$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: roRkmv+EovgyKrOqnBcYbTHLTkxKuCAxrFIQ/DnX2B4= Subject key identifier: A1:3E:52:19:8C:67:A5:4B:09:C5:F0:5F:F3:2D:A8:BF:5B:39:45:D9 Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 7C Signing time: Sun 19 Oct 2025 10:06:19 +0000 Manifest this update: Sun 19 Oct 2025 10:06:18 +0000 Manifest next update: Sun 26 Oct 2025 10:06:18 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: dkDF5tNtGZh+RRy9hHL1tNG6ZndaK/y9tKgQgWvWdYk=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Oct 19 10:06:18 2025 GMT Not After : Oct 26 10:06:18 2025 GMT Subject: CN=68f4b81a-5bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:97:0c:35:44:9d:00:f4:dc:6c:a0:94:15: 82:fe:17:90:6e:e0:ee:9d:d1:b3:75:d7:11:fc:78: 5f:92:33:b0:5f:ec:3d:24:d3:51:fb:c1:59:3a:00: 71:ec:e2:63:4d:2a:01:43:30:77:d3:85:89:e2:20: fa:da:3b:85:b8:77:8b:8c:e6:a9:28:fc:76:5d:47: ea:81:de:a8:48:12:84:73:05:74:56:08:05:53:af: b4:43:7f:5f:49:07:b4:e8:01:1d:ce:5b:b2:08:c3: 42:41:55:fe:59:db:0b:4a:0a:e7:f1:36:1d:3b:8a: 91:53:77:a7:df:8c:6c:36:f5:d6:40:c3:72:a3:5d: 3c:12:f8:00:9a:a7:00:54:05:ce:da:9b:67:40:d7: c1:7a:c9:5f:5f:ff:3b:1c:85:43:f4:7e:81:7c:09: 0f:cf:f0:c9:09:83:52:74:d9:0d:47:f8:8d:78:05: fb:36:d4:6a:56:d9:cb:d8:eb:31:bc:ad:15:07:bf: 36:cd:50:1b:2d:7e:80:c5:5d:15:3d:57:e9:92:80: 65:e8:e2:3d:92:80:38:67:4b:74:89:90:c0:4e:82: 08:2a:09:e7:87:67:51:a5:29:8c:8d:98:16:ee:21: a1:21:0d:ae:3e:b2:39:95:62:21:8c:d3:f2:4d:7c: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3E:52:19:8C:67:A5:4B:09:C5:F0:5F:F3:2D:A8:BF:5B:39:45:D9 X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:02:98:81:c3:64:25:4a:cf:1d:6f:b7:d0:3f:00:1b:34:00: e5:a4:47:70:b6:ba:29:58:61:5d:d7:5f:15:0a:f1:47:69:b6: 1a:ee:95:b7:b0:d6:e5:8e:ad:eb:de:63:51:e4:70:aa:33:69: ef:2c:d0:f6:53:51:16:d2:4d:57:01:92:65:a7:50:8f:b0:77: 91:b1:b5:f3:82:6a:82:9d:d2:de:bf:08:6c:0a:cb:3e:dc:db: 9c:1d:5c:b4:99:0d:11:47:c9:12:9b:da:a1:28:6c:3d:0e:bc: d1:d0:e1:4d:09:4a:b7:6a:b8:37:59:7d:e5:17:86:68:4c:c1: c9:0a:73:20:80:3c:b0:a2:4f:6c:e2:a4:4c:3a:77:9c:74:61: 4b:8a:c6:94:c6:56:40:41:d0:86:ae:1a:c6:b3:10:a3:a5:4c: d7:e1:48:8e:07:46:6d:9c:bc:a3:77:35:98:25:ee:a6:ac:f2: fd:29:aa:92:54:6c:4c:8d:d7:d0:d1:1d:d5:0a:15:b6:ab:15: 71:d5:a3:3b:51:3f:58:d5:c8:80:06:1b:53:74:3c:c4:d3:85: 2a:25:aa:9d:7b:c8:7a:ae:f3:90:5a:4c:7c:f9:9a:26:d0:a4: 60:47:f7:79:e0:20:0d:dc:e2:f1:5e:76:0a:e6:37:5a:74:58: 03:a6:7b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4 QkE5RkFCQUEwHhcNMjUxMDE5MTAwNjE4WhcNMjUxMDI2MTAwNjE4WjAYMRYwFAYD VQQDEw02OGY0YjgxYS01YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2GXDDVEnQD03GyglBWC/heQbuDundGzddcR/HhfkjOwX+w9JNNR+8FZOgBx 7OJjTSoBQzB304WJ4iD62juFuHeLjOapKPx2XUfqgd6oSBKEcwV0VggFU6+0Q39f SQe06AEdzluyCMNCQVX+WdsLSgrn8TYdO4qRU3en34xsNvXWQMNyo108EvgAmqcA VAXO2ptnQNfBeslfX/87HIVD9H6BfAkPz/DJCYNSdNkNR/iNeAX7NtRqVtnL2Osx vK0VB782zVAbLX6AxV0VPVfpkoBl6OI9koA4Z0t0iZDAToIIKgnnh2dRpSmMjZgW 7iGhIQ2uPrI5lWIhjNPyTXzVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE+UhmM Z6VLCcXwX/MtqL9bOUXZMB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1 RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2 WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYApiBw2QlSs8db7fQPwAbNADlpEdwtropWGFd118VCvFHabYa7pW3 sNbljq3r3mNR5HCqM2nvLND2U1EW0k1XAZJlp1CPsHeRsbXzgmqCndLevwhsCss+ 3NucHVy0mQ0RR8kSm9qhKGw9DrzR0OFNCUq3arg3WX3lF4ZoTMHJCnMggDywok9s 4qRMOnecdGFLisaUxlZAQdCGrhrGsxCjpUzX4UiOB0ZtnLyjdzWYJe6mrPL9KaqS VGxMjdfQ0R3VChW2qxVx1aM7UT9Y1ciABhtTdDzE04UqJaqde8h6rvOQWkx8+Zom 0KRgR/d54CAN3OLxXnYK5jdadFgDpnv/ -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:22 2025 by rpki-client