$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: /0oU8tScoZjQx/mWnncZkoqwb8A/Ofdyc+BOJRKHdiI= Subject key identifier: 46:DE:23:54:A9:C1:2F:BA:C7:2C:6D:73:D7:85:3C:3C:F9:10:AD:78 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C9E Signing time: Mon 20 Oct 2025 18:51:14 +0000 Manifest this update: Mon 20 Oct 2025 18:51:13 +0000 Manifest next update: Mon 27 Oct 2025 18:51:13 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: jRa060vGXLOGTvbwipYIxjlLYvNCVfLvB6dSdBaVmMw=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Oct 20 18:51:13 2025 GMT Not After : Oct 27 18:51:13 2025 GMT Subject: CN=68f684a1-0602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:7a:47:9c:8f:73:c4:cd:a1:69:e8:66:16: 2e:92:84:95:94:ec:79:23:f9:16:4c:1a:df:22:f8: 55:ad:1f:a9:84:44:13:95:93:5d:53:3e:ce:52:97: d0:de:7b:18:7e:80:0d:14:c9:51:d0:c6:cf:0a:d8: 94:23:5b:95:67:49:51:a7:30:67:46:74:3d:89:74: bd:11:a8:eb:00:dd:fa:ef:bc:8f:b9:ea:71:da:70: e2:19:4a:14:e7:18:48:c0:a7:84:71:e6:24:7b:00: 60:32:50:cb:c8:13:c8:58:bf:80:c5:d5:9a:03:69: cb:32:da:18:b6:82:65:68:6d:ff:5a:22:f5:f8:76: ff:88:d9:dd:fb:b8:03:cf:25:c4:63:96:48:d6:f1: be:dd:e7:06:6e:92:c3:02:cb:00:67:ad:f6:3d:b6: 80:0c:f6:5e:a2:4e:4d:e5:b6:79:38:16:93:2c:00: f2:64:7a:58:8a:f3:6d:81:fd:d5:18:d6:7d:af:16: f0:4f:24:e4:a2:5f:ee:5e:82:5e:65:a0:71:0c:b3: 68:d3:2c:23:0d:09:84:9a:2e:94:29:f0:ef:8e:8b: 33:5c:e4:76:63:e9:cf:c3:c8:02:a1:93:f7:40:e9: 3e:26:1a:d0:86:e5:3b:7a:96:0e:c2:8c:e6:c2:c6: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:23:54:A9:C1:2F:BA:C7:2C:6D:73:D7:85:3C:3C:F9:10:AD:78 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:81:d5:29:be:7b:53:a2:dd:72:18:35:89:2d:1d:3c:94:e2: 81:b9:25:05:7b:ab:2e:51:5b:5e:3c:c4:4f:30:45:c2:15:8a: 86:31:dd:72:7f:6c:81:62:af:47:f0:89:48:0a:4a:36:fc:d5: 65:b9:bb:eb:70:51:c9:e9:b1:47:c0:e1:a2:75:f3:db:a4:55: bc:a1:d4:3f:3b:20:5e:9f:bc:d3:64:b9:69:c0:f8:44:30:8d: 90:4d:b0:44:fa:aa:4b:00:4c:fd:23:5e:6f:4c:f2:0d:a8:9d: 17:d7:99:e0:ef:db:ca:6c:af:7d:3a:b1:db:64:43:dd:08:fd: d7:65:c5:f8:02:d7:8d:ae:23:bc:32:fd:88:4a:1a:b7:20:b4: 49:fc:03:cf:6b:28:79:ad:4b:36:be:f4:ab:28:93:b0:8f:21: 7c:c4:6a:37:76:19:d5:01:42:68:57:ae:56:e6:d5:c8:a9:ac: d6:d9:ee:22:24:4e:fd:e4:5f:ac:7a:4a:22:e6:b1:62:4a:a9: a4:3b:ac:b6:49:0f:27:6a:02:a3:b1:da:e5:6a:a0:dd:b2:7d: 5e:c2:f6:89:83:af:0d:a8:f4:1a:63:cb:01:a9:c0:0e:4b:1b: e1:e2:1d:e4:ff:af:ef:40:fe:8c:85:d2:60:ec:fc:89:f0:f0: 4c:ec:a1:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUxMDIwMTg1MTEzWhcNMjUxMDI3MTg1MTEzWjAYMRYwFAYD VQQDEw02OGY2ODRhMS0wNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BJ6R5yPc8TNoWnoZhYukoSVlOx5I/kWTBrfIvhVrR+phEQTlZNdUz7OUpfQ 3nsYfoANFMlR0MbPCtiUI1uVZ0lRpzBnRnQ9iXS9EajrAN3677yPuepx2nDiGUoU 5xhIwKeEceYkewBgMlDLyBPIWL+AxdWaA2nLMtoYtoJlaG3/WiL1+Hb/iNnd+7gD zyXEY5ZI1vG+3ecGbpLDAssAZ632PbaADPZeok5N5bZ5OBaTLADyZHpYivNtgf3V GNZ9rxbwTyTkol/uXoJeZaBxDLNo0ywjDQmEmi6UKfDvjoszXOR2Y+nPw8gCoZP3 QOk+JhrQhuU7epYOwozmwsZxgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbeI1Sp wS+6xyxtc9eFPDz5EK14MB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIgdUpvntTot1yGDWJLR08lOKBuSUFe6suUVtePMRPMEXCFYqGMd1y f2yBYq9H8IlICko2/NVlubvrcFHJ6bFHwOGidfPbpFW8odQ/OyBen7zTZLlpwPhE MI2QTbBE+qpLAEz9I15vTPINqJ0X15ng79vKbK99OrHbZEPdCP3XZcX4AteNriO8 Mv2IShq3ILRJ/APPayh5rUs2vvSrKJOwjyF8xGo3dhnVAUJoV65W5tXIqazW2e4i JE795F+sekoi5rFiSqmkO6y2SQ8nagKjsdrlaqDdsn1ewvaJg68NqPQaY8sBqcAO Sxvh4h3k/6/vQP6MhdJg7PyJ8PBM7KHO -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:13 2025 by rpki-client