$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: vYh1I2CRoE6Uap/nRETi4e8jPAIImy/VVSSJn96F3iU= Subject key identifier: A2:23:B6:04:2B:E3:E8:68:13:C9:02:DD:D9:E0:B3:E1:EC:ED:2A:BA Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: C4 Signing time: Wed 05 Nov 2025 06:02:42 +0000 Manifest this update: Wed 05 Nov 2025 06:02:41 +0000 Manifest next update: Wed 12 Nov 2025 06:02:41 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: oMBm7akckVWgvGfkRR2EQNXP/zzn4T47N7Rax4QZRJk=) 2: 31A0A22E803B11F0BAF8A92DC4F9AE02.roa (hash: M85jCIBYsps3LwVn3AYQZG0OyQL6Ba7RT/TX3KFmVeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: Nov 5 06:02:41 2025 GMT Not After : Nov 12 06:02:41 2025 GMT Subject: CN=690ae881-f530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:da:fc:38:76:13:b7:0b:55:35:cd:f8:ba: 11:cd:d0:ae:89:d1:95:7f:1b:8a:d8:8e:03:ac:5c: b0:6f:6a:a0:6e:9f:52:24:ca:36:20:89:92:91:a1: 21:0e:df:0f:32:01:7c:20:34:53:92:c8:66:17:0c: 7b:82:bb:f4:cf:0c:dd:b7:a3:7f:71:92:64:f2:96: 1e:21:21:d4:83:89:13:6f:6e:97:15:1b:ad:c1:51: e2:38:e5:43:71:10:32:c7:07:45:f9:e4:44:b6:37: ed:80:17:77:ed:ab:cc:46:28:8b:c3:e8:70:d8:0d: 4e:52:42:1a:d6:30:3a:25:85:2a:a8:43:4a:eb:1f: fa:61:69:4a:61:1c:49:3d:28:0d:03:77:26:2d:93: f4:88:b0:9f:e3:62:2f:43:6f:aa:07:21:c7:cd:d6: 96:78:14:29:8c:00:d5:04:1a:ff:15:59:51:a6:ef: bb:10:df:b2:30:71:ea:d0:a8:b2:11:9c:f3:22:17: 73:e2:d2:5a:55:66:d9:dc:ce:ef:14:ea:67:5b:db: c2:49:51:95:01:c2:ea:83:89:42:0a:a9:8a:62:57: 0c:bf:a4:9b:8e:8d:b3:13:82:ec:25:1c:30:6b:54: 76:83:35:08:16:46:bf:87:51:d2:d2:b6:5b:7b:8e: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:B6:04:2B:E3:E8:68:13:C9:02:DD:D9:E0:B3:E1:EC:ED:2A:BA X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:20:e9:22:2b:f0:ac:3b:92:bf:42:ac:89:72:74:f4:e0:ce: 74:4a:1c:9b:4c:8c:4d:fd:65:9c:00:84:bc:d5:ff:1a:52:50: c0:b8:2b:08:8a:e6:3d:78:81:b7:de:73:ff:f3:3b:d0:d4:dc: 76:64:ee:a8:69:1e:b0:9a:d3:2e:12:aa:0c:3f:b0:b7:f9:1c: 8e:38:ad:e7:e8:00:66:f0:c9:c5:4f:2b:16:35:23:4e:ec:61: a4:24:f2:a6:83:be:bc:07:7d:d4:c3:e5:16:1f:4a:34:a7:39: c9:b3:b7:63:ac:d2:3a:5b:c9:32:0f:a6:ea:fe:2a:a1:22:91: 03:c7:9a:86:94:90:f8:85:ea:98:1e:c4:61:79:b3:0b:ef:89: 9e:55:e6:f3:b8:45:65:92:c4:4c:b6:74:2f:1e:4f:e6:94:3a: 3b:55:5a:85:86:61:d1:db:f8:ec:89:82:c9:69:62:ab:ee:26: 06:12:ad:41:3a:5e:8a:61:a7:e3:af:83:64:6e:bb:98:39:b7: 89:63:6c:7a:b7:13:7d:2d:92:f7:ee:6a:aa:95:1d:68:2d:0e: 27:72:13:26:a3:35:55:48:46:54:16:38:f3:27:f0:ee:fa:9e: 5b:19:70:19:6e:2c:09:1a:03:f1:3a:65:7a:0d:1a:b5:51:c0: b7:1d:4b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKDRGMTgyNzNEODg1NTZFM0ExRDZFRDgxNzhCODA5NTI4 RDk5MEE2OTEwHhcNMjUxMTA1MDYwMjQxWhcNMjUxMTEyMDYwMjQxWjAYMRYwFAYD VQQDEw02OTBhZTg4MS1mNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnra/Dh2E7cLVTXN+LoRzdCuidGVfxuK2I4DrFywb2qgbp9SJMo2IImSkaEh Dt8PMgF8IDRTkshmFwx7grv0zwzdt6N/cZJk8pYeISHUg4kTb26XFRutwVHiOOVD cRAyxwdF+eREtjftgBd37avMRiiLw+hw2A1OUkIa1jA6JYUqqENK6x/6YWlKYRxJ PSgNA3cmLZP0iLCf42IvQ2+qByHHzdaWeBQpjADVBBr/FVlRpu+7EN+yMHHq0Kiy EZzzIhdz4tJaVWbZ3M7vFOpnW9vCSVGVAcLqg4lCCqmKYlcMv6Sbjo2zE4LsJRww a1R2gzUIFka/h1HS0rZbe45fEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIjtgQr 4+hoE8kC3dngs+Hs7Sq6MB8GA1UdIwQYMBaAFE8YJz2IVW46HW7YF4uAlSjZkKaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xNTQ3NUQ4NjhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJqb2RidGdYaTRDVktObVFw cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xNTQ3NUQ4NjhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJq b2RidGdYaTRDVktObVFwcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwIOkiK/CsO5K/QqyJcnT04M50ShybTIxN/WWcAIS81f8aUlDAuCsI iuY9eIG33nP/8zvQ1Nx2ZO6oaR6wmtMuEqoMP7C3+RyOOK3n6ABm8MnFTysWNSNO 7GGkJPKmg768B33Uw+UWH0o0pznJs7djrNI6W8kyD6bq/iqhIpEDx5qGlJD4heqY HsRhebML74meVebzuEVlksRMtnQvHk/mlDo7VVqFhmHR2/jsiYLJaWKr7iYGEq1B Ol6KYafjr4NkbruYObeJY2x6txN9LZL37mqqlR1oLQ4nchMmozVVSEZUFjjzJ/Du +p5bGXAZbiwJGgPxOmV6DRq1UcC3HUsi -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:06 2025 by rpki-client