$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: 3wATCbnV7SpwToewnYxV4gCxd4tUyYDMbhz/9nEtmac= Subject key identifier: F5:1B:52:C0:B6:71:0A:5B:42:D5:1D:91:5D:84:F0:52:03:A2:1F:78 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 101D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 1011 Signing time: Thu 18 Sep 2025 17:36:57 +0000 Manifest this update: Thu 18 Sep 2025 17:36:57 +0000 Manifest next update: Thu 25 Sep 2025 17:36:57 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: OhirJLi2Ne9hHLBRUb/b635Oxqp3nSKjaQrk+JkQub8=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4125 (0x101d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Sep 18 17:36:57 2025 GMT Not After : Sep 25 17:36:57 2025 GMT Subject: CN=68cc4339-8a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:57:dd:fe:6b:12:24:6e:43:4e:d5:b1:be: c4:36:38:43:71:34:c4:fb:e2:5a:05:3b:b5:63:0a: 62:99:2a:01:c9:61:7a:ba:22:be:8c:7b:44:6f:08: 33:12:a8:5f:a4:6d:e5:f0:5d:2c:e3:74:b8:ae:f9: 45:00:c4:1a:4b:7b:45:3c:ba:32:39:2e:67:44:fe: d3:14:bc:75:a3:90:1b:84:cc:c7:6b:9a:4f:fe:3b: 38:bb:95:14:59:30:ab:aa:35:c0:db:76:de:f8:02: c6:7a:7f:d7:38:a0:47:e3:6e:25:70:22:07:80:a9: 02:63:76:78:fb:97:d4:5b:57:2b:70:34:6f:a3:48: 77:4d:0b:71:b0:a2:77:9e:e3:ec:e5:ed:95:8f:b8: 83:05:fc:8a:af:28:09:bb:49:b2:e9:38:f7:89:2b: 80:00:ce:f8:4a:38:be:23:cf:1d:de:a8:2e:df:69: d6:c6:4b:0d:3a:1b:cd:6f:c8:60:e9:4f:05:f2:2e: 7b:6e:17:12:d2:ac:18:07:3f:30:7e:97:40:b0:69: b8:58:ad:ce:24:cc:1c:0c:f5:88:1c:f4:9f:e6:f6: 25:fa:d8:d9:16:88:87:51:61:99:9e:79:e4:cb:07: 77:5a:05:c8:32:a8:84:78:77:b1:56:25:b0:28:3e: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:52:C0:B6:71:0A:5B:42:D5:1D:91:5D:84:F0:52:03:A2:1F:78 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:84:97:4c:46:c1:f1:b1:67:b2:9a:af:3c:9b:2b:7b:09:29: 30:96:87:fc:fb:c3:e3:a9:ff:04:19:ff:f0:0f:87:ec:fe:86: a4:52:8c:fb:65:f8:1f:50:2b:6e:79:31:d3:f1:99:20:fd:0f: e2:5e:5a:92:4a:32:2b:30:2c:81:cc:22:27:d3:7f:31:83:87: 4d:23:0a:fb:fc:85:9d:c5:cc:97:a7:bc:76:fd:e9:6a:b0:3d: 85:8f:d5:69:ee:27:ff:50:bf:87:b1:0c:63:e3:13:ca:d9:b8: bb:36:32:f8:89:de:c6:55:72:32:8a:54:2d:e3:64:3a:1f:a1: df:91:46:23:51:ed:b4:c6:e2:f4:d7:a1:d1:c7:f5:48:1d:e9: 3b:9f:4b:79:fb:57:8d:f6:d4:d0:66:95:68:89:96:21:e8:00: 16:97:98:e9:4b:5b:ba:e3:b6:19:cb:c5:27:7e:c6:ce:16:dc: fb:bc:a6:f7:c3:f7:88:f9:c7:69:34:c3:39:f3:f9:42:ef:9c: 2d:f6:cd:56:5e:03:c3:b0:0f:5f:ee:47:9c:8d:5b:8e:6b:72: 8f:c5:02:62:38:c8:d9:28:ed:19:20:de:c2:80:0d:2c:e5:2a: ff:71:e0:b3:f7:2e:72:b8:da:5b:fd:84:22:6a:b0:50:b4:cf: 80:ca:82:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwOTE4MTczNjU3WhcNMjUwOTI1MTczNjU3WjAYMRYwFAYD VQQDEw02OGNjNDMzOS04YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI9X3f5rEiRuQ07Vsb7ENjhDcTTE++JaBTu1YwpimSoByWF6uiK+jHtEbwgz EqhfpG3l8F0s43S4rvlFAMQaS3tFPLoyOS5nRP7TFLx1o5AbhMzHa5pP/js4u5UU WTCrqjXA23be+ALGen/XOKBH424lcCIHgKkCY3Z4+5fUW1crcDRvo0h3TQtxsKJ3 nuPs5e2Vj7iDBfyKrygJu0my6Tj3iSuAAM74Sji+I88d3qgu32nWxksNOhvNb8hg 6U8F8i57bhcS0qwYBz8wfpdAsGm4WK3OJMwcDPWIHPSf5vYl+tjZFoiHUWGZnnnk ywd3WgXIMqiEeHexViWwKD6eQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUbUsC2 cQpbQtUdkV2E8FIDoh94MB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCphJdMRsHxsWeymq88myt7CSkwlof8+8Pjqf8EGf/wD4fs/oakUoz7 ZfgfUCtueTHT8Zkg/Q/iXlqSSjIrMCyBzCIn038xg4dNIwr7/IWdxcyXp7x2/elq sD2Fj9Vp7if/UL+HsQxj4xPK2bi7NjL4id7GVXIyilQt42Q6H6HfkUYjUe20xuL0 16HRx/VIHek7n0t5+1eN9tTQZpVoiZYh6AAWl5jpS1u647YZy8UnfsbOFtz7vKb3 w/eI+cdpNMM58/lC75wt9s1WXgPDsA9f7kecjVuOa3KPxQJiOMjZKO0ZIN7CgA0s 5Sr/ceCz9y5yuNpb/YQiarBQtM+AyoI+ -----END CERTIFICATE-----Generated at Fri Sep 19 06:50:47 2025 by rpki-client