$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: SDjsyGvGPJJgZVDP8nISC+2ggQZutAy2mV2GeaI7sYo= Subject key identifier: E7:97:F9:28:FB:CA:2E:CC:63:D6:77:35:28:B5:77:35:0B:2B:80:7C Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: DC Signing time: Sun 19 Oct 2025 08:33:37 +0000 Manifest this update: Sun 19 Oct 2025 08:33:36 +0000 Manifest next update: Sun 26 Oct 2025 08:33:36 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: SR0Kdo6A5U0JF+cZvoyZB/kwnRcjGaW50McVQWoWgnw=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: Ji4FnaAA41M0xkMFETxyoill5QqKNA4PIi1n5I8VonU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Oct 19 08:33:36 2025 GMT Not After : Oct 26 08:33:36 2025 GMT Subject: CN=68f4a260-2cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:ef:a1:57:d1:7f:9a:79:c0:a8:50:c1:ab: 10:e5:ed:aa:f0:e4:8c:48:c2:a0:55:ac:ac:ad:8b: 71:0e:96:48:1c:f8:38:8a:8a:a9:39:94:1d:5a:8c: c8:3b:89:df:67:2d:71:4f:87:77:f4:41:50:1c:61: c2:6e:b2:0e:b5:c1:3f:c8:3e:40:83:82:3b:60:4d: 3d:62:ea:7e:6d:4a:f2:0b:af:ff:1c:a6:33:39:6c: d7:79:ee:e7:6c:23:5c:ac:19:ca:57:8d:af:75:08: db:1a:14:09:7f:4b:c0:fe:33:65:cc:24:aa:43:f1: 6c:2f:42:78:fd:92:41:41:b6:de:37:5c:a3:e1:e5: e4:b0:ee:0e:11:fe:4d:64:a4:ff:1b:da:e3:bd:b3: 72:3e:19:fc:de:e4:71:a7:a1:56:e8:73:bd:ca:c2: fb:dd:b8:d4:7c:14:91:0e:c6:7f:ff:ef:d2:c1:e6: 87:3e:f2:66:23:e0:27:8a:1b:87:d4:10:85:13:a7: d3:a1:4c:dd:2d:83:58:d2:ac:04:39:e0:01:0b:47: 01:81:e8:c7:51:98:56:20:0c:89:dc:28:29:01:59: 67:ad:1b:62:ef:25:d8:53:7e:09:10:ca:8a:12:51: b4:5a:16:b2:d6:93:7b:e2:2b:79:82:dc:ff:b0:b9: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:F9:28:FB:CA:2E:CC:63:D6:77:35:28:B5:77:35:0B:2B:80:7C X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:05:df:6c:f6:e0:bb:66:2f:de:76:b0:a7:ed:14:6d:02: f6:b3:b2:a8:f1:3b:71:49:7d:aa:f5:44:eb:ca:8a:76:92:69: 5f:65:03:5c:27:79:c2:57:0f:8f:ea:cf:0f:73:82:2a:d1:08: e0:ca:39:23:a9:15:18:9c:e7:36:14:b6:a0:13:5c:c7:4b:da: 1e:6c:10:fe:7f:ac:74:5d:b5:cc:b6:32:c4:cd:8a:23:15:8b: 0d:b5:a0:6c:92:13:76:5c:eb:8d:f9:cb:af:26:81:91:b0:20: 39:03:14:0a:a6:66:93:bc:11:92:60:91:9b:06:62:aa:62:ae: 2d:1b:ed:b1:af:42:bf:df:c9:87:74:90:01:56:f1:ca:77:65: 05:54:82:34:48:e1:05:26:0d:0c:25:61:0e:f2:db:75:fa:8f: 38:15:47:ba:03:43:9d:e0:17:31:a1:d8:e8:5f:b0:2a:eb:87: f1:09:eb:3b:67:51:f8:71:3d:a5:24:25:77:d7:90:fc:77:da: 65:32:83:01:cf:ff:e4:e8:5c:6d:5a:0a:a3:26:37:5d:49:2a: 77:41:90:fd:0d:0a:34:85:20:f5:2d:a5:38:98:f8:69:03:0b: 93:66:79:c7:14:e4:23:cc:6c:4f:66:53:ef:b2:5a:bc:0b:32: 6b:70:ed:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUxMDE5MDgzMzM2WhcNMjUxMDI2MDgzMzM2WjAYMRYwFAYD VQQDEw02OGY0YTI2MC0yY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RnvoVfRf5p5wKhQwasQ5e2q8OSMSMKgVaysrYtxDpZIHPg4ioqpOZQdWozI O4nfZy1xT4d39EFQHGHCbrIOtcE/yD5Ag4I7YE09Yup+bUryC6//HKYzOWzXee7n bCNcrBnKV42vdQjbGhQJf0vA/jNlzCSqQ/FsL0J4/ZJBQbbeN1yj4eXksO4OEf5N ZKT/G9rjvbNyPhn83uRxp6FW6HO9ysL73bjUfBSRDsZ//+/SweaHPvJmI+AnihuH 1BCFE6fToUzdLYNY0qwEOeABC0cBgejHUZhWIAyJ3CgpAVlnrRti7yXYU34JEMqK ElG0Whay1pN74it5gtz/sLnqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeX+Sj7 yi7MY9Z3NSi1dzULK4B8MB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DgXfbPbgu2Yv3nawp+0UbQL2s7Ko8TtxSX2q9UTryop2kmlfZQNc J3nCVw+P6s8Pc4Iq0QjgyjkjqRUYnOc2FLagE1zHS9oebBD+f6x0XbXMtjLEzYoj FYsNtaBskhN2XOuN+cuvJoGRsCA5AxQKpmaTvBGSYJGbBmKqYq4tG+2xr0K/38mH dJABVvHKd2UFVII0SOEFJg0MJWEO8tt1+o84FUe6A0Od4BcxodjoX7Aq64fxCes7 Z1H4cT2lJCV315D8d9plMoMBz//k6FxtWgqjJjddSSp3QZD9DQo0hSD1LaU4mPhp AwuTZnnHFOQjzGxPZlPvslq8CzJrcO3X -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:04 2025 by rpki-client