$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: D/KPu3wtKrP/PhoDc0i268A6VyN3nr78Xpy40kZP9gg= Subject key identifier: F5:98:97:82:18:2E:D0:D0:FC:57:48:F8:B1:04:C6:B7:87:77:12:BC Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 56 Signing time: Wed 05 Nov 2025 07:24:10 +0000 Manifest this update: Wed 05 Nov 2025 07:24:10 +0000 Manifest next update: Wed 12 Nov 2025 07:24:09 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: i33BFP+StyXN5ByXlUrfF0RXxdx6YjmrKH/2i2nwxxw=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Nov 5 07:24:10 2025 GMT Not After : Nov 12 07:24:09 2025 GMT Subject: CN=690afb9a-f56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:98:1a:e8:ac:3f:b8:62:3b:72:3a:66:6e: 4e:4c:ec:9c:73:d6:b7:29:2a:4c:d8:d8:d6:b4:2f: 9f:7d:37:8f:4b:8f:07:b8:f5:17:5c:52:26:be:6c: 79:cd:41:cd:7a:38:21:11:f0:3b:ad:60:e3:95:ef: d2:69:e3:77:4e:c7:ac:2e:fb:7e:92:50:e4:43:d0: d4:39:80:d4:a2:b2:49:0f:e0:cb:26:1b:bc:0d:69: f4:c7:27:4d:ad:23:42:7f:47:46:9f:2d:f0:df:d0: 2b:76:8e:4a:54:61:06:fd:7b:d6:69:ad:23:50:77: 9b:9d:76:db:86:77:89:b6:95:a9:fe:ab:e5:04:a4: 72:12:93:f7:9c:55:3d:f3:78:15:10:5b:6a:86:dd: 2d:c4:fe:ba:6e:8a:46:23:0b:c9:2c:28:c8:8d:c4: 5d:79:69:81:67:1d:ee:ad:91:82:e0:3b:54:38:7e: f6:f7:6b:3d:29:a1:71:57:6e:03:67:bb:5f:64:18: 64:42:d7:f8:80:a0:ec:03:cd:94:23:7e:f4:33:12: fb:7e:77:69:1c:73:e3:1e:ca:53:be:36:aa:2c:e6: 4c:d6:af:ed:ab:39:fa:cf:4a:ef:00:7a:bb:ea:c6: 05:74:fe:c5:de:db:6f:5f:f5:cb:48:fb:8b:9d:b8: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:97:82:18:2E:D0:D0:FC:57:48:F8:B1:04:C6:B7:87:77:12:BC X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:3b:dc:b0:2f:90:bf:24:76:39:8f:0e:f2:70:33:7f:69: f0:cb:a1:79:8e:9d:3e:54:63:ba:ed:0b:c2:5d:e3:fa:35:07: 60:1d:f7:52:1d:4c:e0:b5:b5:88:7e:fa:8c:a0:50:fd:91:8b: fe:41:64:ac:e5:91:be:51:28:18:93:39:a7:7b:77:4b:4d:e9: c3:0c:2f:bc:be:39:fe:e8:45:7e:69:2d:39:d9:3b:dc:71:56: e1:9d:95:54:a4:16:5c:e5:51:b8:f1:83:e3:96:4e:23:16:71: f0:d9:8b:80:15:62:e4:11:2a:95:13:6a:04:8c:28:8d:73:53: 10:eb:90:32:31:b9:f8:28:7c:f5:e6:10:59:b6:5c:9f:12:ea: f1:e3:0d:3a:f2:1b:49:4c:0c:9f:e0:4e:85:6e:44:e7:9c:db: da:c3:4e:6e:96:d7:7e:36:f1:45:0d:13:91:f5:f6:f4:b8:ff: fe:0f:79:6f:7d:e1:3f:56:52:ca:10:1c:96:0a:1d:15:ed:ba: b7:78:e4:d4:4b:b1:9e:49:4c:75:a9:20:c5:1a:a6:21:7a:77: 21:c6:d0:d9:4d:4e:8c:f0:0f:71:de:5f:ac:46:85:7e:c5:93: 89:af:42:6b:29:32:23:92:c2:57:a1:a4:14:f2:fa:ec:39:4a: 41:28:cd:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTExMDUwNzI0MTBaFw0yNTExMTIwNzI0MDlaMBgxFjAUBgNV BAMTDTY5MGFmYjlhLWY1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYRJga6Kw/uGI7cjpmbk5M7Jxz1rcpKkzY2Na0L599N49Ljwe49RdcUia+bHnN Qc16OCER8DutYOOV79Jp43dOx6wu+36SUORD0NQ5gNSiskkP4MsmG7wNafTHJ02t I0J/R0afLfDf0Ct2jkpUYQb9e9ZprSNQd5uddtuGd4m2lan+q+UEpHISk/ecVT3z eBUQW2qG3S3E/rpuikYjC8ksKMiNxF15aYFnHe6tkYLgO1Q4fvb3az0poXFXbgNn u19kGGRC1/iAoOwDzZQjfvQzEvt+d2kcc+MeylO+Nqos5kzWr+2rOfrPSu8Aervq xgV0/sXe229f9ctI+4uduFadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9ZiXghgu 0ND8V0j4sQTGt4d3ErwwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEI2O9ywL5C/JHY5jw7ycDN/afDLoXmOnT5UY7rtC8Jd4/o1B2Ad91Id TOC1tYh++oygUP2Ri/5BZKzlkb5RKBiTOad7d0tN6cMML7y+Of7oRX5pLTnZO9xx VuGdlVSkFlzlUbjxg+OWTiMWcfDZi4AVYuQRKpUTagSMKI1zUxDrkDIxufgofPXm EFm2XJ8S6vHjDTryG0lMDJ/gToVuROec29rDTm6W13428UUNE5H19vS4//4PeW99 4T9WUsoQHJYKHRXturd45NRLsZ5JTHWpIMUapiF6dyHG0NlNTozwD3HeX6xGhX7F k4mvQmspMiOSwlehpBTy+uw5SkEozXo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:27 2025 by rpki-client