$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: RTPWpDReoB5ceyxFy/FqxA67HJqJl1No2767LEn29JQ= Subject key identifier: 7D:42:BB:9E:1B:B2:DF:AD:25:E0:BF:B9:44:DD:AE:3C:7D:7A:01:F2 Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 1935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 1928 Signing time: Fri 22 Aug 2025 16:31:51 +0000 Manifest this update: Fri 22 Aug 2025 16:31:51 +0000 Manifest next update: Fri 29 Aug 2025 16:31:51 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: AozFuVOe0x2xhz5CeKFWS3yLbzQhsEON9GgLZw4vizE=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6453 (0x1935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Aug 22 16:31:51 2025 GMT Not After : Aug 29 16:31:51 2025 GMT Subject: CN=68a89b77-f445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:ac:28:4d:86:b7:74:3d:f1:f4:c6:fd:b3: 26:14:dd:2c:25:b3:52:f7:f2:f1:fa:26:11:a0:b8: fb:9b:4f:f3:0e:1e:b0:fb:1a:bc:1f:7b:5c:1e:ce: 67:29:c6:c3:9d:88:3f:fb:cf:4a:90:3d:dc:03:b3: 0b:42:dc:bc:cd:9b:62:b6:c1:4c:14:43:99:79:6e: 97:ab:f5:c5:f9:9a:ed:91:44:18:38:a0:de:94:2e: 40:a0:07:48:f5:d8:72:d7:b6:2c:b5:d9:d5:ce:8d: 1e:d2:a0:4c:46:ff:61:55:aa:26:00:68:47:28:9f: 7d:25:1e:1c:75:76:3b:e4:e8:e0:36:98:e6:bc:01: 85:35:28:a6:06:a9:57:5a:8d:90:3a:7b:6a:49:32: 2a:7a:09:26:87:57:d4:9e:ac:39:77:eb:be:34:9c: ee:98:0e:fb:cd:db:1c:01:52:0e:c2:de:5b:50:0f: 0d:ae:67:2c:a1:3c:ac:30:65:ac:5d:c0:d1:3f:5c: c0:1f:54:b1:b6:29:5f:4f:80:08:6a:ef:6b:58:ae: ce:8a:28:e2:b5:d7:dd:d1:60:81:a3:d0:ba:52:64: 94:6f:12:08:08:e8:be:50:c0:24:45:fd:1d:b3:a1: f1:b3:9e:a4:e6:3f:4e:35:3f:9b:28:a3:ae:2c:ae: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:BB:9E:1B:B2:DF:AD:25:E0:BF:B9:44:DD:AE:3C:7D:7A:01:F2 X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:68:9b:4e:3a:aa:05:12:49:ea:f5:1f:9d:89:f5:7a:64:ba: 0e:f0:a7:1e:8a:3c:c8:b4:b5:37:c5:ad:ff:09:1c:ba:aa:6e: dd:50:94:88:fa:0a:7e:c9:42:d2:8c:62:c1:1f:67:8a:b9:b4: 67:a3:84:70:2e:01:d0:c5:64:ab:fb:e4:ed:a3:6a:51:66:20: f8:87:a9:85:53:82:9b:b5:e6:d0:71:1b:57:5e:ea:fe:c5:b5: bc:cd:c9:88:fd:4e:1c:cd:56:6b:b8:e2:8e:33:2d:22:83:c5: 71:12:d9:07:89:7e:c9:65:b0:52:af:25:5a:53:d0:c6:f4:2b: 18:01:a1:eb:c5:34:53:57:a0:fd:c4:45:87:5a:86:3d:c4:c1: 7a:e8:3a:ab:85:a6:db:19:d9:2b:2c:eb:6c:0d:ef:16:70:b1: d0:da:1c:2e:64:cf:ab:1e:d1:76:ae:df:3a:39:8d:3d:42:cf: fa:69:ef:11:ca:3f:78:74:1d:22:8b:17:e9:19:d7:2d:1c:e8: 3f:cb:41:27:90:62:d2:8b:72:36:68:af:28:de:f0:8e:fe:55: 88:82:ba:cf:1a:f5:e4:7c:41:44:29:b6:70:3e:55:a7:7c:3e: 1a:15:f8:e1:56:89:5d:31:fe:76:9e:0c:fb:28:a6:7a:70:fb: fd:e7:59:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjUwODIyMTYzMTUxWhcNMjUwODI5MTYzMTUxWjAYMRYwFAYD VQQDEw02OGE4OWI3Ny1mNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vysKE2Gt3Q98fTG/bMmFN0sJbNS9/Lx+iYRoLj7m0/zDh6w+xq8H3tcHs5n KcbDnYg/+89KkD3cA7MLQty8zZtitsFMFEOZeW6Xq/XF+ZrtkUQYOKDelC5AoAdI 9dhy17YstdnVzo0e0qBMRv9hVaomAGhHKJ99JR4cdXY75OjgNpjmvAGFNSimBqlX Wo2QOntqSTIqegkmh1fUnqw5d+u+NJzumA77zdscAVIOwt5bUA8NrmcsoTysMGWs XcDRP1zAH1SxtilfT4AIau9rWK7Oiijitdfd0WCBo9C6UmSUbxIICOi+UMAkRf0d s6Hxs56k5j9ONT+bKKOuLK7a1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1Cu54b st+tJeC/uUTdrjx9egHyMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxaJtOOqoFEknq9R+difV6ZLoO8KceijzItLU3xa3/CRy6qm7dUJSI +gp+yULSjGLBH2eKubRno4RwLgHQxWSr++Tto2pRZiD4h6mFU4KbtebQcRtXXur+ xbW8zcmI/U4czVZruOKOMy0ig8VxEtkHiX7JZbBSryVaU9DG9CsYAaHrxTRTV6D9 xEWHWoY9xMF66DqrhabbGdkrLOtsDe8WcLHQ2hwuZM+rHtF2rt86OY09Qs/6ae8R yj94dB0iixfpGdctHOg/y0EnkGLSi3I2aK8o3vCO/lWIgrrPGvXkfEFEKbZwPlWn fD4aFfjhVoldMf52ngz7KKZ6cPv951lR -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:43 2025 by rpki-client