$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: A1PROjrBZuL4+nyx4EJZvDNeE9lxi3eGqzgHVGRDWu0= Subject key identifier: 4D:08:F7:E1:D8:CF:4C:88:6B:1B:41:B1:AB:D9:D8:C0:E0:23:B1:B1 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: E4 Signing time: Thu 23 Oct 2025 07:29:46 +0000 Manifest this update: Thu 23 Oct 2025 07:29:45 +0000 Manifest next update: Thu 30 Oct 2025 07:29:45 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: PfyCueLt0C2MzPwfEQJqDA1DnGOkuRTtW3AX1P5INkk=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Oct 23 07:29:45 2025 GMT Not After : Oct 30 07:29:45 2025 GMT Subject: CN=68f9d969-6978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:40:4f:b1:fd:0a:53:3e:1f:db:18:9a:53: c7:79:84:a7:a7:e5:0c:d3:01:bd:c3:5f:14:d6:4a: 46:8f:8d:84:7a:7e:07:98:0c:e9:9a:f4:2a:0f:58: a6:7c:28:65:46:6f:ad:ff:da:2d:f8:f8:47:ec:25: a9:8c:a2:df:44:bb:f7:db:7e:52:66:d3:9f:fe:0b: 94:5b:84:42:d8:8b:62:1a:9c:ea:46:2f:44:73:1c: 5e:f8:49:6a:f4:d0:3c:e3:b8:84:53:af:39:98:91: f4:99:16:8a:a4:8e:b5:ca:b6:90:7d:90:83:bf:d3: e3:d3:10:fa:66:f3:88:dc:7c:7a:3a:e4:45:7f:30: d6:cf:fb:fc:0b:af:fa:2e:78:52:bd:1d:22:c5:5b: ec:27:7e:d7:0d:74:34:07:05:a5:90:66:52:d4:3a: 03:d0:bd:2f:17:96:40:ea:27:bc:38:05:0b:65:ca: 4f:dc:89:eb:5f:f6:20:ea:fe:02:ca:59:d6:06:ad: 9d:73:a6:d1:ed:81:fa:b2:c3:d5:4a:f9:60:36:c6: a7:5c:ea:59:73:65:ed:6b:dd:44:42:5a:ab:3e:2f: 4c:99:07:95:7b:e8:c6:52:2a:b7:00:51:c2:59:44: b0:a0:60:2f:1f:95:f9:7c:aa:32:b2:89:22:0d:3d: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:F7:E1:D8:CF:4C:88:6B:1B:41:B1:AB:D9:D8:C0:E0:23:B1:B1 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e8:ef:d1:00:47:96:4d:76:35:96:6a:8a:8a:66:ee:87:bc: ac:97:87:1d:23:1f:1e:64:f8:b3:de:ed:d8:03:62:06:ed:9e: e8:ce:5a:ce:76:fe:21:ec:63:bd:a1:e3:92:21:bd:98:43:df: 08:fd:7a:6e:7c:e2:8d:fc:5f:71:3e:12:7e:94:98:32:e7:9b: 86:8c:2c:6a:28:cb:3f:0c:9c:d1:bc:41:3e:b7:1b:e3:df:7e: 40:3c:d9:1c:1c:7a:4a:e4:8e:6c:84:88:1d:13:30:af:40:79: 5c:ab:50:a7:1f:b6:ef:93:06:27:db:62:5f:49:46:8a:89:62: 3e:33:5d:e6:56:b7:4a:99:e6:c7:31:b6:9d:8b:0e:a7:b5:dc: c4:37:38:91:77:27:ea:dd:f8:f9:cb:b4:82:ca:b0:c0:49:92: d2:2d:65:b9:a0:e6:57:96:34:b9:2e:b2:4c:5a:14:09:b6:74: 55:fe:7d:24:81:f4:f8:94:b6:4b:9d:6d:64:8a:5c:88:59:1c: af:7d:7d:e7:8f:41:78:a2:60:55:1a:dd:de:d4:2c:d2:de:84: 99:83:90:39:7a:06:0b:5a:8b:b0:3a:03:3f:48:dc:fb:77:9a: 97:b7:5e:92:4d:15:f6:0e:10:dc:54:c0:4b:06:f3:7d:71:d8: 9b:7a:26:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUxMDIzMDcyOTQ1WhcNMjUxMDMwMDcyOTQ1WjAYMRYwFAYD VQQDEw02OGY5ZDk2OS02OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlFAT7H9ClM+H9sYmlPHeYSnp+UM0wG9w18U1kpGj42Een4HmAzpmvQqD1im fChlRm+t/9ot+PhH7CWpjKLfRLv3235SZtOf/guUW4RC2ItiGpzqRi9Ecxxe+Elq 9NA847iEU685mJH0mRaKpI61yraQfZCDv9Pj0xD6ZvOI3Hx6OuRFfzDWz/v8C6/6 LnhSvR0ixVvsJ37XDXQ0BwWlkGZS1DoD0L0vF5ZA6ie8OAULZcpP3InrX/Yg6v4C ylnWBq2dc6bR7YH6ssPVSvlgNsanXOpZc2Xta91EQlqrPi9MmQeVe+jGUiq3AFHC WUSwoGAvH5X5fKoysokiDT1a3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0I9+HY z0yIaxtBsavZ2MDgI7GxMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY6O/RAEeWTXY1lmqKimbuh7ysl4cdIx8eZPiz3u3YA2IG7Z7ozlrO dv4h7GO9oeOSIb2YQ98I/XpufOKN/F9xPhJ+lJgy55uGjCxqKMs/DJzRvEE+txvj 335APNkcHHpK5I5shIgdEzCvQHlcq1CnH7bvkwYn22JfSUaKiWI+M13mVrdKmebH Mbadiw6ntdzENziRdyfq3fj5y7SCyrDASZLSLWW5oOZXljS5LrJMWhQJtnRV/n0k gfT4lLZLnW1kilyIWRyvfX3nj0F4omBVGt3e1CzS3oSZg5A5egYLWouwOgM/SNz7 d5qXt16STRX2DhDcVMBLBvN9cdibeiaD -----END CERTIFICATE-----Generated at Fri Oct 24 18:14:59 2025 by rpki-client