$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: uBEViScvstc6LzeVHE07oxNU69oWGj4P1M80EuQHMmo= Subject key identifier: C6:D9:F0:3C:49:6A:28:1B:14:F0:D7:99:80:30:75:4A:8C:07:7E:3D Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0AD4 Signing time: Tue 04 Nov 2025 20:36:07 +0000 Manifest this update: Tue 04 Nov 2025 20:36:06 +0000 Manifest next update: Tue 11 Nov 2025 20:36:06 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: M3/bCITzXQb658xjaw9xnw3St5e8mnmXgsu9r8SYW2U=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Nov 4 20:36:06 2025 GMT Not After : Nov 11 20:36:06 2025 GMT Subject: CN=690a63b6-199a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:4f:5c:4c:45:54:d7:68:b4:15:57:c4:cb: ed:41:4d:e3:50:fe:33:83:66:70:13:61:0d:62:f2: dc:34:e6:4a:69:10:de:fe:24:d5:4e:25:3a:df:0e: a7:42:42:3f:de:50:b3:a4:f5:df:39:f1:c6:09:9b: 38:fd:8d:27:1d:b3:15:79:74:a1:59:c4:d4:f8:d6: af:09:63:f8:9c:55:aa:0c:8d:ca:08:06:ea:cd:c5: 78:a7:96:6b:a8:b6:4d:37:19:12:30:79:75:c7:13: 7f:cc:9b:c6:76:27:23:cd:5f:42:8c:d6:2c:fa:27: eb:7e:67:20:56:4a:a7:4a:91:82:c8:a8:5e:d4:a7: 84:1f:62:82:68:95:75:af:5f:49:45:fa:c5:bf:bf: 59:7b:04:d1:1e:20:fb:42:16:a2:6d:78:8b:be:03: 61:85:8f:52:46:32:fe:a4:35:0c:58:87:36:e5:71: 91:ab:96:a8:12:96:c0:1c:cf:0f:47:a0:3a:a4:c5: 0b:e5:7d:c6:4e:ee:d3:e8:cd:6d:95:f3:ac:bf:53: 80:8a:42:3b:77:5e:2e:6f:33:76:4e:7d:d8:6c:07: f4:31:37:0a:03:f8:7f:8c:2e:b6:5a:d5:0c:a4:f1: f4:8f:0f:d8:d9:09:8e:ce:b0:a0:04:05:82:d2:96: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D9:F0:3C:49:6A:28:1B:14:F0:D7:99:80:30:75:4A:8C:07:7E:3D X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cf:21:52:b7:3c:10:a7:7f:a0:5b:82:57:5a:a3:da:2f:33: 02:f8:06:5a:2d:c0:6e:9f:ed:32:55:fc:01:dc:af:33:3f:97: 51:4b:fb:43:de:da:ba:28:54:09:63:f8:87:1b:72:05:cd:5c: f5:c1:f9:65:63:6f:bb:32:bf:6c:b3:7a:c6:fe:30:00:c0:aa: bc:ed:08:99:3c:f1:b2:77:05:da:f6:01:dd:7c:a6:b0:80:5f: 2f:9c:6e:f4:3d:f4:de:75:e6:d9:84:37:ff:86:89:72:26:07: f4:f7:0a:14:c3:f2:40:c3:d9:0f:d8:56:11:ce:8b:f2:17:72: c3:b8:91:0d:0a:a1:09:7f:2b:06:9a:af:d6:8f:36:62:49:78: ca:e2:ad:20:48:36:c0:3f:9d:4d:10:80:bd:c3:d2:2e:9c:5a: da:58:75:ed:e0:4c:c7:7d:b6:f6:c6:1d:51:58:87:63:5e:6c: 86:de:02:10:ca:7a:f7:6a:7d:89:47:e2:1a:00:2c:a1:f5:2a: 21:59:58:fc:77:0c:38:86:4a:45:2d:70:03:18:b8:71:a9:ab: d7:9c:91:2e:49:71:e5:8f:8f:42:ac:30:93:02:50:52:17:99: 6e:72:97:67:c1:2d:51:6a:ea:c3:61:bb:e1:15:17:44:22:2d: ea:90:90:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUxMTA0MjAzNjA2WhcNMjUxMTExMjAzNjA2WjAYMRYwFAYD VQQDEw02OTBhNjNiNi0xOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZtPXExFVNdotBVXxMvtQU3jUP4zg2ZwE2ENYvLcNOZKaRDe/iTVTiU63w6n QkI/3lCzpPXfOfHGCZs4/Y0nHbMVeXShWcTU+NavCWP4nFWqDI3KCAbqzcV4p5Zr qLZNNxkSMHl1xxN/zJvGdicjzV9CjNYs+ifrfmcgVkqnSpGCyKhe1KeEH2KCaJV1 r19JRfrFv79ZewTRHiD7QhaibXiLvgNhhY9SRjL+pDUMWIc25XGRq5aoEpbAHM8P R6A6pMUL5X3GTu7T6M1tlfOsv1OAikI7d14ubzN2Tn3YbAf0MTcKA/h/jC62WtUM pPH0jw/Y2QmOzrCgBAWC0pZUEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbZ8DxJ aigbFPDXmYAwdUqMB349MB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBzyFStzwQp3+gW4JXWqPaLzMC+AZaLcBun+0yVfwB3K8zP5dRS/tD 3tq6KFQJY/iHG3IFzVz1wfllY2+7Mr9ss3rG/jAAwKq87QiZPPGydwXa9gHdfKaw gF8vnG70PfTedebZhDf/holyJgf09woUw/JAw9kP2FYRzovyF3LDuJENCqEJfysG mq/WjzZiSXjK4q0gSDbAP51NEIC9w9IunFraWHXt4EzHfbb2xh1RWIdjXmyG3gIQ ynr3an2JR+IaACyh9SohWVj8dww4hkpFLXADGLhxqavXnJEuSXHlj49CrDCTAlBS F5lucpdnwS1RaurDYbvhFRdEIi3qkJCH -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:50 2025 by rpki-client