$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: NYcBJfJRexkzqnbcdZNfHL/gOLqwq8sKYL5Z6C+na5E= Subject key identifier: 8F:6B:BC:D4:F4:81:9B:53:70:34:C3:E1:AD:DD:18:DA:B1:01:AA:01 Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 52 Signing time: Sat 23 Aug 2025 07:32:42 +0000 Manifest this update: Sat 23 Aug 2025 07:32:42 +0000 Manifest next update: Sat 30 Aug 2025 07:32:42 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: yUXM+aGLoA+hvlCNFqdMAAhV4yVigc/CtlxvwVRi0NQ=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Aug 23 07:32:42 2025 GMT Not After : Aug 30 07:32:42 2025 GMT Subject: CN=68a96e9a-10c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:f4:58:ee:25:a2:a4:99:aa:99:fa:c7:43: 22:3c:16:5b:5e:d6:95:b5:aa:d9:40:f4:5a:58:f3: 92:b5:37:95:27:96:f3:53:59:9c:68:27:3d:c2:97: f6:20:e9:6b:f5:39:a7:2f:47:d3:b7:e8:7d:57:c4: ca:13:eb:1c:7f:e7:d5:85:4b:e2:d9:15:c6:bd:26: c9:4a:e9:8f:1d:f5:59:fb:8b:fb:bd:ec:d7:a1:b1: 15:6a:ea:b2:45:58:46:52:6c:69:50:fe:a0:0e:22: 7e:20:00:23:35:fa:0a:ef:fc:60:d4:29:7d:6c:6f: dc:14:90:2a:db:8f:da:58:05:80:8c:bb:0f:71:7b: f2:4f:6c:e8:c1:92:d8:76:92:60:14:63:f7:bd:c5: e5:4b:c5:92:44:4f:3b:d3:28:2b:ba:70:e5:5b:06: eb:0d:9d:2b:92:14:c1:48:5f:bd:33:c0:74:f0:4a: 04:cb:4f:3b:34:ac:ef:ce:55:7d:c1:86:29:ad:c3: 3f:b0:71:89:a0:5b:de:79:b9:d1:9a:ef:f2:23:b5: 86:71:a2:24:5b:a4:a0:38:ce:c7:03:ed:3e:e0:56: fc:25:98:a0:67:92:05:f1:9a:3b:71:c5:13:46:53: ec:ff:77:25:23:06:84:2f:38:3a:93:81:dd:15:86: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:BC:D4:F4:81:9B:53:70:34:C3:E1:AD:DD:18:DA:B1:01:AA:01 X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:98:4e:4e:8a:a0:ed:d3:48:fa:57:39:c0:66:8f:c5:a0:23: 39:2f:de:fe:a4:78:e2:30:7f:7c:d6:6a:c9:f1:d6:f7:94:d9: 9c:98:eb:b7:df:f6:3b:c7:39:aa:a3:fe:3a:14:10:f3:7b:eb: 2f:9d:6e:56:38:2b:01:6e:7f:4a:97:ec:71:52:4b:50:41:d3: 76:ca:5d:db:63:f5:d2:8c:7e:13:5d:94:10:7b:d3:96:36:10: 63:0f:5a:87:92:46:03:cb:55:64:78:b7:8e:4a:ad:72:67:d3: df:e3:4f:40:24:28:6d:6a:6d:f3:06:55:9e:fe:cc:34:a6:7a: a9:61:b9:bd:ac:b5:75:74:ce:19:b5:49:62:9b:60:11:b8:94: 4d:f0:57:37:34:b7:21:9a:63:a8:a9:75:92:6e:8c:f2:2a:06: 48:58:ca:7e:bc:7c:09:39:ed:49:3f:ec:aa:23:aa:c8:8a:a9: b0:87:68:f4:b4:d6:93:2d:f1:d5:b4:fd:e3:39:2f:50:32:7d: dc:e0:ab:86:e5:7a:40:6f:7c:61:10:66:14:a8:91:55:f5:ec: 4d:96:a1:c3:39:9c:18:07:36:6a:5f:90:9e:89:86:e0:eb:32: 86:ea:be:d9:c1:7f:fd:77:3c:24:3c:ee:c5:98:89:69:fe:a5: 43:2c:6a:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA4MjMwNzMyNDJaFw0yNTA4MzAwNzMyNDJaMBgxFjAUBgNV BAMTDTY4YTk2ZTlhLTEwYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7WvRY7iWipJmqmfrHQyI8Flte1pW1qtlA9FpY85K1N5UnlvNTWZxoJz3Cl/Yg 6Wv1OacvR9O36H1XxMoT6xx/59WFS+LZFca9JslK6Y8d9Vn7i/u97NehsRVq6rJF WEZSbGlQ/qAOIn4gACM1+grv/GDUKX1sb9wUkCrbj9pYBYCMuw9xe/JPbOjBkth2 kmAUY/e9xeVLxZJETzvTKCu6cOVbBusNnSuSFMFIX70zwHTwSgTLTzs0rO/OVX3B himtwz+wcYmgW955udGa7/IjtYZxoiRbpKA4zscD7T7gVvwlmKBnkgXxmjtxxRNG U+z/dyUjBoQvODqTgd0VhnZ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj2u81PSB m1NwNMPhrd0Y2rEBqgEwHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2YTk6KoO3TSPpXOcBmj8WgIzkv3v6keOIwf3zWasnx1veU2ZyY67ff 9jvHOaqj/joUEPN76y+dblY4KwFuf0qX7HFSS1BB03bKXdtj9dKMfhNdlBB705Y2 EGMPWoeSRgPLVWR4t45KrXJn09/jT0AkKG1qbfMGVZ7+zDSmeqlhub2stXV0zhm1 SWKbYBG4lE3wVzc0tyGaY6ipdZJujPIqBkhYyn68fAk57Uk/7KojqsiKqbCHaPS0 1pMt8dW0/eM5L1Ayfdzgq4blekBvfGEQZhSokVX17E2WocM5nBgHNmpfkJ6JhuDr MobqvtnBf/13PCQ87sWYiWn+pUMsaiI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:16 2025 by rpki-client