$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: ETYx9EfQQk6OHwXIWAvr004ZdEf/EBRTIuGKoTA+1uM= Subject key identifier: 4E:8A:C5:47:FD:DD:4B:DB:25:8E:24:68:60:5A:F4:BF:E5:04:77:45 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 02:31:43 +0000 Manifest this update: Sat 23 Aug 2025 02:31:43 +0000 Manifest next update: Sat 30 Aug 2025 02:31:43 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: Ff+sp3Xks9jtIANFvlOwyj91+UzPCIXzyEOtz8rTZaw=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Aug 23 02:31:43 2025 GMT Not After : Aug 30 02:31:43 2025 GMT Subject: CN=68a9280f-69b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:39:70:8f:28:05:6d:32:b6:ba:91:9a:3a: 57:fb:7f:e3:39:e0:37:38:7d:de:89:8f:64:45:c6: b0:ca:a4:01:27:3b:1f:53:90:46:9e:2d:04:af:73: f9:10:36:06:57:2e:4b:35:10:0e:a2:31:75:c0:4a: f0:ea:f2:05:24:95:21:16:6d:d8:3b:e0:c6:6a:95: a6:e9:01:b6:e7:38:ba:d5:31:e2:40:76:c8:2d:64: f1:cc:86:ed:f3:52:06:8e:bb:62:4e:8b:af:04:5f: 42:5e:a9:d3:0b:6e:4c:2c:02:a4:e5:7d:7b:32:93: 89:6e:5d:3a:a4:13:06:c5:65:dd:55:63:15:1a:26: c1:7c:10:96:1a:51:dc:ee:40:b1:23:8a:7d:01:fa: 14:b3:36:e9:68:10:30:86:05:64:e3:8c:fd:a4:11: 79:e4:7c:20:9e:2e:d0:84:27:98:8a:d5:42:bc:d3: 0e:09:36:7a:87:67:45:4c:a9:1d:6b:76:a4:10:69: 0f:dd:df:a2:19:06:19:ad:d7:b0:18:3f:57:5e:14: ad:e7:f6:a3:36:86:7f:cb:34:55:29:b2:a3:39:4f: 6f:7f:78:5c:38:cf:f4:74:85:a6:60:d4:0d:2f:e5: 25:0a:de:89:4b:d2:67:c7:74:87:23:e4:0a:0b:67: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:C5:47:FD:DD:4B:DB:25:8E:24:68:60:5A:F4:BF:E5:04:77:45 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:4f:04:5f:d0:de:5d:b4:e4:d7:12:22:95:52:ee:21:59:9e: b9:f5:90:c1:45:cd:0a:f6:ef:48:aa:e3:0b:fc:2c:56:ae:fc: 31:60:4d:c4:2a:f9:42:d6:9a:62:8d:1f:76:bd:c1:b3:c0:6f: ee:bd:1d:6b:47:91:a4:f4:73:5d:f6:64:37:0b:e4:3d:2e:49: c7:a2:43:b5:a4:42:30:fe:32:f3:24:f6:f8:02:92:3a:c1:40: 38:fa:f8:bc:33:97:d6:f3:8c:e0:77:ef:3c:92:6d:2e:a5:35: 55:0b:a7:04:b6:8f:40:b3:ff:3f:bc:17:b6:88:d9:06:ba:93: 2f:95:b1:33:ca:21:64:a5:30:9b:09:d2:aa:45:1a:75:0d:1c: 1e:4b:1d:01:48:38:84:58:82:31:8d:5d:2b:8a:c1:3f:8e:f4: a0:ff:fb:74:06:30:2f:69:6c:3e:d6:2b:eb:d8:9b:04:26:64: 25:a1:b3:39:3b:9d:43:ba:46:13:4a:fa:09:41:09:ba:c4:fe: 7b:8f:d2:c5:10:85:34:a7:ef:ef:49:83:71:5e:ea:25:c1:d7: 51:2a:8b:49:14:ad:aa:d0:01:2d:47:dc:5e:a8:68:f9:3d:c7: 36:b9:8e:f8:78:98:dd:29:27:34:3d:9b:69:36:9d:22:ee:a0: d6:50:72:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwODIzMDIzMTQzWhcNMjUwODMwMDIzMTQzWjAYMRYwFAYD VQQDEw02OGE5MjgwZi02OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk905cI8oBW0ytrqRmjpX+3/jOeA3OH3eiY9kRcawyqQBJzsfU5BGni0Er3P5 EDYGVy5LNRAOojF1wErw6vIFJJUhFm3YO+DGapWm6QG25zi61THiQHbILWTxzIbt 81IGjrtiTouvBF9CXqnTC25MLAKk5X17MpOJbl06pBMGxWXdVWMVGibBfBCWGlHc 7kCxI4p9AfoUszbpaBAwhgVk44z9pBF55Hwgni7QhCeYitVCvNMOCTZ6h2dFTKkd a3akEGkP3d+iGQYZrdewGD9XXhSt5/ajNoZ/yzRVKbKjOU9vf3hcOM/0dIWmYNQN L+UlCt6JS9Jnx3SHI+QKC2cIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6KxUf9 3UvbJY4kaGBa9L/lBHdFMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSTwRf0N5dtOTXEiKVUu4hWZ659ZDBRc0K9u9IquML/CxWrvwxYE3E KvlC1ppijR92vcGzwG/uvR1rR5Gk9HNd9mQ3C+Q9LknHokO1pEIw/jLzJPb4ApI6 wUA4+vi8M5fW84zgd+88km0upTVVC6cEto9As/8/vBe2iNkGupMvlbEzyiFkpTCb CdKqRRp1DRweSx0BSDiEWIIxjV0risE/jvSg//t0BjAvaWw+1ivr2JsEJmQlobM5 O51DukYTSvoJQQm6xP57j9LFEIU0p+/vSYNxXuolwddRKotJFK2q0AEtR9xeqGj5 Pcc2uY74eJjdKSc0PZtpNp0i7qDWUHJA -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:42 2025 by rpki-client