$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: 8MqNgn8j0nD3A0Hxz+QijAbhZzhRHfIQG+cExhGXCCI= Subject key identifier: 5E:15:66:67:27:10:02:F2:90:5F:E1:48:A0:FF:4D:8C:27:45:D1:53 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:43:14 +0000 Manifest this update: Sun 19 Oct 2025 10:43:14 +0000 Manifest next update: Sun 26 Oct 2025 10:43:14 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: uFFET3tO/i7lW48BmlZjyzCvwklYQldElH6Dooh9wa0=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Oct 19 10:43:14 2025 GMT Not After : Oct 26 10:43:14 2025 GMT Subject: CN=68f4c0c2-0dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:e2:5f:ee:88:a9:c8:34:95:80:09:e6:bd: 3c:0d:0b:97:66:08:2b:b7:52:d8:31:e8:70:0a:a4: 1e:39:1a:ca:88:fc:89:0f:af:f6:c0:e0:73:98:46: 36:0c:71:72:ee:8c:7a:ad:bf:0f:09:a2:19:d8:34: 18:b4:7b:5c:21:7b:fd:95:43:4a:d9:5c:4f:66:91: 05:e6:e8:c2:95:d3:4b:a9:e6:a5:71:ef:01:97:e5: 0e:c4:45:13:1c:8c:5a:68:1a:3e:5b:95:b9:2c:4b: 39:91:11:12:50:83:d4:20:ad:05:31:d0:b9:f4:2c: 1e:75:2f:4c:20:b4:b7:1e:49:f8:d5:cb:01:40:44: 9f:fd:bd:8a:c2:e2:73:66:23:02:1e:02:56:db:81: fb:64:47:b3:b4:65:43:f4:69:22:18:cd:4c:ec:2b: a4:06:29:0b:ed:54:aa:34:80:9a:f5:31:b7:53:3c: b4:1e:9e:9b:34:94:d4:65:bf:fe:12:44:3c:05:d2: 01:13:20:e3:c4:62:c0:df:3e:62:3c:09:fc:61:38: 7b:a2:51:40:b3:c9:65:6e:b3:fc:5c:80:88:3f:f4: ad:c7:20:ef:0e:46:05:41:a5:2c:7c:3a:89:81:2e: 8e:6b:11:59:47:f7:4d:6b:c2:83:5c:c2:d0:08:fd: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:66:67:27:10:02:F2:90:5F:E1:48:A0:FF:4D:8C:27:45:D1:53 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ae:2d:0e:37:78:6f:bb:2d:9f:e5:35:c9:ec:6a:cc:ec:1d: 2f:15:fc:19:3d:ad:f1:22:ac:fd:42:44:fc:54:d6:fa:83:9c: 11:f6:4b:de:f4:a6:ef:aa:af:28:ce:f8:30:dd:02:34:1a:de: 47:e4:d5:ca:f9:33:4e:5b:62:3e:ce:de:f7:61:c9:e7:93:82: a6:8f:d5:4f:64:16:00:0b:ea:a3:4c:13:7f:68:f6:f0:62:21: 5e:3c:73:e5:13:34:31:ca:56:3d:17:35:7e:c6:0c:83:eb:db: 6a:92:b1:12:2c:ae:43:1c:fa:ec:bb:e1:52:be:a3:b7:f9:62: 7d:cf:e6:f2:18:15:57:8d:b4:69:a2:1e:33:58:50:db:10:cd: bd:a7:44:4c:32:05:df:40:60:8a:3d:91:4c:a2:31:a7:9a:90: df:05:df:69:17:d9:42:d5:68:0d:b2:ca:e9:50:68:6b:8b:3e: fd:eb:cd:84:f1:18:a3:c2:b1:50:cf:cc:e1:f5:67:cc:da:f6: 99:85:b9:ad:e0:71:42:00:bd:e4:2e:b2:ae:35:51:16:9d:d5: fa:0a:87:1a:a6:20:ab:00:d4:49:9f:a3:04:87:22:07:6d:24: bd:e8:49:67:51:3c:91:9c:c7:4f:18:c4:97:80:ed:c6:98:7f: 21:1e:43:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTEwMTkxMDQzMTRaFw0yNTEwMjYxMDQzMTRaMBgxFjAUBgNV BAMTDTY4ZjRjMGMyLTBkZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKxuJf7oipyDSVgAnmvTwNC5dmCCu3Utgx6HAKpB45GsqI/IkPr/bA4HOYRjYM cXLujHqtvw8JohnYNBi0e1whe/2VQ0rZXE9mkQXm6MKV00up5qVx7wGX5Q7ERRMc jFpoGj5blbksSzmRERJQg9QgrQUx0Ln0LB51L0wgtLceSfjVywFARJ/9vYrC4nNm IwIeAlbbgftkR7O0ZUP0aSIYzUzsK6QGKQvtVKo0gJr1MbdTPLQenps0lNRlv/4S RDwF0gETIOPEYsDfPmI8CfxhOHuiUUCzyWVus/xcgIg/9K3HIO8ORgVBpSx8OomB Lo5rEVlH901rwoNcwtAI/ccFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXhVmZycQ AvKQX+FIoP9NjCdF0VMwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACSuLQ43eG+7LZ/lNcnsaszsHS8V/Bk9rfEirP1CRPxU1vqDnBH2S970 pu+qryjO+DDdAjQa3kfk1cr5M05bYj7O3vdhyeeTgqaP1U9kFgAL6qNME39o9vBi IV48c+UTNDHKVj0XNX7GDIPr22qSsRIsrkMc+uy74VK+o7f5Yn3P5vIYFVeNtGmi HjNYUNsQzb2nREwyBd9AYIo9kUyiMaeakN8F32kX2ULVaA2yyulQaGuLPv3rzYTx GKPCsVDPzOH1Z8za9pmFua3gcUIAveQusq41URad1foKhxqmIKsA1EmfowSHIgdt JL3oSWdRPJGcx08YxJeA7caYfyEeQ6M= -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:33 2025 by rpki-client