$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: yb2kn1D45nRCdefuBfefrDzyc7mE8JBtINCFkLQpqos= Subject key identifier: CE:03:3C:A0:58:9D:03:C9:B2:04:5F:A8:51:BB:E8:A7:6D:5B:89:37 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 10DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0EA5 Signing time: Fri 22 Aug 2025 19:08:42 +0000 Manifest this update: Fri 22 Aug 2025 19:08:42 +0000 Manifest next update: Fri 29 Aug 2025 19:08:42 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: Q1Nd/blwjOjq/h4f8eyhmXx/Q1n/4+vJNbjPfbT8HFg=) 2: 8F1E3424322B11F0818ACD4FC4F9AE02.roa (hash: KIMlL4Qxoch1feP0ZYm6TqdiZeU9O/SCaYVwCbyyy8s=) 3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 5: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4318 (0x10de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Aug 22 19:08:42 2025 GMT Not After : Aug 29 19:08:42 2025 GMT Subject: CN=68a8c03a-4a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:30:54:92:30:25:38:59:d9:aa:aa:0e:8d: fd:73:11:d9:69:0d:3d:d8:a7:0d:39:d4:2a:dc:2e: 1e:f8:b8:ff:cf:83:24:b3:03:8f:11:7c:ba:7b:e3: 4a:7b:ad:f2:1f:6f:9a:f8:a6:5c:31:e6:bb:4d:64: 33:7a:3a:89:cc:f2:77:3d:ef:bd:68:a6:ce:3b:c6: f6:52:d7:00:1e:6f:14:ee:60:22:ed:f5:60:25:e2: 91:6f:d7:ca:db:a9:1a:83:df:e8:af:a2:ec:35:ab: 8b:f9:e1:28:9f:7f:65:b1:2e:c0:68:c1:01:7c:e0: 14:f5:68:a4:8c:79:87:1c:5d:29:eb:e1:e3:43:8f: d2:d7:6e:df:19:91:a0:1a:59:65:4b:40:c0:6b:e4: 25:b1:a8:af:08:31:37:43:08:5e:9a:d9:ff:db:f1: f4:e5:49:83:19:47:65:02:a5:1c:fa:ee:4e:30:79: d3:8b:5e:f2:4b:38:5a:f8:75:87:6c:d7:e3:54:d4: 83:44:24:e0:36:7f:cf:a8:75:26:0f:de:fa:64:ac: 16:1d:a7:b5:79:ee:db:88:16:93:cb:e8:66:a6:3a: 2a:80:b1:61:82:63:59:bd:7f:95:88:39:83:6d:87: 7d:7c:e2:ec:f1:ae:15:4e:02:ed:28:3b:ba:dc:39: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:03:3C:A0:58:9D:03:C9:B2:04:5F:A8:51:BB:E8:A7:6D:5B:89:37 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:7c:e9:f4:b7:b2:a0:a3:55:be:f4:78:ac:43:d4:50:56: c8:c2:16:cd:13:8a:e6:1b:6e:e8:11:6e:ee:a7:d9:f5:e8:1d: 1a:e9:29:4b:ae:7b:ac:a7:e1:85:a1:95:79:69:04:41:f7:ce: d0:07:22:d5:94:26:10:c2:d9:3e:4d:b8:86:be:d7:3a:15:6a: 0f:5c:07:80:b1:4b:29:87:d6:5e:1a:a9:3f:f9:aa:d5:58:4e: 36:ab:94:dd:c4:7f:07:20:89:f6:84:2d:6b:46:5c:59:91:d8: 2d:5f:77:87:7a:05:d8:13:d9:71:72:41:43:18:3e:63:a3:3f: ba:e2:35:13:ae:bf:fc:b6:c1:20:dc:23:45:8c:6e:8e:8a:53: 77:51:5f:08:8f:92:2c:96:a4:b7:02:19:b0:af:c3:f3:7c:ca: e8:d2:35:f2:7c:0d:1a:d8:b3:c0:b2:b6:81:1c:2a:68:31:b0: f5:c7:44:7b:87:31:85:e7:3f:3c:7a:5b:35:05:1b:fe:6d:a5: 70:80:97:9f:db:85:df:65:d2:de:28:1a:59:e0:af:6b:3f:9a: e7:f6:72:df:a6:47:da:9a:c7:b6:36:05:30:85:61:df:b8:b4: a1:f9:4a:69:2d:15:44:13:9f:ea:65:9b:d4:3d:a6:32:d3:83: 68:17:34:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUwODIyMTkwODQyWhcNMjUwODI5MTkwODQyWjAYMRYwFAYD VQQDEw02OGE4YzAzYS00YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1kwVJIwJThZ2aqqDo39cxHZaQ092KcNOdQq3C4e+Lj/z4MkswOPEXy6e+NK e63yH2+a+KZcMea7TWQzejqJzPJ3Pe+9aKbOO8b2UtcAHm8U7mAi7fVgJeKRb9fK 26kag9/or6LsNauL+eEon39lsS7AaMEBfOAU9WikjHmHHF0p6+HjQ4/S127fGZGg GlllS0DAa+QlsaivCDE3Qwhemtn/2/H05UmDGUdlAqUc+u5OMHnTi17ySzha+HWH bNfjVNSDRCTgNn/PqHUmD976ZKwWHae1ee7biBaTy+hmpjoqgLFhgmNZvX+ViDmD bYd9fOLs8a4VTgLtKDu63DmXAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4DPKBY nQPJsgRfqFG76KdtW4k3MB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mHzp9LeyoKNVvvR4rEPUUFbIwhbNE4rmG27oEW7up9n16B0a6SlL rnusp+GFoZV5aQRB987QByLVlCYQwtk+TbiGvtc6FWoPXAeAsUsph9ZeGqk/+arV WE42q5TdxH8HIIn2hC1rRlxZkdgtX3eHegXYE9lxckFDGD5joz+64jUTrr/8tsEg 3CNFjG6OilN3UV8Ij5IslqS3Ahmwr8PzfMro0jXyfA0a2LPAsraBHCpoMbD1x0R7 hzGF5z88els1BRv+baVwgJef24XfZdLeKBpZ4K9rP5rn9nLfpkfamse2NgUwhWHf uLSh+UppLRVEE5/qZZvUPaYy04NoFzSa -----END CERTIFICATE-----Generated at Sat Aug 23 07:29:12 2025 by rpki-client