$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: W42oEHRgfwSbnZb3qPZ4ncoHosSmMbsIN13dY4WCQhE= Subject key identifier: 5E:C2:92:F0:5A:D5:35:C4:BC:A5:25:D5:B4:E8:E0:B1:CD:99:6B:CF Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:19:32 +0000 Manifest this update: Sun 19 Oct 2025 09:19:31 +0000 Manifest next update: Sun 26 Oct 2025 09:19:31 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: 0Vq+WjuCxDhhr4XA8e6Zg+UYlT8T6Z2f8IvmkFfj7Z4=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Oct 19 09:19:31 2025 GMT Not After : Oct 26 09:19:31 2025 GMT Subject: CN=68f4ad23-37b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:fd:45:45:28:29:31:12:ce:d1:cf:68:0e: 80:f6:68:eb:6d:44:05:f8:10:f8:a0:32:0c:21:39: d1:63:fe:0c:91:20:93:57:4e:45:24:5e:26:a4:2e: 4f:48:27:51:44:3b:08:d5:db:8e:de:10:7f:31:77: 3e:26:16:ff:ec:66:38:b5:de:81:b0:58:a0:3a:cd: 1b:27:3c:d5:17:0c:bf:96:26:89:ff:8d:19:06:5b: ac:d6:4e:1b:fd:7a:d5:83:87:ef:68:11:fd:d1:8e: a3:43:05:e2:92:b7:f6:3f:6d:db:2d:17:1d:0d:3d: 0c:e7:66:c2:1b:04:16:1f:5c:d9:2d:1f:ae:92:40: db:8e:d4:ef:c9:9f:ea:09:0c:4a:7e:a8:c6:73:39: c8:11:34:7a:09:2c:67:0b:95:80:43:4b:ed:dd:89: b4:e7:a6:c6:d6:e2:62:9f:eb:a0:32:b8:44:62:17: 97:a2:bf:49:4c:1d:cf:6c:1d:f3:bb:f0:f3:8c:4c: 36:7f:4c:0f:85:24:6c:74:c8:37:91:31:86:91:31: 82:df:0d:ce:e3:b4:57:2f:0c:3d:67:39:18:65:5d: 92:82:f9:51:68:21:20:2b:8c:14:13:d7:10:6b:31: 00:b5:15:56:48:2b:42:62:00:6e:72:03:8e:2b:1d: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:92:F0:5A:D5:35:C4:BC:A5:25:D5:B4:E8:E0:B1:CD:99:6B:CF X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:03:53:a4:88:6c:4d:9e:c4:4a:72:a8:b2:c1:72:1d:ac: 32:36:7b:dd:58:ec:87:d8:a5:cd:3c:91:f3:a5:eb:45:3f:47: 44:b3:8c:55:8c:94:d1:f0:3e:82:f8:21:54:d8:5b:05:8d:85: 47:29:6d:05:14:04:2f:00:54:36:8f:59:03:11:86:d4:51:05: c1:b9:78:b0:f6:31:36:66:09:88:4f:26:05:78:32:d2:09:e1: e1:68:16:d8:49:f1:c3:30:4f:ca:1f:2c:ea:4d:5e:95:f8:63: 2c:11:3a:fe:fb:60:37:a0:b2:51:0d:0e:e9:5c:4f:fe:48:0e: 15:04:31:dd:e4:0f:f7:8e:a8:24:c9:fa:40:f7:c2:60:ea:1c: 5e:a4:30:2c:9b:18:29:fa:10:68:23:c7:3d:a3:ad:32:39:34: 82:5c:2d:de:30:5d:c6:6f:61:20:c8:fa:aa:5f:16:6e:ad:a2: 04:f0:9b:ec:32:86:af:1b:c8:93:eb:a4:83:90:d9:35:7f:4b: e5:c4:7e:a5:75:c5:db:09:cf:dc:c6:de:9f:e4:cc:b4:7b:b9: 95:d0:c5:57:3c:1e:38:28:88:53:26:6e:1f:6e:22:db:4c:e0: 52:cc:68:48:62:94:6e:55:7e:ca:06:b5:e5:5e:40:1a:f4:2d: 91:42:ac:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUxMDE5MDkxOTMxWhcNMjUxMDI2MDkxOTMxWjAYMRYwFAYD VQQDEw02OGY0YWQyMy0zN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mz9RUUoKTESztHPaA6A9mjrbUQF+BD4oDIMITnRY/4MkSCTV05FJF4mpC5P SCdRRDsI1duO3hB/MXc+Jhb/7GY4td6BsFigOs0bJzzVFwy/liaJ/40ZBlus1k4b /XrVg4fvaBH90Y6jQwXikrf2P23bLRcdDT0M52bCGwQWH1zZLR+ukkDbjtTvyZ/q CQxKfqjGcznIETR6CSxnC5WAQ0vt3Ym056bG1uJin+ugMrhEYheXor9JTB3PbB3z u/DzjEw2f0wPhSRsdMg3kTGGkTGC3w3O47RXLww9ZzkYZV2SgvlRaCEgK4wUE9cQ azEAtRVWSCtCYgBucgOOKx25yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7CkvBa 1TXEvKUl1bTo4LHNmWvPMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKgANTpIhsTZ7ESnKossFyHawyNnvdWOyH2KXNPJHzpetFP0dEs4xV jJTR8D6C+CFU2FsFjYVHKW0FFAQvAFQ2j1kDEYbUUQXBuXiw9jE2ZgmITyYFeDLS CeHhaBbYSfHDME/KHyzqTV6V+GMsETr++2A3oLJRDQ7pXE/+SA4VBDHd5A/3jqgk yfpA98Jg6hxepDAsmxgp+hBoI8c9o60yOTSCXC3eMF3Gb2EgyPqqXxZuraIE8Jvs MoavG8iT66SDkNk1f0vlxH6ldcXbCc/cxt6f5My0e7mV0MVXPB44KIhTJm4fbiLb TOBSzGhIYpRuVX7KBrXlXkAa9C2RQqwn -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:06 2025 by rpki-client