$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft File: TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json) Hash identifier: LhTZWVrbrgb+P+fBnovpnbaw0yIhf+bubvGYsFgawwk= Subject key identifier: E9:FE:EC:AB:DD:17:09:6E:C0:2D:1D:95:F5:3B:BA:F1:1C:F5:D0:84 Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 Certificate issuer: /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft Manifest number: 0780 Signing time: Fri 22 Aug 2025 21:37:50 +0000 Manifest this update: Fri 22 Aug 2025 21:37:49 +0000 Manifest next update: Fri 29 Aug 2025 21:37:49 +0000 Files and hashes: 1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: yX5rNWyU6XFAPTRsur/tg0wj5kNEl0ZoUzSJetNOPyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Validity Not Before: Aug 22 21:37:49 2025 GMT Not After : Aug 29 21:37:49 2025 GMT Subject: CN=68a8e32d-9791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:34:14:36:dd:3a:29:d9:66:07:6b:ba:6a: 1a:1f:3c:79:d8:c4:79:f8:81:ab:7d:6d:49:ce:fb: 49:51:3e:60:00:8b:f8:c8:15:91:30:15:00:9b:08: 9f:ad:d6:c7:47:61:f1:15:25:27:e3:31:25:9d:7f: 42:d1:5a:2b:7b:aa:bb:69:d5:b7:26:80:88:d5:6c: a9:e4:51:24:4d:30:64:be:c7:04:d4:7b:9e:7e:cd: 46:44:3f:de:21:85:06:79:91:c5:30:46:03:74:df: b0:d0:08:00:0e:cf:f6:7f:e1:6e:04:8f:77:bc:d3: 65:68:7b:ba:2d:29:c9:43:12:0c:10:53:bc:19:20: e0:31:32:c5:d6:01:66:ff:91:2d:ce:63:7f:7c:b6: 53:e3:b3:65:9d:50:19:49:2b:98:1b:40:dd:8e:0f: 71:b9:60:ee:15:b6:65:22:6b:f5:dc:a6:91:31:23: 80:79:03:af:08:db:be:56:7c:6d:f5:65:8d:c0:85: ef:3b:0b:30:df:76:a0:7f:3a:b9:80:02:3e:61:63: 35:0e:c0:94:44:e5:2d:6c:34:ea:6f:45:b4:84:75: 81:f2:06:1b:d1:a0:ed:11:73:c6:34:dd:f9:e6:45: 52:1d:71:86:23:d1:6e:c4:d1:7d:8b:33:fa:22:9e: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:EC:AB:DD:17:09:6E:C0:2D:1D:95:F5:3B:BA:F1:1C:F5:D0:84 X509v3 Authority Key Identifier: keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1e:ca:3d:3f:5e:fd:ba:a7:21:52:3f:8d:45:e9:fd:c1:a4: d9:88:28:93:c1:b8:4c:d1:6e:18:57:77:84:c1:4a:19:9e:92: c8:05:b4:70:8c:8b:02:2f:f4:16:b8:e2:1d:fb:ed:fa:ab:25: 3d:73:f2:95:6c:6e:d2:5c:7a:35:15:94:9e:40:6a:13:10:63: bc:98:0f:1a:0f:d1:de:ab:c3:86:86:3f:69:9b:8f:27:bd:bc: 92:bc:d7:33:24:92:f1:b6:fd:78:7e:ee:6d:17:e1:83:de:2a: f4:05:53:8f:0d:a1:27:46:38:e8:17:3e:45:eb:12:2d:68:f6: cd:7c:67:79:22:cb:72:a9:97:0c:f5:28:16:32:c3:dd:86:02: 5b:7a:46:7d:47:41:4a:f9:b0:d4:dc:d7:6c:5c:c1:5b:43:9c: 8a:2f:c5:69:64:f1:c7:44:cc:05:fb:a7:59:33:47:89:8f:e0: 0f:20:0f:38:2b:0c:19:7c:19:5f:01:4d:ca:a0:6a:3a:db:9a: 90:67:0f:e9:55:48:6c:0b:f9:8f:b0:99:bd:4d:10:39:9a:f5: 5b:4d:d6:24:a6:e8:ea:32:52:cd:8d:18:57:63:a0:03:f1:c6: ec:c6:9d:b5:df:4f:e1:b4:cf:31:af:cf:c5:f1:13:8a:c7:a0: d2:fd:65:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMyRDk3ODVDMDBD QUVFRDZFNDQwHhcNMjUwODIyMjEzNzQ5WhcNMjUwODI5MjEzNzQ5WjAYMRYwFAYD VQQDEw02OGE4ZTMyZC05NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv00FDbdOinZZgdrumoaHzx52MR5+IGrfW1JzvtJUT5gAIv4yBWRMBUAmwif rdbHR2HxFSUn4zElnX9C0Vore6q7adW3JoCI1Wyp5FEkTTBkvscE1Huefs1GRD/e IYUGeZHFMEYDdN+w0AgADs/2f+FuBI93vNNlaHu6LSnJQxIMEFO8GSDgMTLF1gFm /5EtzmN/fLZT47NlnVAZSSuYG0Ddjg9xuWDuFbZlImv13KaRMSOAeQOvCNu+Vnxt 9WWNwIXvOwsw33agfzq5gAI+YWM1DsCUROUtbDTqb0W0hHWB8gYb0aDtEXPGNN35 5kVSHXGGI9FuxNF9izP6Ip5/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn+7Kvd FwluwC0dlfU7uvEc9dCEMB8GA1UdIwQYMBaAFE0CTX7pO/BuePIMLZeFwAyu7W5E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI4OC8yRTMzRjhCMDFG RTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhHNTQ4Z3d0bDRYQURLN3Ri a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RRSk5mdWs3OEc1NDhnd3RsNFhBREs3dGJrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhH NTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Hso9P179uqchUj+NRen9waTZiCiTwbhM0W4YV3eEwUoZnpLIBbRw jIsCL/QWuOId++36qyU9c/KVbG7SXHo1FZSeQGoTEGO8mA8aD9Heq8OGhj9pm48n vbySvNczJJLxtv14fu5tF+GD3ir0BVOPDaEnRjjoFz5F6xItaPbNfGd5IstyqZcM 9SgWMsPdhgJbekZ9R0FK+bDU3NdsXMFbQ5yKL8VpZPHHRMwF+6dZM0eJj+APIA84 KwwZfBlfAU3KoGo625qQZw/pVUhsC/mPsJm9TRA5mvVbTdYkpujqMlLNjRhXY6AD 8cbsxp2130/htM8xr8/F8ROKx6DS/WWO -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:47 2025 by rpki-client