$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: mS7qAPM/WpvRvVhg3qHagv/FBjd0ts24PTdE2u/mJ5o= Subject key identifier: 47:6A:F8:EA:4F:57:34:7E:F0:EC:F6:B4:CE:33:31:A0:89:BB:67:9E Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 1035 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 1029 Signing time: Tue 04 Nov 2025 17:31:20 +0000 Manifest this update: Tue 04 Nov 2025 17:31:20 +0000 Manifest next update: Tue 11 Nov 2025 17:31:20 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: UPUGWXNHDvRmyCg3yW/JL0xhoVNripU6zs8wNfQLzmc=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4149 (0x1035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Nov 4 17:31:20 2025 GMT Not After : Nov 11 17:31:20 2025 GMT Subject: CN=690a3868-e728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:b2:5f:ae:87:c7:e2:8c:6c:92:45:7b:d8: ce:eb:bb:88:57:02:b8:d8:89:61:a1:f2:3c:d5:e2: 44:ba:6a:80:4a:31:67:ed:cd:47:00:ac:ae:7d:b8: 89:1e:9c:1a:b7:7f:5e:65:d6:0f:e9:fe:81:7e:ee: ab:e9:29:3a:72:8a:c2:8a:ca:81:6b:d3:b9:c0:a4: a3:ed:90:2f:49:c4:e9:e7:ac:d7:13:9f:e6:59:0e: c6:9d:00:69:15:1e:14:37:37:da:fb:b4:b0:26:9f: 50:10:2d:30:05:29:76:ce:cb:b1:2f:bc:65:51:7e: 57:63:a8:bf:a0:b8:f2:eb:18:12:63:25:22:c3:47: d2:b4:fd:12:c6:93:b8:4d:5c:92:67:6c:1c:63:8b: 6b:70:2f:45:72:f5:eb:f7:38:ac:2a:84:5a:74:a5: dd:f0:f1:6c:e0:ee:4d:0e:dc:b3:b5:c1:b3:66:fa: 3c:09:aa:3c:e6:ff:cf:77:df:0e:0c:ad:d6:7b:a3: d9:1e:a2:f8:03:d9:85:ef:25:2d:93:d5:71:fe:de: d1:04:6c:21:83:6c:ea:34:15:cf:d5:68:d8:8a:80: 9a:29:41:50:68:ed:4b:50:b3:31:b8:e4:2d:43:d3: 3e:8d:fa:dc:03:2e:73:5f:bf:57:39:42:c4:7d:f2: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6A:F8:EA:4F:57:34:7E:F0:EC:F6:B4:CE:33:31:A0:89:BB:67:9E X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:19:68:2d:37:9f:ff:2a:a2:81:85:55:34:c1:02:a1:43:eb: 45:cf:bc:4d:df:8c:a8:90:0a:18:47:8d:b0:19:6c:6f:4c:a3: 9c:0d:94:a9:1d:57:fe:f6:5a:bd:16:92:69:4e:23:79:7c:1e: 43:5e:16:59:3b:4c:62:63:ff:70:82:c2:63:5d:a8:eb:a4:68: 5d:94:79:26:fd:ed:0f:fe:29:34:30:7a:22:bd:bc:40:bc:e9: ef:38:08:b6:39:1b:f0:b2:87:c3:cd:d6:06:67:a0:99:3a:60: 48:a3:50:b2:c6:80:66:3f:ef:be:4e:0c:dc:e5:d5:b8:ad:9f: 81:bf:9c:5b:3b:c8:3f:ce:c0:4c:fb:34:ec:3a:a5:bd:72:39: af:79:6e:7d:9c:cd:d4:a2:e3:ac:81:f5:d8:00:2d:81:d8:dd: 43:36:89:70:e3:9c:b0:1e:2b:f4:5f:b2:0b:a7:fe:aa:9e:ce: e2:90:2e:81:57:f8:71:04:49:14:f3:90:43:fe:a2:09:5b:d0: 87:32:83:10:24:a5:0d:cc:65:f3:4f:e7:26:b8:61:e3:4e:f2: 9c:0b:8c:a4:17:8b:90:2d:fb:1a:02:6c:66:79:c9:c8:54:36: 26:2c:15:30:89:2d:62:30:0b:8c:69:3f:40:2d:8f:c4:45:c6: 3f:6d:d4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUxMTA0MTczMTIwWhcNMjUxMTExMTczMTIwWjAYMRYwFAYD VQQDEw02OTBhMzg2OC1lNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3C2yX66Hx+KMbJJFe9jO67uIVwK42IlhofI81eJEumqASjFn7c1HAKyufbiJ Hpwat39eZdYP6f6Bfu6r6Sk6corCisqBa9O5wKSj7ZAvScTp56zXE5/mWQ7GnQBp FR4UNzfa+7SwJp9QEC0wBSl2zsuxL7xlUX5XY6i/oLjy6xgSYyUiw0fStP0SxpO4 TVySZ2wcY4trcC9FcvXr9zisKoRadKXd8PFs4O5NDtyztcGzZvo8Cao85v/Pd98O DK3We6PZHqL4A9mF7yUtk9Vx/t7RBGwhg2zqNBXP1WjYioCaKUFQaO1LULMxuOQt Q9M+jfrcAy5zX79XOULEffIZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdq+OpP VzR+8Oz2tM4zMaCJu2eeMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxGWgtN5//KqKBhVU0wQKhQ+tFz7xN34yokAoYR42wGWxvTKOcDZSp HVf+9lq9FpJpTiN5fB5DXhZZO0xiY/9wgsJjXajrpGhdlHkm/e0P/ik0MHoivbxA vOnvOAi2ORvwsofDzdYGZ6CZOmBIo1CyxoBmP+++Tgzc5dW4rZ+Bv5xbO8g/zsBM +zTsOqW9cjmveW59nM3UouOsgfXYAC2B2N1DNolw45ywHiv0X7ILp/6qns7ikC6B V/hxBEkU85BD/qIJW9CHMoMQJKUNzGXzT+cmuGHjTvKcC4ykF4uQLfsaAmxmecnI VDYmLBUwiS1iMAuMaT9ALY/ERcY/bdRi -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:56 2025 by rpki-client