a:f5:b7:05:27:1a:eb:bf:c8:e7:2a:80: 8b:2e:8a:8e:f2:b7:5f:85:b0:5c:70:2d:70:19:42:fc:26:72: 16:68:2b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUxMDE4MjIwNzI4WhcNMjUxMDI1MjIwNzI4WjAYMRYwFAYD VQQDEw02OGY0MGZhMS03ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnN+kauLZCYjvQiyuB4AfyRf0GPamre1XMOBmQNxkTPAfxpHERc1ReILu61iR unKVhdTddimkq4XUA9MF47hId0BbWn+dtvJYiEUTDchXAzzb9yDqttGQkIjMRzuT hDACKT4der4Y+z1049E0oI3m0B2FjP3Q48NcpzSg8M+S7O/W0LHv8U7Ew19wfz8+ 3KieH4bddLFMWDvINPlovT2Agg0bSUtyr+5wJKLDYFMZrgpFZN2hb8hi2XvEfpJ5 ReoWjiChOoTM9ylKHjCu2dZr/DpgnnnLgWjSi3JtpMJzdridixGg6KNoeK2jwQXF baSwdKx0zAkIYPuhq9yj0Rt8jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvY/aEJ ++yZQyU9TO0CNWfSm9OjMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6+q4eUl+A5+quIC1laSuf+c0cnNqFoM/3BHeu5DbIKuQ3Cjip6IP bGx2jXHv/4mPKR6VWIzNAoqnMJuSiRVjCAm1O1FEJCy4RKUyloDMS8GBjh1piK40 FcNFFCcrSi5CIPY3a5mzU8rDVOEbvGSMleebRBWnZFZkKrlyvoSQNYw+h2j+sQ3y t54yPMhvwrIaC5pz2fl6TS6pfaJNqiq0A6Iy+6ZhGlsrHEYLXRdmRduvXn9nHgmN 89mMHca5EfzBUsgr17AX36/84mQxCDH+dwfadhpGzJHRT3uIgNNK9bcFJxrrv8jn KoCLLoqO8rdfhbBccC1wGUL8JnIWaCuh -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:20 2025 by rpki-client