$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: ux8JXV5gt1Qs8iFxvDdAqRdZgk8dPWp4i1kJ2R5ODs0= Subject key identifier: 37:2D:C9:31:3E:A7:BA:B4:ED:51:1C:B6:EB:F3:33:38:7E:B7:70:73 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 01C8 Signing time: Sat 23 Aug 2025 03:01:08 +0000 Manifest this update: Sat 23 Aug 2025 03:01:07 +0000 Manifest next update: Sat 30 Aug 2025 03:01:07 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: mTTD+phSsxiBK9ERnOHTdoDTGvP9havpzEUTvHVaBXQ=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Aug 23 03:01:07 2025 GMT Not After : Aug 30 03:01:07 2025 GMT Subject: CN=68a92ef3-0008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:9d:ba:53:75:45:fa:46:d1:37:77:02:cd: 29:fe:f9:3e:c4:4d:d6:a9:2f:3d:5b:f0:6f:97:72: ba:79:7f:69:9b:02:f5:92:e0:9e:73:f8:6a:96:f6: 9f:2b:68:6b:af:b8:88:88:b5:30:d6:a9:44:d9:33: 4c:40:2f:8b:49:30:e0:40:ef:9d:a9:76:91:77:12: a5:d5:4d:ce:d5:bb:a1:66:04:82:b6:09:7b:70:19: 7e:93:be:61:6b:1d:3d:5c:0e:ee:be:7f:33:de:c1: 65:b7:75:c5:c7:ba:51:a4:8e:66:54:ce:f8:1a:26: 38:2c:aa:8a:d2:15:63:b4:34:57:20:6b:09:fe:c9: 41:37:36:c2:29:f1:57:bf:59:a4:05:f0:1d:eb:cf: 92:ad:59:aa:68:ad:5e:c2:47:04:ce:fa:71:cb:1e: 87:9a:87:13:d4:b4:10:c0:b6:cb:c3:c4:62:b9:9c: ba:28:9e:28:c1:82:c7:ea:ce:2e:30:9b:24:f4:49: 60:e3:f3:e5:b9:aa:38:9f:52:4e:d9:a0:cf:e1:ca: dc:fe:20:26:18:4b:bf:9a:a4:2a:e8:b2:99:86:fe: a0:38:2d:76:1f:09:65:ea:f6:3f:6b:38:c0:22:d1: 76:69:0c:dc:6c:ac:f1:7f:0a:2b:bc:be:18:e0:46: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2D:C9:31:3E:A7:BA:B4:ED:51:1C:B6:EB:F3:33:38:7E:B7:70:73 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bb:86:67:c4:20:82:f9:7e:fa:1a:47:c4:75:f6:2d:38:e6: 59:0f:fd:36:89:2f:c3:9c:69:3c:7b:da:22:10:9e:6d:c8:ab: d2:7a:f1:70:07:4d:e0:c4:d4:c7:54:63:43:7c:98:7f:4c:00: ba:c4:ec:5d:6b:15:7c:1b:dd:71:bc:00:c9:6f:1a:4d:2c:86: b8:a3:38:6d:97:1d:61:d5:47:97:7d:45:72:b4:17:99:66:9b: 38:c9:7b:3e:a8:20:f5:c4:53:25:a3:3e:3b:aa:72:ef:d2:95: 8f:11:18:0d:9c:fe:4a:35:b1:5f:94:aa:26:5e:2e:65:6b:a3: 03:90:76:92:14:02:41:9f:cb:d5:10:74:68:18:65:54:19:d3: 35:03:db:b5:44:61:f5:71:3d:d1:f2:28:22:bf:8b:4d:53:00: cb:95:91:9b:09:b9:38:eb:22:3c:4b:df:e7:b0:48:e2:b5:d5: 34:8b:df:4c:0b:3d:b0:54:ba:ec:12:23:f2:79:80:38:45:83: 25:03:16:ac:b9:90:e6:88:d5:e7:a3:7e:97:77:88:9c:4b:91: 75:66:c7:47:e1:17:c1:ad:e4:fc:db:82:47:d1:0d:9b:13:4d: bd:3f:92:e4:90:1c:e8:26:c8:14:05:82:4d:ad:8a:be:6c:85: 7e:ca:00:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUwODIzMDMwMTA3WhcNMjUwODMwMDMwMTA3WjAYMRYwFAYD VQQDEw02OGE5MmVmMy0wMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wudulN1RfpG0Td3As0p/vk+xE3WqS89W/Bvl3K6eX9pmwL1kuCec/hqlvaf K2hrr7iIiLUw1qlE2TNMQC+LSTDgQO+dqXaRdxKl1U3O1buhZgSCtgl7cBl+k75h ax09XA7uvn8z3sFlt3XFx7pRpI5mVM74GiY4LKqK0hVjtDRXIGsJ/slBNzbCKfFX v1mkBfAd68+SrVmqaK1ewkcEzvpxyx6HmocT1LQQwLbLw8RiuZy6KJ4owYLH6s4u MJsk9Elg4/Pluao4n1JO2aDP4crc/iAmGEu/mqQq6LKZhv6gOC12Hwll6vY/azjA ItF2aQzcbKzxfworvL4Y4EarLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDctyTE+ p7q07VEctuvzMzh+t3BzMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANu4ZnxCCC+X76GkfEdfYtOOZZD/02iS/DnGk8e9oiEJ5tyKvSevFw B03gxNTHVGNDfJh/TAC6xOxdaxV8G91xvADJbxpNLIa4ozhtlx1h1UeXfUVytBeZ Zps4yXs+qCD1xFMloz47qnLv0pWPERgNnP5KNbFflKomXi5la6MDkHaSFAJBn8vV EHRoGGVUGdM1A9u1RGH1cT3R8igiv4tNUwDLlZGbCbk46yI8S9/nsEjitdU0i99M Cz2wVLrsEiPyeYA4RYMlAxasuZDmiNXno36Xd4icS5F1ZsdH4RfBreT824JH0Q2b E029P5LkkBzoJsgUBYJNrYq+bIV+ygAr -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:39 2025 by rpki-client