$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: rd9gMugBpyvhWn/f0m2LzJpjvJjp//6Y7vQAiDNWKjc= Subject key identifier: 1D:10:9A:7B:51:68:F3:54:D1:B6:74:60:FB:0D:16:99:91:31:20:8B Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 99 Signing time: Sat 23 Aug 2025 04:26:13 +0000 Manifest this update: Sat 23 Aug 2025 04:26:12 +0000 Manifest next update: Sat 30 Aug 2025 04:26:12 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: 1zkkqTE+syy2dFPJ+mrl8jCuIzX4LSwy6wp9ll7hEkI=) 2: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Aug 23 04:26:12 2025 GMT Not After : Aug 30 04:26:12 2025 GMT Subject: CN=68a942e5-3847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:3d:6d:71:3b:91:0b:a7:89:d8:4a:24:b1: e1:a8:c1:92:d9:53:1a:44:c0:81:5b:35:2c:c7:f6: 96:be:64:04:50:cd:aa:68:e6:e5:a4:2c:dc:99:46: 9c:d7:a1:67:9e:68:52:b8:b4:39:55:85:9c:a2:31: 2f:85:91:86:46:0d:fe:47:70:5e:cd:9a:7e:a1:37: 80:8e:33:a9:c5:01:dd:af:8c:1d:fe:c3:57:57:73: 0f:17:b6:52:12:51:77:d8:0c:c1:b7:a3:f8:3b:37: 47:38:70:f3:e0:0d:99:28:59:68:1b:e1:4c:1b:89: b4:54:34:dd:09:c6:ce:b0:8d:7d:00:48:c2:eb:84: 3c:04:a1:39:5b:ef:fc:d9:ba:63:d5:f6:d9:ba:65: 5d:f7:b0:f8:36:25:4f:b3:db:23:03:83:21:4e:e2: 84:45:38:39:62:92:63:b6:85:6e:75:23:73:26:14: d9:e7:df:d4:9d:2a:6e:0b:99:bb:26:06:66:30:e5: 86:27:36:84:28:72:f0:fa:dd:6e:74:fb:b2:37:e1: 2d:aa:3f:2b:38:9c:76:b5:f2:ca:f3:25:36:3f:b6: f8:e8:d4:48:d8:64:6d:42:e9:fc:66:24:b0:1e:69: d7:81:c1:46:6f:d6:3e:a1:89:e7:06:9c:f5:8d:d1: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:9A:7B:51:68:F3:54:D1:B6:74:60:FB:0D:16:99:91:31:20:8B X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:60:9f:e1:ee:2e:f2:df:5a:e3:9d:d4:00:2d:3b:8d:11:0d: 7a:28:90:77:c3:05:8c:15:33:4f:4a:10:97:9a:e6:3d:5c:d5: 0f:16:fc:64:a9:4e:36:ff:ae:5e:76:0c:57:eb:56:22:84:72: 7e:63:89:97:22:1e:be:c5:5a:fe:f1:08:bc:6e:5e:ad:6a:8f: 03:b7:d9:14:8b:94:46:73:ab:94:6b:7f:c2:6c:57:92:c6:a0: 96:46:06:70:5d:59:9d:ea:2a:4f:db:75:fa:43:ee:dd:74:b1: c7:4e:48:4f:85:42:10:93:b2:59:5e:3f:3e:0f:e9:52:c1:2a: 2a:40:e5:ce:bf:ff:53:c3:cc:e2:2c:99:ba:38:7c:c7:22:93: 60:f1:f9:62:e7:c4:da:bc:8f:be:74:06:2c:01:4e:68:e1:78: 6e:8c:c1:96:0b:8a:8c:e4:6f:71:86:15:00:6c:e0:78:ea:28: c6:f4:a2:4d:73:31:8e:77:99:fd:fd:8c:12:d2:c4:6c:61:4c: ed:02:9f:85:3c:a2:f9:22:d9:01:63:df:ea:c7:cb:25:0e:7e: 97:7d:c6:cc:88:80:b4:ed:0c:2c:69:ab:2c:05:6c:1a:b6:bc: ae:e2:5e:f3:18:8b:33:a4:9a:0e:25:14:41:0b:9f:ae:52:12: 29:db:86:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUwODIzMDQyNjEyWhcNMjUwODMwMDQyNjEyWjAYMRYwFAYD VQQDEw02OGE5NDJlNS0zODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Q9bXE7kQunidhKJLHhqMGS2VMaRMCBWzUsx/aWvmQEUM2qaOblpCzcmUac 16FnnmhSuLQ5VYWcojEvhZGGRg3+R3BezZp+oTeAjjOpxQHdr4wd/sNXV3MPF7ZS ElF32AzBt6P4OzdHOHDz4A2ZKFloG+FMG4m0VDTdCcbOsI19AEjC64Q8BKE5W+/8 2bpj1fbZumVd97D4NiVPs9sjA4MhTuKERTg5YpJjtoVudSNzJhTZ59/UnSpuC5m7 JgZmMOWGJzaEKHLw+t1udPuyN+Etqj8rOJx2tfLK8yU2P7b46NRI2GRtQun8ZiSw HmnXgcFGb9Y+oYnnBpz1jdHSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0QmntR aPNU0bZ0YPsNFpmRMSCLMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFYJ/h7i7y31rjndQALTuNEQ16KJB3wwWMFTNPShCXmuY9XNUPFvxk qU42/65edgxX61YihHJ+Y4mXIh6+xVr+8Qi8bl6tao8Dt9kUi5RGc6uUa3/CbFeS xqCWRgZwXVmd6ipP23X6Q+7ddLHHTkhPhUIQk7JZXj8+D+lSwSoqQOXOv/9Tw8zi LJm6OHzHIpNg8fli58TavI++dAYsAU5o4XhujMGWC4qM5G9xhhUAbOB46ijG9KJN czGOd5n9/YwS0sRsYUztAp+FPKL5ItkBY9/qx8slDn6XfcbMiIC07QwsaassBWwa tryu4l7zGIszpJoOJRRBC5+uUhIp24Y4 -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:00 2025 by rpki-client