$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: SQXg6qGN1ysUzqsv9wgJyecpZ1ZJxVURMSHntjMRDjM= Subject key identifier: 99:85:22:88:F2:B4:F8:EB:08:AB:AA:6F:4B:26:9B:F4:3A:F9:B5:CC Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: C0 Signing time: Sun 19 Oct 2025 06:39:53 +0000 Manifest this update: Sun 19 Oct 2025 06:39:52 +0000 Manifest next update: Sun 26 Oct 2025 06:39:52 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: FFRWa8IFvbzQBI91rSu7t8gb5RlVthbDC3uMAMp5KxQ=) 2: 640E4E709F6F11F0A268CE5DC4F9AE02.roa (hash: 2zmhOrf3j4kWN7WNyi93+FWxSiadjBJUCk2CS0HquvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Oct 19 06:39:52 2025 GMT Not After : Oct 26 06:39:52 2025 GMT Subject: CN=68f487b8-43e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:0a:19:20:b5:4d:cc:91:68:34:db:34:ae: e3:93:74:24:0b:19:d2:44:9c:0f:c2:67:84:3e:ba: 96:a4:6b:7d:38:dd:a0:e6:7e:25:f9:66:68:28:af: 93:39:4b:cc:7d:e7:3e:a0:47:3e:e6:a7:97:6d:a5: 35:59:51:3d:9b:4a:17:ca:42:6a:f9:f6:82:d5:c2: c3:88:83:2b:69:92:42:e1:4b:82:50:1d:67:4f:99: 99:38:ec:61:63:e2:e1:b4:22:e8:5a:16:62:0a:bc: 9e:2b:98:4d:d8:fa:68:19:72:32:2e:46:c0:0a:ec: de:c0:ad:82:c1:fd:7d:b0:21:48:e2:29:c4:6d:c7: 07:0e:3b:ec:9a:82:78:0b:13:d8:4b:30:73:02:72: 36:7d:1b:16:4a:36:31:61:e1:3d:35:ba:08:f7:58: b8:75:ed:60:02:5f:1d:85:a0:f7:a1:d1:a3:45:56: a2:80:27:42:89:4e:e4:4a:a7:d4:89:37:9c:e2:99: 0a:d9:0a:4e:92:85:cb:c9:8b:7e:60:39:89:cd:d6: 9e:24:a5:0d:1f:b7:cd:2f:07:00:af:e9:90:5d:88: 27:a3:75:13:ff:57:af:ec:3f:21:53:4f:5c:62:dd: ff:bb:f4:0b:4e:6e:e9:4e:77:39:33:08:41:6e:10: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:22:88:F2:B4:F8:EB:08:AB:AA:6F:4B:26:9B:F4:3A:F9:B5:CC X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c7:d3:bd:ec:17:0c:68:b8:cc:af:89:47:13:53:7f:20:97: 7e:cb:ec:95:3a:85:3d:f9:8e:54:f3:02:95:69:12:d1:85:e2: 94:2d:11:84:78:4f:6e:04:5f:bc:81:a3:76:06:92:e2:15:50: f1:77:97:6f:a2:ea:36:bf:38:a0:cc:05:c2:04:3a:2b:5c:49: 71:d2:d3:af:27:f3:e3:81:40:ab:75:ea:eb:f5:64:07:30:3a: 34:46:99:51:5f:da:11:77:55:ba:2a:f4:9c:e2:1e:44:90:3e: ac:c9:d2:75:71:99:30:4d:ff:71:b2:2b:62:2e:b6:b2:8e:61: cf:cd:c1:35:3a:a8:84:a1:0b:a7:7f:db:79:8e:57:33:a9:0f: 64:e0:49:3e:7c:df:cd:21:64:e4:e6:9b:f6:3a:37:4b:92:f0: c0:d1:36:cb:57:e5:45:58:91:bf:67:6d:69:48:92:fd:e9:24: 45:0d:1a:28:e5:21:85:86:c4:85:72:32:73:6b:e0:df:8d:1f: be:52:e8:b9:53:e5:64:fc:68:65:31:35:08:62:0b:ba:8d:de: 86:b4:78:19:36:4a:29:d8:a2:6e:dd:96:4e:aa:82:56:5c:2a: 05:40:bf:d7:b9:9f:c1:29:39:96:91:66:f9:ab:21:eb:e6:1a: cd:44:c7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUxMDE5MDYzOTUyWhcNMjUxMDI2MDYzOTUyWjAYMRYwFAYD VQQDEw02OGY0ODdiOC00M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mMKGSC1TcyRaDTbNK7jk3QkCxnSRJwPwmeEPrqWpGt9ON2g5n4l+WZoKK+T OUvMfec+oEc+5qeXbaU1WVE9m0oXykJq+faC1cLDiIMraZJC4UuCUB1nT5mZOOxh Y+LhtCLoWhZiCryeK5hN2PpoGXIyLkbACuzewK2Cwf19sCFI4inEbccHDjvsmoJ4 CxPYSzBzAnI2fRsWSjYxYeE9NboI91i4de1gAl8dhaD3odGjRVaigCdCiU7kSqfU iTec4pkK2QpOkoXLyYt+YDmJzdaeJKUNH7fNLwcAr+mQXYgno3UT/1ev7D8hU09c Yt3/u/QLTm7pTnc5MwhBbhCBwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmFIojy tPjrCKuqb0smm/Q6+bXMMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJx9O97BcMaLjMr4lHE1N/IJd+y+yVOoU9+Y5U8wKVaRLRheKULRGE eE9uBF+8gaN2BpLiFVDxd5dvouo2vzigzAXCBDorXElx0tOvJ/PjgUCrderr9WQH MDo0RplRX9oRd1W6KvSc4h5EkD6sydJ1cZkwTf9xsitiLrayjmHPzcE1OqiEoQun f9t5jlczqQ9k4Ek+fN/NIWTk5pv2OjdLkvDA0TbLV+VFWJG/Z21pSJL96SRFDRoo 5SGFhsSFcjJza+DfjR++Uui5U+Vk/GhlMTUIYgu6jd6GtHgZNkop2KJu3ZZOqoJW XCoFQL/XuZ/BKTmWkWb5qyHr5hrNRMeP -----END CERTIFICATE-----Generated at Mon Oct 20 23:14:18 2025 by rpki-client