$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: qQSud3A8aORn3e42aQzf5zVaRz77iyHV9TgPAKKvDOY= Subject key identifier: D4:6C:13:31:1E:48:0E:EC:54:72:8A:42:E1:AA:92:56:46:E4:83:15 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 01AF Signing time: Fri 22 Aug 2025 18:59:44 +0000 Manifest this update: Fri 22 Aug 2025 18:59:44 +0000 Manifest next update: Fri 29 Aug 2025 18:59:44 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: wAGSJ8eW4f5Y/10dlRRgEV/47z3jaBY9hs/mIduRtAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Aug 22 18:59:44 2025 GMT Not After : Aug 29 18:59:44 2025 GMT Subject: CN=68a8be20-ebb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:08:be:52:25:f3:f8:4a:30:90:e7:7c:c2: 8f:8e:1c:25:c9:68:bf:cb:a8:37:05:ca:00:4f:e8: 34:21:4e:3f:35:66:5b:85:fe:6d:f1:db:47:8d:97: a8:ac:82:7d:57:63:12:af:5a:c6:28:8a:2c:34:f2: 98:9d:61:14:13:9e:95:82:fb:8d:15:65:6f:20:fb: 6f:8b:75:55:e9:ad:61:50:0f:ff:37:f4:00:30:f6: ba:23:4b:42:b8:bc:7f:fa:08:e1:0b:4e:bf:8e:d3: ca:09:8e:8e:39:71:a0:18:67:aa:eb:65:4c:43:10: 07:e5:42:15:27:6c:ce:75:ca:22:87:54:fe:70:c3: 39:1a:d6:87:87:a9:dc:b4:99:a9:aa:0d:47:aa:ce: c4:13:de:96:e5:97:82:3b:1c:aa:9c:80:05:a5:b0: c9:21:32:ff:db:05:ec:ad:58:0a:d9:d0:63:31:93: c7:8b:7a:ba:4c:74:e0:ca:7f:ba:20:6a:55:bf:fc: 53:e7:e8:a4:5a:47:a5:63:e1:72:2e:72:bc:1a:ae: 72:a8:6e:1d:1a:c1:6d:db:41:51:bc:cc:57:94:45: 78:7d:d1:1a:b9:c9:fb:8c:61:bd:1f:a6:db:9f:0d: a7:11:ab:79:95:34:60:f4:f4:4f:59:58:ef:df:42: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:13:31:1E:48:0E:EC:54:72:8A:42:E1:AA:92:56:46:E4:83:15 X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:17:1e:e2:15:b5:ee:47:c9:d8:b4:a6:03:7c:fc:42:fe:a9: 35:b8:4c:38:5d:19:c4:bf:90:2f:83:36:1d:c9:e7:db:35:dd: 41:f9:04:d4:a9:73:3d:9e:0d:dd:58:d1:98:10:bb:87:c2:cb: a1:f1:ae:a5:f2:36:04:d0:45:66:b6:e3:09:5d:0d:59:0f:b3: 8a:f8:9f:3d:23:c5:4d:c2:db:7c:76:22:97:44:f8:ab:5d:98: 83:96:c7:eb:22:79:e3:5f:a0:dc:69:d8:f2:2a:8e:dc:50:0c: b9:26:66:a1:ec:ba:b1:81:f1:9c:0b:8e:a9:32:ee:25:03:eb: fc:ce:04:bb:73:f1:b0:67:a4:10:dd:3a:2e:79:68:f4:53:10: e9:bf:26:00:8b:9e:bd:85:0e:15:b0:c9:9f:14:fd:c4:8d:7f: 42:ef:16:6a:a4:82:78:cb:7a:b1:c5:6c:fc:76:bb:ab:4a:8c: 0a:34:3b:d1:81:e8:0e:4a:af:2d:a6:8e:54:04:c8:09:89:c7: da:f2:92:7a:80:3c:73:54:ec:27:14:ba:5e:13:21:6e:26:8e: d5:aa:48:94:69:70:13:ca:94:6a:06:bb:c4:00:ac:6c:32:e1: dd:5e:e4:4a:d9:c0:f5:ff:de:e3:6e:fb:52:fc:e4:a9:42:ca: d8:72:f1:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUwODIyMTg1OTQ0WhcNMjUwODI5MTg1OTQ0WjAYMRYwFAYD VQQDEw02OGE4YmUyMC1lYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNYIvlIl8/hKMJDnfMKPjhwlyWi/y6g3BcoAT+g0IU4/NWZbhf5t8dtHjZeo rIJ9V2MSr1rGKIosNPKYnWEUE56VgvuNFWVvIPtvi3VV6a1hUA//N/QAMPa6I0tC uLx/+gjhC06/jtPKCY6OOXGgGGeq62VMQxAH5UIVJ2zOdcoih1T+cMM5GtaHh6nc tJmpqg1Hqs7EE96W5ZeCOxyqnIAFpbDJITL/2wXsrVgK2dBjMZPHi3q6THTgyn+6 IGpVv/xT5+ikWkelY+FyLnK8Gq5yqG4dGsFt20FRvMxXlEV4fdEaucn7jGG9H6bb nw2nEat5lTRg9PRPWVjv30IQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRsEzEe SA7sVHKKQuGqklZG5IMVMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChFx7iFbXuR8nYtKYDfPxC/qk1uEw4XRnEv5AvgzYdyefbNd1B+QTU qXM9ng3dWNGYELuHwsuh8a6l8jYE0EVmtuMJXQ1ZD7OK+J89I8VNwtt8diKXRPir XZiDlsfrInnjX6DcadjyKo7cUAy5Jmah7LqxgfGcC46pMu4lA+v8zgS7c/GwZ6QQ 3ToueWj0UxDpvyYAi569hQ4VsMmfFP3EjX9C7xZqpIJ4y3qxxWz8drurSowKNDvR gegOSq8tpo5UBMgJicfa8pJ6gDxzVOwnFLpeEyFuJo7VqkiUaXATypRqBrvEAKxs MuHdXuRK2cD1/97jbvtS/OSpQsrYcvEh -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:15 2025 by rpki-client