$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: rfQ1oYLHJlBvj1N44VnHwXJWxGroJEwYERFYcWKAvow= Subject key identifier: 77:42:05:56:B9:6F:45:F1:F6:18:4C:24:62:7A:5D:CE:49:61:89:CE Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 029C Signing time: Mon 03 Nov 2025 01:31:47 +0000 Manifest this update: Mon 03 Nov 2025 01:31:47 +0000 Manifest next update: Mon 10 Nov 2025 01:31:47 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: N78FZNOq9Mvf7me0xdLpkSpGqwBlezwJUV7sjTiSBqQ=) 2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: Pai3Nu3+CpU9xUHwjv55hhEZi3jdFTx+UDy7SG0bPko=) 3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: /9WwScNnwKtuTN07Iz2vc8yMRAg5E8y5OFcRZD0NbCM=) 4: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: ut+bDFNYD/cDGx/IefSywFEYVi8u+Nng1jjgZBD3c3k=) 5: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: GX+AW8ueL4QUC5f9XTmLIBQG0hxveckbMLPTPWw+Kk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: Nov 3 01:31:47 2025 GMT Not After : Nov 10 01:31:47 2025 GMT Subject: CN=69080603-dfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:b7:35:49:9f:fa:ec:93:a9:2c:5a:d3:b4: e0:2b:c6:2c:fa:36:d4:bb:4b:1f:96:26:f5:5e:21: f4:96:b0:4d:f3:7b:fb:81:df:b8:73:44:b5:35:c6: cf:6e:d9:4b:fc:62:d3:5e:42:a7:f9:a8:6a:10:3d: 3b:06:62:df:ff:d1:86:08:a6:13:6b:b3:d6:2f:ff: 79:bc:f7:5c:68:ac:c1:c2:cc:a3:04:78:00:83:66: 3a:f7:89:f7:54:de:de:5d:6a:92:16:d4:68:17:65: 9f:26:ad:3d:f2:18:ba:b1:47:08:24:8c:7a:e2:f4: 73:68:3a:8d:47:89:fc:6b:a0:1d:69:69:c3:3e:f9: 98:3c:17:b6:b6:1d:df:9f:cc:ba:2c:ab:3a:d7:56: be:ef:d6:ce:0d:2b:4e:83:09:34:03:2c:fd:65:14: 33:bb:88:ea:41:a9:b0:cc:f6:3f:be:69:04:db:e4: a7:30:f7:64:30:72:6a:05:26:0f:88:76:b5:4f:40: 7d:4f:f4:07:ba:a9:43:b3:42:21:fc:29:51:b2:a8: 5e:0a:cd:e5:6d:4b:e7:07:8a:9e:4a:fd:f3:aa:31: 68:c4:79:ab:19:43:fb:1d:3d:57:9f:9d:66:9c:ed: d4:1f:8e:19:e9:b4:9c:2f:83:4f:f1:3d:ff:31:c2: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:42:05:56:B9:6F:45:F1:F6:18:4C:24:62:7A:5D:CE:49:61:89:CE X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:87:6d:41:f1:f0:89:29:07:62:a4:7b:e5:7e:3e:bc:fb: db:4d:dc:26:df:6b:ae:5c:f8:e1:4f:d5:0a:ea:01:c4:f1:54: 1a:eb:ec:7d:07:9b:40:20:81:8f:c0:3d:be:b9:67:48:a1:7a: 47:79:aa:eb:7c:57:c0:c2:7e:f5:a4:1b:92:e6:57:de:d0:e9: 3a:e4:2d:78:e2:5d:db:d7:d0:7e:f0:62:48:fb:ba:d2:c8:ff: 02:4b:70:be:00:b5:51:7d:ed:ae:ea:d8:01:f9:67:fd:22:cd: 19:02:75:12:01:89:f1:3b:7f:bc:af:d2:0a:09:45:b0:53:73: 44:4f:f7:3f:c7:45:40:ac:b0:cd:ab:6b:99:80:ba:6e:7b:23: a5:fe:7f:b2:8a:27:5b:96:98:ac:f4:de:39:1c:4a:e1:15:34: c4:48:2b:81:1e:0a:83:a8:01:6a:30:d0:ee:a6:b0:0a:64:9f: f3:85:52:91:82:a5:d0:44:de:6a:bf:d5:b3:9d:ff:54:9e:3a: 12:8b:b0:97:43:22:09:d3:ab:81:de:8d:8e:a1:92:e7:50:28: 9a:0a:54:e0:91:9d:13:90:52:f7:21:53:4a:19:1d:6c:ab:85: bd:2f:47:8c:27:9a:8d:74:41:28:55:74:60:a1:0e:5a:2e:3a: f1:73:ae:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUxMTAzMDEzMTQ3WhcNMjUxMTEwMDEzMTQ3WjAYMRYwFAYD VQQDEw02OTA4MDYwMy1kZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1i3NUmf+uyTqSxa07TgK8Ys+jbUu0sflib1XiH0lrBN83v7gd+4c0S1NcbP btlL/GLTXkKn+ahqED07BmLf/9GGCKYTa7PWL/95vPdcaKzBwsyjBHgAg2Y694n3 VN7eXWqSFtRoF2WfJq098hi6sUcIJIx64vRzaDqNR4n8a6AdaWnDPvmYPBe2th3f n8y6LKs611a+79bODStOgwk0Ayz9ZRQzu4jqQamwzPY/vmkE2+SnMPdkMHJqBSYP iHa1T0B9T/QHuqlDs0Ih/ClRsqheCs3lbUvnB4qeSv3zqjFoxHmrGUP7HT1Xn51m nO3UH44Z6bScL4NP8T3/McKtgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdCBVa5 b0Xx9hhMJGJ6Xc5JYYnOMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACXodtQfHwiSkHYqR75X4+vPvbTdwm32uuXPjhT9UK6gHE8VQa6+x9 B5tAIIGPwD2+uWdIoXpHearrfFfAwn71pBuS5lfe0Ok65C144l3b19B+8GJI+7rS yP8CS3C+ALVRfe2u6tgB+Wf9Is0ZAnUSAYnxO3+8r9IKCUWwU3NET/c/x0VArLDN q2uZgLpueyOl/n+yiidblpis9N45HErhFTTESCuBHgqDqAFqMNDuprAKZJ/zhVKR gqXQRN5qv9Wznf9UnjoSi7CXQyIJ06uB3o2OoZLnUCiaClTgkZ0TkFL3IVNKGR1s q4W9L0eMJ5qNdEEoVXRgoQ5aLjrxc648 -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:50 2025 by rpki-client