$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: 0mE16v5Xe4pvIa0z/bD0hspfjxVzQsRGQlvOjtJWPrc= Subject key identifier: 71:30:D5:83:EF:96:A4:8B:BE:3E:B4:E6:1F:2F:86:58:1E:2F:99:E5 Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:41:43 +0000 Manifest this update: Sun 19 Oct 2025 10:41:43 +0000 Manifest next update: Sun 26 Oct 2025 10:41:43 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: 5Mk8tT5s+6ZH/FcFPCH35+oC0VRvtMwaPpxan1Esz44=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Oct 19 10:41:43 2025 GMT Not After : Oct 26 10:41:43 2025 GMT Subject: CN=68f4c067-5550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:ba:5e:66:ec:ec:07:ab:b2:a8:ce:b8:fc: 9a:90:11:83:51:61:45:de:21:fb:61:3b:3b:59:ba: ea:50:a7:b4:92:a3:26:db:5e:85:23:d8:56:c4:16: a7:09:53:49:47:e3:a4:e4:76:55:00:f3:c6:06:72: 40:18:45:68:e7:17:68:4a:4b:66:46:ba:fe:bb:2c: 92:51:38:47:97:65:9c:b1:f6:2e:ec:a7:1b:65:06: 0d:1c:a8:fb:c8:aa:4f:9f:4c:90:43:9f:b8:8e:d0: 67:59:eb:91:ab:bd:d0:c4:7d:3d:64:fd:83:38:9e: dd:d4:3c:b6:a1:d1:6b:9e:e5:e9:c3:60:2c:f6:f9: 88:aa:4e:b9:e0:ce:16:de:be:6f:d1:28:9a:27:28: 60:bc:59:84:d7:77:71:03:44:46:49:74:47:3a:bb: f4:91:f1:b7:35:40:57:60:3c:7a:fa:b8:b0:1d:d0: 92:5e:b8:d9:95:97:80:fd:df:36:d8:99:1b:69:da: 98:d0:d3:da:6a:6d:42:3a:7d:0b:31:f5:fe:d9:fd: 51:eb:f8:cf:7b:56:52:64:8e:ed:f5:ef:1e:4d:6b: 86:5d:44:8a:92:c6:57:9c:8c:b2:5c:a8:6b:ea:4d: 13:2f:9e:4a:3c:ba:04:63:fe:c4:91:0e:3d:ab:dd: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:D5:83:EF:96:A4:8B:BE:3E:B4:E6:1F:2F:86:58:1E:2F:99:E5 X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4c:bd:59:16:4d:71:d2:89:fc:6a:12:af:14:09:25:94:b0: bc:fe:c8:80:5d:91:4f:4e:b8:f0:08:78:6c:99:d2:88:01:ee: b9:42:ed:ff:8e:db:5c:cd:9c:d6:21:d5:09:ab:f8:12:b7:96: 7b:1c:91:e8:1b:f9:43:b9:65:50:f0:e4:88:5b:e6:60:f5:8d: 83:31:7d:e2:e3:0a:2d:26:eb:4a:34:62:58:34:61:1e:34:b6: 61:c6:30:2c:e4:61:26:c6:da:97:04:12:72:04:81:10:0d:44: cf:4c:06:1d:2d:03:1c:ce:11:21:24:aa:56:e8:23:a1:89:b3: 9d:99:eb:bd:6e:20:dc:f7:95:99:24:fa:3e:79:e5:f8:2e:ee: 70:3f:cf:aa:62:98:fb:36:ff:d3:49:3e:e1:b5:7b:7e:dd:81: 6a:e3:c6:ca:43:63:af:e5:f8:69:18:ae:fd:35:2c:21:90:c8: fb:30:e9:b5:a4:53:9b:8d:60:73:83:48:85:f0:5f:b1:68:b7: f3:ac:3d:e1:26:df:7e:e1:20:d9:33:d8:bb:1a:f0:29:9c:88: 82:f0:cb:f4:af:08:68:fc:22:5d:75:c4:5a:69:2b:62:29:5d: 08:cd:db:e1:1f:94:a7:82:3b:27:6e:53:97:a0:19:fa:04:3d: f9:54:7f:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTEwMTkxMDQxNDNaFw0yNTEwMjYxMDQxNDNaMBgxFjAUBgNV BAMTDTY4ZjRjMDY3LTU1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPB7peZuzsB6uyqM64/JqQEYNRYUXeIfthOztZuupQp7SSoybbXoUj2FbEFqcJ U0lH46TkdlUA88YGckAYRWjnF2hKS2ZGuv67LJJROEeXZZyx9i7spxtlBg0cqPvI qk+fTJBDn7iO0GdZ65GrvdDEfT1k/YM4nt3UPLah0Wue5enDYCz2+YiqTrngzhbe vm/RKJonKGC8WYTXd3EDREZJdEc6u/SR8bc1QFdgPHr6uLAd0JJeuNmVl4D93zbY mRtp2pjQ09pqbUI6fQsx9f7Z/VHr+M97VlJkju317x5Na4ZdRIqSxlecjLJcqGvq TRMvnko8ugRj/sSRDj2r3VyRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcTDVg++W pIu+PrTmHy+GWB4vmeUwHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJMvVkWTXHSifxqEq8UCSWUsLz+yIBdkU9OuPAIeGyZ0ogB7rlC7f+O 21zNnNYh1Qmr+BK3lnsckegb+UO5ZVDw5Ihb5mD1jYMxfeLjCi0m60o0Ylg0YR40 tmHGMCzkYSbG2pcEEnIEgRANRM9MBh0tAxzOESEkqlboI6GJs52Z671uINz3lZkk +j555fgu7nA/z6pimPs2/9NJPuG1e37dgWrjxspDY6/l+GkYrv01LCGQyPsw6bWk U5uNYHODSIXwX7Fot/OsPeEm337hINkz2Lsa8CmciILwy/SvCGj8Il11xFppK2Ip XQjN2+EflKeCOyduU5egGfoEPflUf/s= -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:46 2025 by rpki-client