$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: vzLpKix4WGj6otiFRgt3bVxNzOvjQjkZ713ADHwnGSo= Subject key identifier: D3:93:3D:01:C9:85:F0:1B:6B:96:3A:73:90:18:37:DC:14:C8:5A:9E Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 100F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 1003 Signing time: Fri 22 Aug 2025 17:35:06 +0000 Manifest this update: Fri 22 Aug 2025 17:35:06 +0000 Manifest next update: Fri 29 Aug 2025 17:35:06 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: PIWAL1AK80iZvwUm/Q+kKvxKqBTiIgKVUTpuDa4ETpI=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4111 (0x100f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Aug 22 17:35:06 2025 GMT Not After : Aug 29 17:35:06 2025 GMT Subject: CN=68a8aa4a-e441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4d:40:1a:55:9d:47:7f:d3:04:dc:09:65:a4: 8f:f3:16:00:e9:8c:da:18:b5:b4:be:99:b6:9c:94: 3a:88:10:af:13:51:6d:76:59:0e:55:84:40:b5:2d: 2a:d5:aa:3f:7a:f7:87:f9:19:a0:0b:65:ad:eb:24: 57:78:f2:f7:02:2b:43:6e:ea:b6:5c:48:65:8b:c9: 82:68:a3:33:25:cc:24:63:9d:fd:db:6a:19:49:20: 70:03:2f:0b:6a:96:38:93:93:f4:61:eb:a6:58:c3: d8:3d:23:1b:d3:ec:40:5e:d5:b1:48:19:05:e8:ca: 1d:72:78:0c:fe:67:73:10:53:88:9a:95:69:65:0c: 61:86:b6:fa:ed:b1:9f:ac:6c:c2:5a:2f:c9:ac:a9: dd:0f:7d:64:ed:60:74:f4:27:7e:f7:37:f1:06:41: 8b:4c:5c:22:a8:b6:40:48:3b:dc:e6:55:49:44:13: 7c:f3:01:b9:31:19:6c:27:3c:24:d8:71:e4:13:72: 75:c3:46:4f:59:7a:8c:88:65:9e:29:70:3d:2b:b9: d6:04:24:85:38:82:e1:56:6b:60:cc:7f:ad:3f:03: 0b:ea:a3:43:a3:8e:61:c5:f9:57:de:30:da:1e:29: 01:7a:b4:ee:a1:2b:81:ff:cc:de:01:1b:74:6b:92: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:93:3D:01:C9:85:F0:1B:6B:96:3A:73:90:18:37:DC:14:C8:5A:9E X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:23:93:ef:23:13:49:4b:a9:e9:b4:2b:db:42:01:07:20:b3: ad:56:6d:43:ab:ef:fb:1b:51:eb:df:5e:78:63:2e:a8:37:33: a4:9d:90:a0:91:cc:4f:f9:dc:af:0e:4c:3e:69:65:83:8a:04: 34:21:e7:88:6e:60:bc:b6:27:02:98:26:1e:78:62:e5:80:a2: 06:29:5b:b9:a9:6b:6f:02:f7:ea:c3:9d:3f:76:b5:6d:d0:7b: 43:bc:fb:54:c6:c4:1c:51:8b:18:68:31:ed:da:d2:31:ef:70: ba:7e:12:c6:3c:13:6e:8c:67:4c:aa:d6:7d:2e:ed:bc:f3:16: 0b:3c:68:b7:b0:d0:44:25:e0:98:48:c4:64:9e:2c:eb:e7:92: 78:1c:b9:2e:39:51:b5:20:6a:f1:d6:5e:02:bc:c8:ec:e4:b6: a9:e8:6c:d6:5e:67:74:c8:86:1b:69:c5:25:02:39:25:b1:bb: 65:95:72:48:c8:71:03:09:16:d2:a1:5b:88:db:65:58:a7:68: 19:7d:74:17:24:36:0b:06:89:5f:cd:c1:88:b8:ee:e7:5d:3f: 6c:c3:98:28:48:69:9c:d2:c2:b8:6b:0a:6d:7c:2d:40:e4:6f: da:50:0e:a2:2f:50:11:a7:b4:c0:2a:f2:3d:41:ec:d3:26:d0: 74:f8:1c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwODIyMTczNTA2WhcNMjUwODI5MTczNTA2WjAYMRYwFAYD VQQDEw02OGE4YWE0YS1lNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+k1AGlWdR3/TBNwJZaSP8xYA6YzaGLW0vpm2nJQ6iBCvE1FtdlkOVYRAtS0q 1ao/eveH+RmgC2Wt6yRXePL3AitDbuq2XEhli8mCaKMzJcwkY53922oZSSBwAy8L apY4k5P0YeumWMPYPSMb0+xAXtWxSBkF6ModcngM/mdzEFOImpVpZQxhhrb67bGf rGzCWi/JrKndD31k7WB09Cd+9zfxBkGLTFwiqLZASDvc5lVJRBN88wG5MRlsJzwk 2HHkE3J1w0ZPWXqMiGWeKXA9K7nWBCSFOILhVmtgzH+tPwML6qNDo45hxflX3jDa HikBerTuoSuB/8zeARt0a5Lp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOTPQHJ hfAba5Y6c5AYN9wUyFqeMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPI5PvIxNJS6nptCvbQgEHILOtVm1Dq+/7G1Hr3154Yy6oNzOknZCg kcxP+dyvDkw+aWWDigQ0IeeIbmC8ticCmCYeeGLlgKIGKVu5qWtvAvfqw50/drVt 0HtDvPtUxsQcUYsYaDHt2tIx73C6fhLGPBNujGdMqtZ9Lu288xYLPGi3sNBEJeCY SMRknizr55J4HLkuOVG1IGrx1l4CvMjs5Lap6GzWXmd0yIYbacUlAjklsbtllXJI yHEDCRbSoVuI22VYp2gZfXQXJDYLBolfzcGIuO7nXT9sw5goSGmc0sK4awptfC1A 5G/aUA6iL1ARp7TAKvI9QezTJtB0+Bwu -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:58 2025 by rpki-client