$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: FKBg4ysr+CgS2wtF2De4S4OjAq3q+t/FBrOevjYb014= Subject key identifier: 98:B4:83:38:55:90:B6:42:A7:FA:22:38:93:E1:B0:50:06:6B:1F:61 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 4F Signing time: Sat 23 Aug 2025 07:35:26 +0000 Manifest this update: Sat 23 Aug 2025 07:35:25 +0000 Manifest next update: Sat 30 Aug 2025 07:35:25 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: Jig9bpopJqRBRim2hfuAMWffGtOUYsPJSuxFURMGx5Q=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Aug 23 07:35:25 2025 GMT Not After : Aug 30 07:35:25 2025 GMT Subject: CN=68a96f3d-2727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:00:0c:96:b1:4f:e7:5c:30:58:51:e6:42: 23:17:b6:e8:ac:6c:37:b5:c2:21:5c:1c:d4:68:56: 09:88:5c:9b:de:7f:d0:61:ad:57:a5:4b:87:27:06: bf:3f:c8:66:bc:e2:88:9f:9a:43:92:32:02:75:a7: 42:fe:10:13:c7:56:e9:15:41:45:bf:91:4f:0e:b7: 5f:f2:9b:31:62:c3:35:e5:d7:00:1e:ee:57:7f:9f: 9f:70:7d:e2:b0:b8:91:74:18:4f:22:6f:47:c3:b8: ef:7e:86:cc:06:0c:4b:eb:63:56:8e:5e:44:54:71: 0c:ba:3c:44:1a:a9:0e:fe:1d:9b:f6:70:17:5b:77: 63:65:e1:e5:19:1e:44:26:5d:91:36:5a:e5:2b:56: 2e:42:48:06:95:ca:ad:b7:af:47:fb:c2:84:86:77: d6:d0:58:ad:67:db:64:db:d2:b0:69:89:01:f3:ae: b8:b9:53:8e:a1:b3:ce:6d:84:2f:e3:5b:74:00:61: dc:8e:29:63:9d:d3:ea:64:db:ce:00:78:2a:b2:86: b8:ca:cd:ed:09:74:3a:03:85:f9:3f:0a:f7:e5:8b: 7c:d8:59:6f:1d:ac:24:b0:f4:32:15:4d:f4:dd:c0: d3:35:bd:5d:d8:5b:19:98:1a:5c:b1:a6:f6:d9:6c: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B4:83:38:55:90:B6:42:A7:FA:22:38:93:E1:B0:50:06:6B:1F:61 X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:b7:79:5b:1a:a8:42:4d:70:fc:ad:bb:7e:f0:da:ce:ae: 93:2a:af:08:d4:a7:da:19:0e:00:4e:d3:74:96:c4:59:a3:ff: e1:0a:4f:b6:2a:0c:24:0c:0f:cc:1c:e4:7e:e8:05:f8:ea:b5: 28:46:ff:65:5f:7b:57:c6:ae:d8:20:5c:d7:3d:86:95:fe:32: ac:bc:98:f9:4f:c5:b3:aa:e2:1c:f2:fd:0f:7f:17:82:fd:d5: 47:0a:77:06:33:21:5c:3f:01:9c:54:01:e8:b3:b4:c3:3e:11: f4:0b:c7:b0:20:4f:f1:d1:b3:e6:cc:64:97:a7:ef:71:32:0a: 07:9b:88:ae:4e:66:60:08:ce:0d:e5:31:df:27:87:a9:2c:e6: 74:00:d8:37:c0:47:96:33:6a:78:5e:c8:0a:34:2c:eb:6d:e6: dc:0e:a8:b8:ca:f1:3b:0a:e2:27:a3:ff:5f:aa:2a:b9:ff:f9: 46:6b:35:ca:51:8e:f3:f2:54:2a:4c:e9:38:3a:ba:5a:53:5f: e6:19:cd:dc:e3:f6:1c:29:b5:72:c5:06:0f:e0:21:62:e2:b1: 99:91:0c:1f:40:45:b7:6c:84:a6:f4:d3:ab:ac:b1:11:47:c7: be:99:04:8c:32:cb:da:cd:24:46:44:7c:d3:ed:5a:f5:a6:c1: 57:e6:a4:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA4MjMwNzM1MjVaFw0yNTA4MzAwNzM1MjVaMBgxFjAUBgNV BAMTDTY4YTk2ZjNkLTI3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+6wAMlrFP51wwWFHmQiMXtuisbDe1wiFcHNRoVgmIXJvef9BhrVelS4cnBr8/ yGa84oifmkOSMgJ1p0L+EBPHVukVQUW/kU8Ot1/ymzFiwzXl1wAe7ld/n59wfeKw uJF0GE8ib0fDuO9+hswGDEvrY1aOXkRUcQy6PEQaqQ7+HZv2cBdbd2Nl4eUZHkQm XZE2WuUrVi5CSAaVyq23r0f7woSGd9bQWK1n22Tb0rBpiQHzrri5U46hs85thC/j W3QAYdyOKWOd0+pk284AeCqyhrjKze0JdDoDhfk/Cvfli3zYWW8drCSw9DIVTfTd wNM1vV3YWxmYGlyxpvbZbOrNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmLSDOFWQ tkKn+iI4k+GwUAZrH2EwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF6ft3lbGqhCTXD8rbt+8NrOrpMqrwjUp9oZDgBO03SWxFmj/+EKT7Yq DCQMD8wc5H7oBfjqtShG/2Vfe1fGrtggXNc9hpX+Mqy8mPlPxbOq4hzy/Q9/F4L9 1UcKdwYzIVw/AZxUAeiztMM+EfQLx7AgT/HRs+bMZJen73EyCgebiK5OZmAIzg3l Md8nh6ks5nQA2DfAR5YzanheyAo0LOtt5twOqLjK8TsK4iej/1+qKrn/+UZrNcpR jvPyVCpM6Tg6ulpTX+YZzdzj9hwptXLFBg/gIWLisZmRDB9ARbdshKb006ussRFH x76ZBIwyy9rNJEZEfNPtWvWmwVfmpIw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:29 2025 by rpki-client