$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: NsPFIFW8sLq26AmBWCw/Tice2bqBMu8a/farc50Rpv4= Subject key identifier: CB:9B:84:52:ED:68:7C:27:EA:C2:B4:66:6F:E6:F5:43:37:67:D6:48 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: EA Signing time: Sat 23 Aug 2025 05:31:58 +0000 Manifest this update: Sat 23 Aug 2025 05:31:57 +0000 Manifest next update: Sat 30 Aug 2025 05:31:57 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: hKd/MJruGCUSLuR85Zhm/9vcwfdq1cdw6SRnrZUTik4=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: Eb8AfFxkY2lunIzmPfp9ZyHAYk+RBb0a8BG4v3YCxDc=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: Bg47WQyQqPO6vhS9f39oGO32kv0x8D/332r6YxTMVPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Aug 23 05:31:57 2025 GMT Not After : Aug 30 05:31:57 2025 GMT Subject: CN=68a9524e-652e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:5d:29:f0:ff:98:4f:37:ad:cd:e3:ff:61: ad:9a:c9:53:2d:5d:de:a2:fc:6a:a0:8c:f0:65:b8: be:a6:10:87:0d:f7:d4:68:8b:5a:da:53:1b:bd:95: 49:e4:a2:8f:08:5d:2c:d4:50:d1:9a:ad:97:c6:42: 52:e9:b0:37:1e:06:97:90:a8:93:ce:7d:e0:b0:0a: 33:43:ef:a4:a9:b8:fe:a4:79:ef:d7:88:f9:09:89: 6f:ba:0c:5d:3e:ad:53:cd:3c:4e:29:e3:e6:f1:b7: c9:45:93:1d:c4:e5:78:19:2f:6b:7f:cb:6e:eb:c0: 2f:39:af:c2:f8:ae:c1:f7:25:29:5f:e8:55:fb:3b: c1:dc:72:cb:e9:28:dd:ac:7f:7f:83:0e:c8:6d:16: 99:1c:e1:24:e3:a3:b3:3d:a1:ea:27:d1:40:db:e8: 9b:e9:0b:53:87:71:95:8a:25:fb:42:2d:96:4b:90: 24:56:df:96:a3:d7:46:d0:d4:aa:4e:08:ea:54:a9: 93:95:4e:f7:c0:57:2d:50:ad:d2:61:42:29:cd:fb: c4:ad:bd:a5:ff:11:21:16:73:8d:6c:5e:bb:35:e5: 4c:f6:a9:c2:de:1d:ba:95:b7:51:2f:67:51:7a:9d: 3c:b5:7f:ab:cb:58:74:2d:84:29:16:26:82:9b:03: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9B:84:52:ED:68:7C:27:EA:C2:B4:66:6F:E6:F5:43:37:67:D6:48 X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:9f:11:47:15:50:27:ac:9e:ed:7e:0e:04:45:03:a5:52: 58:0c:58:62:8e:7f:b6:a8:89:7c:41:3e:60:60:0d:48:18:ae: 05:fb:7a:1c:f7:ac:fb:5d:cb:95:ba:f1:01:dc:b1:ce:cb:33: af:c6:48:f6:09:43:c0:f3:12:df:65:8a:6b:73:c6:0b:a6:16: c7:29:e7:1b:e8:56:18:b9:47:7f:bf:d8:c7:15:b1:24:42:ac: 3a:5a:8f:2b:af:01:43:9d:92:74:dd:86:3c:84:e8:50:be:22: fe:ef:a8:08:db:f2:a9:36:7a:5d:06:03:f9:97:04:a4:0f:a9: b0:8a:c9:e4:c5:f0:a8:39:4d:76:38:c4:a1:b1:64:88:05:19: 02:54:f0:35:9e:ab:d8:1d:30:80:19:f3:db:e8:f3:7a:fe:1c: 7d:78:a5:fc:15:96:bb:7c:68:f4:80:3c:cc:cc:a3:aa:70:3a: 77:77:9e:7b:55:28:ce:24:61:2d:59:b2:08:08:ed:48:2a:3d: a8:b7:fc:55:07:eb:c8:08:0c:e5:aa:f7:d0:bf:a9:c8:98:48: 94:e2:50:4e:4f:0b:f2:fe:09:db:35:e2:19:1b:10:06:81:29: de:47:b5:7c:b1:1b:43:47:bc:7d:a7:6b:6e:9d:99:fc:35:e4: 16:61:c5:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUwODIzMDUzMTU3WhcNMjUwODMwMDUzMTU3WjAYMRYwFAYD VQQDEw02OGE5NTI0ZS02NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SJdKfD/mE83rc3j/2GtmslTLV3eovxqoIzwZbi+phCHDffUaIta2lMbvZVJ 5KKPCF0s1FDRmq2XxkJS6bA3HgaXkKiTzn3gsAozQ++kqbj+pHnv14j5CYlvugxd Pq1TzTxOKePm8bfJRZMdxOV4GS9rf8tu68AvOa/C+K7B9yUpX+hV+zvB3HLL6Sjd rH9/gw7IbRaZHOEk46OzPaHqJ9FA2+ib6QtTh3GViiX7Qi2WS5AkVt+Wo9dG0NSq TgjqVKmTlU73wFctUK3SYUIpzfvErb2l/xEhFnONbF67NeVM9qnC3h26lbdRL2dR ep08tX+ry1h0LYQpFiaCmwNZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMubhFLt aHwn6sK0Zm/m9UM3Z9ZIMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsn58RRxVQJ6ye7X4OBEUDpVJYDFhijn+2qIl8QT5gYA1IGK4F+3oc 96z7XcuVuvEB3LHOyzOvxkj2CUPA8xLfZYprc8YLphbHKecb6FYYuUd/v9jHFbEk Qqw6Wo8rrwFDnZJ03YY8hOhQviL+76gI2/KpNnpdBgP5lwSkD6mwisnkxfCoOU12 OMShsWSIBRkCVPA1nqvYHTCAGfPb6PN6/hx9eKX8FZa7fGj0gDzMzKOqcDp3d557 VSjOJGEtWbIICO1IKj2ot/xVB+vICAzlqvfQv6nImEiU4lBOTwvy/gnbNeIZGxAG gSneR7V8sRtDR7x9p2tunZn8NeQWYcUA -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:41 2025 by rpki-client