$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: eXvwbVmrB+ENmUUN59EjcnRip9nX3YPMC80bzY8Nlcs= Subject key identifier: A3:1B:85:54:14:7C:05:0E:6A:11:59:FB:55:5D:C7:DC:7D:7A:EF:02 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: C7 Signing time: Mon 03 Nov 2025 03:54:27 +0000 Manifest this update: Mon 03 Nov 2025 03:54:26 +0000 Manifest next update: Mon 10 Nov 2025 03:54:26 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: JahLbOJEEzOs0hN/vlNBQ/txSmWyeOMB0Yq5RLf3LUs=) 2: 640E4E709F6F11F0A268CE5DC4F9AE02.roa (hash: 2zmhOrf3j4kWN7WNyi93+FWxSiadjBJUCk2CS0HquvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Nov 3 03:54:26 2025 GMT Not After : Nov 10 03:54:26 2025 GMT Subject: CN=69082772-24d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:54:a8:99:ba:a8:1d:90:37:79:3b:f2:bf: 2f:94:8e:1b:3c:2f:5d:79:65:7c:5d:73:7b:c6:49: 01:73:18:38:cd:d3:f3:00:86:55:c3:40:ef:ba:74: 42:f3:c1:d7:7c:24:89:5f:f0:2f:68:e2:cc:3f:90: b1:d6:3b:c8:85:15:ec:6c:01:2d:a4:c9:bf:d7:cd: 85:22:3a:28:1a:cf:a7:94:b0:f8:b8:be:36:a5:e2: 25:06:48:d3:09:f7:cd:90:2f:e9:43:16:de:bc:5b: 0a:21:69:f8:be:62:c0:1b:5d:9d:45:9d:fd:7e:3a: 4a:2b:88:03:50:00:f1:a2:2b:5a:8e:7d:d3:a3:d9: e4:94:c5:f1:09:5c:d9:8a:ef:88:97:39:43:f4:6d: 7e:26:cf:2b:bd:da:8a:83:28:ba:10:8a:50:75:92: 27:37:1c:e4:c7:80:9f:33:e4:07:f5:4a:ab:f3:a6: 75:18:32:41:6c:32:57:db:69:bc:c0:9c:d2:2e:43: 47:ca:ba:93:f9:82:39:41:99:30:41:c1:a7:fe:d2: 76:b4:8a:60:6a:2d:b4:be:57:fe:14:62:cc:19:ee: 13:e8:16:7a:43:de:2b:0e:19:4b:3b:3a:ab:e4:a2: fb:5a:1f:b0:f7:47:2c:d3:ef:96:75:06:fd:53:47: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1B:85:54:14:7C:05:0E:6A:11:59:FB:55:5D:C7:DC:7D:7A:EF:02 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:20:77:8f:41:dd:11:2b:b4:3a:28:ac:8e:76:52:8c:07:8f: f7:73:9a:65:da:ab:86:ed:99:8d:0b:47:a4:15:29:1c:b3:c6: 5c:df:64:3f:eb:98:41:37:44:f9:64:f2:23:14:3e:9f:df:da: d5:a9:27:d2:78:f4:cb:b0:43:88:39:24:0d:69:67:85:35:73: c6:37:09:92:1a:e7:59:1e:e7:49:34:76:2e:26:07:41:43:b6: 3b:84:71:0b:7b:17:33:bd:06:18:e3:cf:09:12:db:aa:b9:8e: 18:20:59:61:c9:23:62:82:13:2a:d3:84:11:2d:5f:69:4a:24: c8:54:db:a3:a2:fd:8c:3a:3a:15:ac:74:b2:d3:bb:cc:f5:cd: 3e:4a:7b:a8:84:65:d3:d4:a9:93:29:4f:13:76:86:01:0d:ae: e9:1f:92:77:55:6f:21:35:a5:c1:8f:0e:fb:b6:23:ca:b4:73: da:18:26:d2:a7:85:8a:bb:12:91:4e:c8:d5:bc:07:e9:57:5d: 92:78:95:f4:01:87:2f:08:df:61:e2:0c:9f:71:ed:27:58:bd: b5:b4:d6:1b:13:5e:44:4f:8a:18:59:c6:2f:b1:2a:1a:8f:31: 3b:56:f7:aa:08:b3:f3:99:bc:0e:90:89:1c:7a:3a:4a:32:37: 99:53:3d:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUxMTAzMDM1NDI2WhcNMjUxMTEwMDM1NDI2WjAYMRYwFAYD VQQDEw02OTA4Mjc3Mi0yNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14RUqJm6qB2QN3k78r8vlI4bPC9deWV8XXN7xkkBcxg4zdPzAIZVw0DvunRC 88HXfCSJX/AvaOLMP5Cx1jvIhRXsbAEtpMm/182FIjooGs+nlLD4uL42peIlBkjT CffNkC/pQxbevFsKIWn4vmLAG12dRZ39fjpKK4gDUADxoitajn3To9nklMXxCVzZ iu+IlzlD9G1+Js8rvdqKgyi6EIpQdZInNxzkx4CfM+QH9Uqr86Z1GDJBbDJX22m8 wJzSLkNHyrqT+YI5QZkwQcGn/tJ2tIpgai20vlf+FGLMGe4T6BZ6Q94rDhlLOzqr 5KL7Wh+w90cs0++WdQb9U0fwGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMbhVQU fAUOahFZ+1Vdx9x9eu8CMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhIHePQd0RK7Q6KKyOdlKMB4/3c5pl2quG7ZmNC0ekFSkcs8Zc32Q/ 65hBN0T5ZPIjFD6f39rVqSfSePTLsEOIOSQNaWeFNXPGNwmSGudZHudJNHYuJgdB Q7Y7hHELexczvQYY488JEtuquY4YIFlhySNighMq04QRLV9pSiTIVNujov2MOjoV rHSy07vM9c0+SnuohGXT1KmTKU8TdoYBDa7pH5J3VW8hNaXBjw77tiPKtHPaGCbS p4WKuxKRTsjVvAfpV12SeJX0AYcvCN9h4gyfce0nWL21tNYbE15ET4oYWcYvsSoa jzE7VveqCLPzmbwOkIkcejpKMjeZUz1h -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:27 2025 by rpki-client