$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: jFyTw6AoFYKl7NIqjcmv8oO9Lfj4RxrQhuF21QsBGH4= Subject key identifier: E9:46:A6:2D:0A:DE:D7:92:01:FF:59:22:87:FD:11:BC:4F:98:82:9C Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 0295 Signing time: Mon 03 Nov 2025 01:30:53 +0000 Manifest this update: Mon 03 Nov 2025 01:30:52 +0000 Manifest next update: Mon 10 Nov 2025 01:30:52 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: IA4pY5BWt6f29iiAz9sTeLEmNFfTXxTnwOgO1sKDHAo=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Nov 3 01:30:52 2025 GMT Not After : Nov 10 01:30:52 2025 GMT Subject: CN=690805cc-5ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:9f:e3:a4:46:be:c9:01:1e:82:23:67:5c: 44:72:14:65:83:66:fa:36:c9:aa:81:53:b9:66:af: 7d:2f:a9:52:72:b9:35:05:59:12:6e:37:5c:4c:22: 15:7e:ab:22:5d:9e:06:ec:02:c5:bb:4e:b2:8e:0e: fb:7e:4c:14:8b:32:d1:bf:31:17:0e:31:cd:8d:82: ac:d2:91:6e:58:1f:e7:37:87:10:7e:d1:74:4e:1e: 75:07:58:92:3e:61:d2:e0:be:59:8f:f9:70:ee:d9: b4:a2:55:df:9b:1a:e0:66:57:c8:85:de:b4:6b:5b: 8b:32:7e:20:22:17:6c:1a:f1:81:9c:41:5f:1c:08: ff:e3:4f:47:81:90:cc:ab:f1:42:10:bf:e0:e1:19: a0:7a:c6:29:49:c9:d7:c8:e3:72:2e:15:7e:0a:9b: b4:41:7c:8b:e9:42:21:b2:21:bf:3d:77:c1:68:df: 42:ab:1d:56:c4:1e:e5:ed:d2:4a:84:99:2e:31:2b: 19:22:cb:c6:88:0c:fd:de:a7:59:33:94:71:30:54: 9d:49:a5:cb:ba:a0:7c:03:0d:c6:5b:c4:73:0e:45: 65:41:f2:bc:f1:02:a0:f3:d3:5d:2f:b4:64:3a:2a: fe:d3:0d:8d:c6:f9:30:9f:5a:46:a5:cd:2e:c3:f1: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:46:A6:2D:0A:DE:D7:92:01:FF:59:22:87:FD:11:BC:4F:98:82:9C X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:25:2e:fd:68:5b:d4:0e:0c:3e:23:87:43:15:c4:37:ba:9f: 3e:a5:d1:fd:6d:4e:25:21:1c:71:ed:de:78:1f:f9:87:43:3b: 21:4c:8e:c1:71:a9:24:05:7c:59:bb:47:b7:2d:f1:d7:7d:26: e3:6d:25:6d:03:05:94:e4:f0:f2:75:40:76:84:0b:67:b2:06: 20:c5:76:76:6d:80:38:aa:c6:0f:72:8b:0c:6b:17:76:f0:c4: 97:51:e6:23:51:26:0a:5a:41:05:1f:dc:f8:6c:0f:85:53:c1: 1d:78:39:32:13:6e:bb:a2:55:fc:e1:8c:53:7c:83:08:aa:e9: cd:e5:15:54:0e:98:41:a6:c2:28:7b:aa:5a:26:1c:0d:e2:ae: 20:8a:34:86:ed:6b:af:03:08:6e:ad:98:fb:56:ce:29:4b:ab: 5b:ec:5c:4e:ff:a9:b6:de:41:7a:a9:c0:8a:3b:88:15:55:9a: 8b:ec:be:bb:89:06:09:57:00:3c:c0:0d:14:37:e7:45:75:c7: fb:93:37:18:81:72:1f:e1:04:49:5e:6d:fa:93:5c:31:4c:24: 9c:1a:f4:62:8e:02:6b:7a:a6:2e:3f:2d:d8:03:2d:4b:9f:12: 1d:23:6d:0f:22:91:4b:a2:86:a0:65:72:1b:08:26:82:d5:9e: a9:28:9c:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUxMTAzMDEzMDUyWhcNMjUxMTEwMDEzMDUyWjAYMRYwFAYD VQQDEw02OTA4MDVjYy01ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bCf46RGvskBHoIjZ1xEchRlg2b6NsmqgVO5Zq99L6lScrk1BVkSbjdcTCIV fqsiXZ4G7ALFu06yjg77fkwUizLRvzEXDjHNjYKs0pFuWB/nN4cQftF0Th51B1iS PmHS4L5Zj/lw7tm0olXfmxrgZlfIhd60a1uLMn4gIhdsGvGBnEFfHAj/409HgZDM q/FCEL/g4RmgesYpScnXyONyLhV+Cpu0QXyL6UIhsiG/PXfBaN9Cqx1WxB7l7dJK hJkuMSsZIsvGiAz93qdZM5RxMFSdSaXLuqB8Aw3GW8RzDkVlQfK88QKg89NdL7Rk Oir+0w2Nxvkwn1pGpc0uw/E2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlGpi0K 3teSAf9ZIof9EbxPmIKcMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACJS79aFvUDgw+I4dDFcQ3up8+pdH9bU4lIRxx7d54H/mHQzshTI7B cakkBXxZu0e3LfHXfSbjbSVtAwWU5PDydUB2hAtnsgYgxXZ2bYA4qsYPcosMaxd2 8MSXUeYjUSYKWkEFH9z4bA+FU8EdeDkyE267olX84YxTfIMIqunN5RVUDphBpsIo e6paJhwN4q4gijSG7WuvAwhurZj7Vs4pS6tb7FxO/6m23kF6qcCKO4gVVZqL7L67 iQYJVwA8wA0UN+dFdcf7kzcYgXIf4QRJXm36k1wxTCScGvRijgJreqYuPy3YAy1L nxIdI20PIpFLooagZXIbCCaC1Z6pKJw2 -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:39 2025 by rpki-client