$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: +d7DF8BylqgrStSyHN3+gitmCV4CqV4HJnug4/e/3EE= Subject key identifier: 12:02:73:ED:8F:DF:07:A8:4F:5D:16:41:4A:81:72:99:FE:7B:0D:CA Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A37 Signing time: Fri 22 Aug 2025 19:51:30 +0000 Manifest this update: Fri 22 Aug 2025 19:51:29 +0000 Manifest next update: Fri 29 Aug 2025 19:51:29 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: xp8D+RcTQ8cqbraMVGCDVUVfDWyGzdFbnroBCOjLSHw=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Aug 22 19:51:29 2025 GMT Not After : Aug 29 19:51:29 2025 GMT Subject: CN=68a8ca42-60cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:50:51:79:62:9f:68:fc:14:95:35:17:b8: 64:6a:ce:32:7a:45:5a:4e:63:e2:95:48:ef:22:0a: 68:1d:81:49:7b:a2:ed:f9:94:e3:ee:5e:47:d9:fc: 23:df:4a:fd:43:19:c1:f8:82:9e:f5:42:c6:49:8c: 3e:11:53:57:44:87:a9:57:e6:ae:c9:13:c4:4f:63: 57:c9:67:66:b7:74:79:09:e7:71:4f:f3:75:80:92: 38:44:73:6b:a8:1c:f7:86:3e:f7:74:27:3d:8e:da: 74:e1:d4:73:17:34:81:20:cb:a6:a2:f9:46:51:df: 29:99:25:70:55:41:ff:95:1a:8a:50:a9:64:49:01: 2e:fc:6b:93:aa:b6:30:bd:a4:f6:a1:6e:9c:ef:c2: 8f:2f:5a:0c:e4:a7:3b:3d:e6:de:17:cd:af:c1:8f: 09:69:2a:aa:c5:8e:f4:75:0a:53:b5:76:b6:ea:e6: 24:6e:8f:f5:bb:82:86:af:1c:12:35:e1:b2:cd:ca: 46:c9:10:f6:ea:cb:82:2a:a2:c5:47:11:ba:2e:38: 00:2e:42:81:60:64:13:06:4f:42:f5:e3:c1:59:35: e1:43:c3:36:b0:17:73:54:c5:e8:62:f1:df:58:f0: 97:af:bb:c3:aa:cf:6d:75:d3:23:78:52:00:89:6e: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:02:73:ED:8F:DF:07:A8:4F:5D:16:41:4A:81:72:99:FE:7B:0D:CA X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8b:e0:0f:6d:d2:dc:af:ac:bb:2a:0d:ec:c3:0f:84:30:81: da:3c:d9:6b:7d:b7:5e:99:99:81:20:ea:4c:21:fc:30:87:f3: 6f:68:4d:fe:7e:29:da:e7:3d:40:57:2c:2d:79:ae:c9:79:a4: 6d:00:64:2d:05:fe:2d:34:10:e7:a7:1c:10:0e:00:19:55:d6: 4e:1f:fb:40:d9:90:c6:68:b6:1d:b8:3f:ca:c0:6d:d8:52:8a: 94:4d:fd:28:e8:b0:e1:bb:c2:55:31:23:6e:7d:b8:3a:d8:75: b5:ae:d4:d4:13:c1:36:03:56:d2:2b:40:33:41:a0:23:b3:78: b4:f9:d0:b6:6d:0b:da:66:31:d4:d3:e1:ce:92:a9:12:11:2c: 37:46:4d:4b:23:d2:35:97:5d:78:b3:0f:3f:31:75:4c:5b:2a: 58:e2:49:96:a9:32:5c:52:f3:94:13:8d:47:36:58:b1:f8:54: 25:1c:d2:c6:47:13:15:7e:76:c4:10:ae:df:00:17:6b:ac:6b: 0b:48:90:f9:ed:ca:b5:5d:59:a6:43:2f:ff:15:e7:af:74:9c: 83:22:cf:3e:20:04:c6:b9:ff:73:ca:28:fd:83:c6:e7:6b:d6: bd:1d:1a:ef:a9:ad:15:b5:d7:71:b7:8e:5b:3a:07:3b:ab:54: 79:7f:e1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwODIyMTk1MTI5WhcNMjUwODI5MTk1MTI5WjAYMRYwFAYD VQQDEw02OGE4Y2E0Mi02MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyARQUXlin2j8FJU1F7hkas4yekVaTmPilUjvIgpoHYFJe6Lt+ZTj7l5H2fwj 30r9QxnB+IKe9ULGSYw+EVNXRIepV+auyRPET2NXyWdmt3R5CedxT/N1gJI4RHNr qBz3hj73dCc9jtp04dRzFzSBIMumovlGUd8pmSVwVUH/lRqKUKlkSQEu/GuTqrYw vaT2oW6c78KPL1oM5Kc7PebeF82vwY8JaSqqxY70dQpTtXa26uYkbo/1u4KGrxwS NeGyzcpGyRD26suCKqLFRxG6LjgALkKBYGQTBk9C9ePBWTXhQ8M2sBdzVMXoYvHf WPCXr7vDqs9tddMjeFIAiW7FwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBICc+2P 3weoT10WQUqBcpn+ew3KMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCai+APbdLcr6y7Kg3sww+EMIHaPNlrfbdemZmBIOpMIfwwh/NvaE3+ fina5z1AVywtea7JeaRtAGQtBf4tNBDnpxwQDgAZVdZOH/tA2ZDGaLYduD/KwG3Y UoqUTf0o6LDhu8JVMSNufbg62HW1rtTUE8E2A1bSK0AzQaAjs3i0+dC2bQvaZjHU 0+HOkqkSESw3Rk1LI9I1l114sw8/MXVMWypY4kmWqTJcUvOUE41HNlix+FQlHNLG RxMVfnbEEK7fABdrrGsLSJD57cq1XVmmQy//FeevdJyDIs8+IATGuf9zyij9g8bn a9a9HRrvqa0Vtddxt45bOgc7q1R5f+Ff -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:23 2025 by rpki-client