$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: Qc/XKDmFqPDY4Bz0FedKstNHamlbIfKqrtdWZIKwFCk= Subject key identifier: 2A:08:58:74:EC:76:FC:74:F8:33:C8:AE:4A:87:83:E8:F4:38:D2:E7 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: EB Signing time: Wed 05 Nov 2025 05:37:22 +0000 Manifest this update: Wed 05 Nov 2025 05:37:21 +0000 Manifest next update: Wed 12 Nov 2025 05:37:21 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: E7QJJIIr+w3jiI3oUqMQrN9NF82b6xpEq/+JSXFmdps=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Nov 5 05:37:21 2025 GMT Not After : Nov 12 05:37:21 2025 GMT Subject: CN=690ae291-f7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fb:79:48:98:66:d6:f1:d2:40:2b:41:47:38: 51:6e:78:91:04:07:5d:c2:27:02:e5:d4:51:c6:04: 96:ea:6d:63:f3:1e:3c:72:35:70:d4:8e:cb:4f:32: a4:b8:2a:9c:ad:cb:28:91:d1:c9:65:4a:09:3f:32: f5:bd:74:7a:53:63:31:af:04:fa:02:68:77:b9:ce: f4:84:0e:93:55:f1:bd:54:08:7a:fe:30:f6:b1:0b: f5:f2:15:17:e5:b4:47:81:e1:aa:4c:73:d9:41:4b: ce:d8:d8:e0:4e:68:04:43:51:01:e3:01:41:5a:12: cc:aa:47:80:b2:09:53:7c:c4:1c:4b:86:e1:78:fc: 7d:78:66:88:71:e4:d2:db:26:1f:bc:2a:07:93:ec: 62:2f:45:b8:3b:0c:ab:95:c9:7b:30:2d:78:c2:5f: b3:0d:a7:c0:ab:54:a8:b4:b5:44:58:a1:8a:26:d2: 56:d7:7a:67:ed:f6:ca:9f:c9:c0:bc:50:63:a8:c0: 40:c6:fc:7c:75:15:00:a5:2a:10:2c:80:21:69:42: 16:f3:e0:27:93:dd:b5:19:52:c9:73:52:0f:2b:26: 83:0d:fb:08:0e:2d:62:fb:e8:f1:03:e4:88:11:71: 67:53:63:9d:01:e3:40:57:12:b8:5d:c9:b2:e7:a5: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:08:58:74:EC:76:FC:74:F8:33:C8:AE:4A:87:83:E8:F4:38:D2:E7 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f0:66:63:e3:7e:64:63:4a:f0:1c:c0:a8:71:86:64:c6:1e: 5c:02:58:af:39:9b:b7:8e:82:c8:76:f2:ec:77:f9:7a:4c:d3: e3:a4:6f:ea:bf:9d:fa:33:4b:eb:57:8e:83:1e:b9:c7:1c:4e: c0:17:a4:5b:96:59:64:e1:36:ac:e4:be:73:3b:1f:12:7e:17: 3f:f2:3c:10:c7:48:b3:cb:80:14:38:65:06:02:84:b8:3c:4d: a2:07:5e:8d:23:b9:f5:b5:e7:d4:61:95:78:4a:7e:47:97:3c: 34:74:3e:5f:01:7b:c3:fe:01:eb:e0:5d:7a:e6:cb:05:79:66: a0:0b:00:0d:a4:02:1a:87:96:8e:54:30:97:fd:3a:77:0b:58: 4e:f1:d7:09:9d:f9:56:14:fa:6b:45:ed:55:a9:24:50:83:71: 16:8f:1d:76:8e:cc:27:60:38:c3:e1:36:c1:5d:3a:81:de:80: 01:77:eb:bf:6b:27:d6:8c:77:b6:58:cb:b7:ab:b6:d5:79:51: 72:48:59:cd:b8:58:0d:8e:4a:5b:a3:c9:cf:ba:ea:d9:05:e4: 58:be:6b:d5:16:46:87:a1:40:93:48:e4:be:ab:4f:fe:7f:c1: 8c:70:df:eb:fd:f2:bb:63:43:1b:f1:25:3d:a5:d8:1c:59:d5: f0:38:e1:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUxMTA1MDUzNzIxWhcNMjUxMTEyMDUzNzIxWjAYMRYwFAYD VQQDEw02OTBhZTI5MS1mN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ft5SJhm1vHSQCtBRzhRbniRBAddwicC5dRRxgSW6m1j8x48cjVw1I7LTzKk uCqcrcsokdHJZUoJPzL1vXR6U2MxrwT6Amh3uc70hA6TVfG9VAh6/jD2sQv18hUX 5bRHgeGqTHPZQUvO2NjgTmgEQ1EB4wFBWhLMqkeAsglTfMQcS4bhePx9eGaIceTS 2yYfvCoHk+xiL0W4Owyrlcl7MC14wl+zDafAq1SotLVEWKGKJtJW13pn7fbKn8nA vFBjqMBAxvx8dRUApSoQLIAhaUIW8+Ank921GVLJc1IPKyaDDfsIDi1i++jxA+SI EXFnU2OdAeNAVxK4Xcmy56UPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoIWHTs dvx0+DPIrkqHg+j0ONLnMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG8GZj435kY0rwHMCocYZkxh5cAlivOZu3joLIdvLsd/l6TNPjpG/q v536M0vrV46DHrnHHE7AF6Rblllk4Tas5L5zOx8Sfhc/8jwQx0izy4AUOGUGAoS4 PE2iB16NI7n1tefUYZV4Sn5Hlzw0dD5fAXvD/gHr4F165ssFeWagCwANpAIah5aO VDCX/Tp3C1hO8dcJnflWFPprRe1VqSRQg3EWjx12jswnYDjD4TbBXTqB3oABd+u/ ayfWjHe2WMu3q7bVeVFySFnNuFgNjkpbo8nPuurZBeRYvmvVFkaHoUCTSOS+q0/+ f8GMcN/r/fK7Y0Mb8SU9pdgcWdXwOOHq -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:55 2025 by rpki-client