$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: UGDi27zllFo0WQPOYALG8FiBXB+uVicCCaVyUK4yPh8= Subject key identifier: D1:07:81:D2:EF:1A:35:5D:6F:34:3D:1C:1B:AB:D0:64:DC:45:A6:6B Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0AC2 Signing time: Sat 18 Oct 2025 21:40:50 +0000 Manifest this update: Sat 18 Oct 2025 21:40:49 +0000 Manifest next update: Sat 25 Oct 2025 21:40:49 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: BWJM6Amv/1iiT6hp9HGjBLRLNpdm4eSDGYIYRy11Iaw=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Oct 18 21:40:49 2025 GMT Not After : Oct 25 21:40:49 2025 GMT Subject: CN=68f40961-b41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:4b:43:60:6d:8b:2b:fc:6e:84:00:ac:c9: ca:03:c5:48:04:97:ec:2a:57:88:91:26:e0:fb:80: c0:ef:2f:8a:82:eb:c0:4e:8d:c1:b5:ff:60:5e:04: 90:fd:39:19:10:86:91:26:7b:21:59:06:71:f6:88: 00:4d:3b:0d:20:1b:a7:22:fc:9f:83:09:3f:d8:c3: 6f:04:98:41:67:f9:2e:26:b3:12:ce:87:90:a5:94: 22:20:10:3f:3c:ba:c5:eb:6f:32:f0:1b:bd:73:27: fe:df:0d:f6:18:14:d4:16:47:65:52:53:a6:41:11: 41:29:6f:64:ba:61:7f:06:5b:32:fd:2b:e9:da:1c: 40:72:ae:1a:90:0e:f1:ba:40:0d:a3:c3:bf:ef:5b: 2f:97:61:6c:22:ca:55:89:b2:b6:21:90:65:fc:19: 77:d1:1e:7b:63:0f:43:b6:7e:ce:98:85:a6:70:f9: ac:d8:1c:43:be:7c:59:11:1f:69:47:af:da:eb:9a: 8c:40:18:fd:43:21:96:d8:af:1b:57:1a:6e:4e:68: f8:70:d8:98:96:23:ca:9b:16:cc:9a:ba:5d:a9:27: e8:94:0f:c0:51:d4:c3:01:a3:b8:fc:db:9e:81:35: de:c4:09:ae:71:44:eb:73:53:f6:a4:4a:69:42:1c: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:07:81:D2:EF:1A:35:5D:6F:34:3D:1C:1B:AB:D0:64:DC:45:A6:6B X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cd:9c:22:c5:66:5a:b1:1f:3a:92:ef:c2:13:82:65:10:8a: 15:4c:d2:59:c9:b8:1c:ca:ee:aa:84:80:70:5a:04:bc:d1:96: 00:45:62:4b:6f:f4:63:8f:8c:f3:a8:8c:62:4e:66:a7:50:42: fe:ec:8e:7a:d6:70:06:87:2b:2f:bf:25:c5:15:13:42:b5:3c: 41:01:e4:03:09:7c:62:7f:97:b4:a7:ab:b4:4b:c7:ea:f7:45: 2f:58:ae:8b:be:be:9c:a8:86:0a:08:e0:9c:49:1d:15:d7:9a: 1d:d7:64:3e:93:de:ef:fb:59:de:d0:44:9a:2f:da:e8:c5:23: 69:22:1e:0e:9f:8a:32:17:05:ec:e0:05:42:e7:6c:b6:7e:f3: 5d:0b:51:f6:b0:26:87:3a:6e:3c:f6:32:cc:9c:79:ed:b9:0a: a7:56:c8:e0:de:27:2a:0a:c0:31:bc:98:d6:0d:b1:af:6e:4f: 72:8b:b0:6f:6c:ea:d4:f0:91:51:b5:13:e8:4f:ba:20:62:f0: 5c:2b:c1:e3:ba:15:c3:3d:6e:0d:1a:3c:d8:0b:a8:09:1d:55: b7:3b:e9:4f:c0:30:f7:fa:c4:56:52:f5:b5:a5:a5:b1:28:b9: 33:99:ec:08:1b:1c:ac:2e:0b:de:85:18:2a:8f:36:70:8b:24: 69:78:bc:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUxMDE4MjE0MDQ5WhcNMjUxMDI1MjE0MDQ5WjAYMRYwFAYD VQQDEw02OGY0MDk2MS1iNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNZLQ2Btiyv8boQArMnKA8VIBJfsKleIkSbg+4DA7y+KguvATo3Btf9gXgSQ /TkZEIaRJnshWQZx9ogATTsNIBunIvyfgwk/2MNvBJhBZ/kuJrMSzoeQpZQiIBA/ PLrF628y8Bu9cyf+3w32GBTUFkdlUlOmQRFBKW9kumF/Blsy/Svp2hxAcq4akA7x ukANo8O/71svl2FsIspVibK2IZBl/Bl30R57Yw9Dtn7OmIWmcPms2BxDvnxZER9p R6/a65qMQBj9QyGW2K8bVxpuTmj4cNiYliPKmxbMmrpdqSfolA/AUdTDAaO4/Nue gTXexAmucUTrc1P2pEppQhymwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEHgdLv GjVdbzQ9HBur0GTcRaZrMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJzZwixWZasR86ku/CE4JlEIoVTNJZybgcyu6qhIBwWgS80ZYARWJL b/Rjj4zzqIxiTmanUEL+7I561nAGhysvvyXFFRNCtTxBAeQDCXxif5e0p6u0S8fq 90UvWK6Lvr6cqIYKCOCcSR0V15od12Q+k97v+1ne0ESaL9roxSNpIh4On4oyFwXs 4AVC52y2fvNdC1H2sCaHOm489jLMnHntuQqnVsjg3icqCsAxvJjWDbGvbk9yi7Bv bOrU8JFRtRPoT7ogYvBcK8HjuhXDPW4NGjzYC6gJHVW3O+lPwDD3+sRWUvW1paWx KLkzmewIGxysLgvehRgqjzZwiyRpeLx2 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:18 2025 by rpki-client