$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: PB0U7a8cU91f63gNrHBrVt9ptCOz6twafUyOxqmFDHM= Subject key identifier: B3:0C:92:85:E6:D4:3D:CA:56:21:24:66:A5:02:BA:22:8D:4F:DA:4A Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 102C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 1020 Signing time: Sat 18 Oct 2025 18:01:10 +0000 Manifest this update: Sat 18 Oct 2025 18:01:09 +0000 Manifest next update: Sat 25 Oct 2025 18:01:09 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: DNdw01FLWnS8eUZH91akFXrJehp0JABzsuAtJlL3PGA=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4140 (0x102c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Oct 18 18:01:09 2025 GMT Not After : Oct 25 18:01:09 2025 GMT Subject: CN=68f3d5e6-b883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:aa:a4:fc:4c:c6:01:53:e1:26:d4:79:f2: 20:14:39:7a:f9:0d:7f:8f:58:e1:fb:d0:03:99:41: 81:a0:22:3b:2e:30:d2:8c:df:74:a5:7c:c2:54:84: 45:f3:35:aa:36:68:4c:41:1e:12:9c:31:d5:5a:2c: 05:6a:bf:cd:14:57:27:0d:4f:16:2c:d0:3e:a9:52: a0:4e:39:e5:e8:4d:ad:bb:ef:d2:65:12:f9:ea:56: 9b:d9:56:78:95:d4:48:7c:91:b7:00:38:46:b9:0d: f9:fc:2c:33:46:12:67:88:37:1a:d4:e1:2d:60:b9: d2:19:4f:ad:5f:a1:2c:88:e3:27:5f:97:57:0a:5c: 27:68:c7:af:c7:ff:2b:7d:db:54:ef:d9:d4:65:6d: 07:ab:d8:1a:06:6a:bc:32:2e:9c:7f:59:2c:cc:66: 53:1f:ab:81:ec:70:4e:9c:b9:3a:82:d1:07:5a:b5: d9:e0:32:87:9e:55:b3:6f:89:28:e3:22:31:a8:4f: b2:b8:08:27:e9:10:b0:73:d9:66:09:af:ee:52:27: 46:e9:a8:00:38:dc:67:7a:2f:55:45:7f:d4:6d:a3: 27:79:67:24:63:8a:3a:dc:da:55:69:4b:62:25:9a: fc:90:ff:09:0f:94:52:5e:2c:28:93:3e:56:14:7f: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:92:85:E6:D4:3D:CA:56:21:24:66:A5:02:BA:22:8D:4F:DA:4A X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:d3:76:fe:a9:90:cd:3f:ea:bf:ac:c8:c9:25:df:72:a4: c0:85:a5:a4:0c:c3:5d:02:76:f5:6a:ea:0c:44:ff:04:84:f0: a5:fd:06:14:75:f2:9e:f9:c4:b4:9d:f8:f7:5e:98:89:ed:a2: b5:9c:9e:ec:df:94:c1:fe:8f:c6:5f:47:00:96:33:47:bb:cd: 74:42:2c:10:6d:40:ad:f8:49:e1:62:93:b9:f8:5e:6c:5d:72: ff:fa:34:be:cb:14:07:54:02:f4:f1:d7:3f:e2:4b:4e:ba:fa: 45:0b:a2:60:3e:21:3d:1a:3a:04:9a:cb:d2:5f:f1:26:20:8a: 82:8c:cf:dd:c8:45:67:b8:3d:48:80:36:7c:92:93:7f:15:c1: ba:8c:da:d7:f0:62:37:43:f3:22:42:5d:a6:07:88:4b:e1:55: 07:85:ca:43:13:99:54:d8:ae:6d:d1:25:ff:50:b2:78:de:22: 25:d7:c4:d6:8d:e2:72:f1:d7:80:42:2e:fe:83:08:98:78:ce: f4:d0:06:87:08:5d:55:4e:a1:01:7b:0f:cd:96:52:99:87:6f: b9:3f:dc:88:56:e1:55:a6:c4:a5:42:c4:97:51:d1:3d:96:21: be:56:d9:d4:a2:9b:ff:36:18:33:59:ae:52:58:5f:cd:10:47: 85:1e:16:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUxMDE4MTgwMTA5WhcNMjUxMDI1MTgwMTA5WjAYMRYwFAYD VQQDEw02OGYzZDVlNi1iODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CWqpPxMxgFT4SbUefIgFDl6+Q1/j1jh+9ADmUGBoCI7LjDSjN90pXzCVIRF 8zWqNmhMQR4SnDHVWiwFar/NFFcnDU8WLNA+qVKgTjnl6E2tu+/SZRL56lab2VZ4 ldRIfJG3ADhGuQ35/CwzRhJniDca1OEtYLnSGU+tX6EsiOMnX5dXClwnaMevx/8r fdtU79nUZW0Hq9gaBmq8Mi6cf1kszGZTH6uB7HBOnLk6gtEHWrXZ4DKHnlWzb4ko 4yIxqE+yuAgn6RCwc9lmCa/uUidG6agAONxnei9VRX/UbaMneWckY4o63NpVaUti JZr8kP8JD5RSXiwokz5WFH+B3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMMkoXm 1D3KViEkZqUCuiKNT9pKMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWtN2/qmQzT/qv6zIySXfcqTAhaWkDMNdAnb1auoMRP8EhPCl/QYU dfKe+cS0nfj3XpiJ7aK1nJ7s35TB/o/GX0cAljNHu810QiwQbUCt+EnhYpO5+F5s XXL/+jS+yxQHVAL08dc/4ktOuvpFC6JgPiE9GjoEmsvSX/EmIIqCjM/dyEVnuD1I gDZ8kpN/FcG6jNrX8GI3Q/MiQl2mB4hL4VUHhcpDE5lU2K5t0SX/ULJ43iIl18TW jeJy8deAQi7+gwiYeM700AaHCF1VTqEBew/NllKZh2+5P9yIVuFVpsSlQsSXUdE9 liG+VtnUopv/NhgzWa5SWF/NEEeFHhYM -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:14 2025 by rpki-client