$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: X0mPim1Xwul2FBceSCti3qHJUXvcW9VSZQtpVSpsc/s= Subject key identifier: E1:D8:81:4D:E4:11:69:CE:60:FE:7D:10:48:47:48:56:B2:97:F5:3C Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 0592 Signing time: Sun 02 Nov 2025 23:11:36 +0000 Manifest this update: Sun 02 Nov 2025 23:11:36 +0000 Manifest next update: Sun 09 Nov 2025 23:11:36 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: UWT5LVb7E32Ptgo+XEsRAR+ljyPZ8CVqWGmhqVN0p/U=) 2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: S07N/8Ez+PeXS+KaKtYo/aw1ppaoCrg3SZIV/r7xqcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Nov 2 23:11:36 2025 GMT Not After : Nov 9 23:11:36 2025 GMT Subject: CN=6907e528-d321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e3:7b:93:af:41:af:3c:6f:45:e3:b9:13:39: d6:a7:01:08:87:5d:16:7b:9d:fc:48:d5:d8:be:d8: 39:59:bf:3a:1b:cd:55:2a:57:13:3c:a2:7b:08:89: fc:aa:75:48:97:93:6d:0b:e5:1d:65:55:52:ac:29: 12:6d:5c:54:64:6e:97:ee:95:6a:57:c8:1e:7f:de: 41:11:7f:b3:9e:82:64:0b:91:d4:2c:5d:71:17:af: a1:fd:ac:13:a8:ec:3e:09:69:e0:a5:ea:13:7f:e1: d8:a5:12:50:47:57:ad:60:c7:39:87:21:22:e7:28: 9b:32:2f:00:59:a8:05:fa:bf:43:d1:c7:80:b7:34: bd:62:17:9b:0b:8e:88:3f:69:38:b3:b7:fe:91:44: a7:c6:d0:c2:22:d8:ff:6c:87:d1:01:bb:db:0c:7a: 25:55:92:5a:dd:11:05:a9:fd:6b:0f:15:25:b1:5e: 98:bc:90:2e:d7:7f:16:bb:9d:a1:75:54:2c:45:0f: 6b:02:96:b2:3b:0e:46:ba:6c:de:de:54:35:05:83: 07:a4:6a:9d:72:af:64:33:b1:78:0c:b0:1a:9d:ab: 7c:a3:a9:cc:74:10:9f:5a:1d:84:52:12:f7:6c:57: 97:0e:69:3d:d3:e8:67:6b:39:ee:8f:34:60:19:be: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:81:4D:E4:11:69:CE:60:FE:7D:10:48:47:48:56:B2:97:F5:3C X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a4:49:d4:d1:22:5b:ec:14:d9:6a:df:fa:b5:b4:15:4c:76: 53:9a:e2:af:71:ff:8d:d8:60:48:df:cf:49:91:39:15:e9:a5: ad:28:78:66:f0:3d:12:87:8c:76:f8:de:15:7c:25:22:79:3e: 16:7c:79:02:7d:fc:e4:b3:a0:2d:4a:aa:41:af:61:23:8f:2e: 9d:63:e1:17:2b:58:b6:4d:17:35:fd:fb:1a:33:22:cd:c2:4b: cc:1a:23:c9:54:ff:77:c3:be:4f:a0:ab:14:72:ec:6c:01:a6: 13:b6:d9:1d:65:a6:16:9e:d8:85:d9:78:4e:45:4b:78:08:6e: a0:56:28:53:0d:fa:51:a9:56:23:ff:8b:79:30:01:92:11:e9: 6b:e3:35:68:01:d3:e6:c5:eb:48:4d:fc:ab:54:b7:fa:9f:23: ff:82:7a:95:43:db:ef:66:06:ba:e7:f7:85:90:0b:6e:b0:96: d7:13:56:89:fd:6a:14:09:9a:fb:46:f4:ce:5d:ff:83:f7:6d: 5a:91:36:95:30:d6:b5:06:56:cc:7f:95:da:d7:7c:4c:b2:bd: 93:2a:f2:0f:09:a1:13:67:cf:d9:34:52:e5:d1:16:3d:c0:74: 29:58:7d:1f:3d:ee:59:04:66:ea:e2:02:50:44:7a:50:ed:06: d3:eb:7e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUxMTAyMjMxMTM2WhcNMjUxMTA5MjMxMTM2WjAYMRYwFAYD VQQDEw02OTA3ZTUyOC1kMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+uN7k69BrzxvReO5EznWpwEIh10We538SNXYvtg5Wb86G81VKlcTPKJ7CIn8 qnVIl5NtC+UdZVVSrCkSbVxUZG6X7pVqV8gef95BEX+znoJkC5HULF1xF6+h/awT qOw+CWngpeoTf+HYpRJQR1etYMc5hyEi5yibMi8AWagF+r9D0ceAtzS9YhebC46I P2k4s7f+kUSnxtDCItj/bIfRAbvbDHolVZJa3REFqf1rDxUlsV6YvJAu138Wu52h dVQsRQ9rApayOw5Gumze3lQ1BYMHpGqdcq9kM7F4DLAanat8o6nMdBCfWh2EUhL3 bFeXDmk90+hnaznujzRgGb6HcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHYgU3k EWnOYP59EEhHSFayl/U8MB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIpEnU0SJb7BTZat/6tbQVTHZTmuKvcf+N2GBI389JkTkV6aWtKHhm 8D0Sh4x2+N4VfCUieT4WfHkCffzks6AtSqpBr2Ejjy6dY+EXK1i2TRc1/fsaMyLN wkvMGiPJVP93w75PoKsUcuxsAaYTttkdZaYWntiF2XhORUt4CG6gVihTDfpRqVYj /4t5MAGSEelr4zVoAdPmxetITfyrVLf6nyP/gnqVQ9vvZga65/eFkAtusJbXE1aJ /WoUCZr7RvTOXf+D921akTaVMNa1BlbMf5Xa13xMsr2TKvIPCaETZ8/ZNFLl0RY9 wHQpWH0fPe5ZBGbq4gJQRHpQ7QbT635v -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:23 2025 by rpki-client