$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: dJITgM1aNFue5S/FH8W7vFVZtRZxGS3MZKbPgGDmWYU= Subject key identifier: 42:3A:77:14:0F:A8:B6:46:D8:4B:D2:0A:F2:E5:C4:61:BF:3C:06:39 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 182E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 1825 Signing time: Fri 22 Aug 2025 16:37:49 +0000 Manifest this update: Fri 22 Aug 2025 16:37:49 +0000 Manifest next update: Fri 29 Aug 2025 16:37:49 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: UgNz29dRQ2KQtBKysIdVX+CMfLHTVlpysyfOvyJj3J0=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6190 (0x182e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Aug 22 16:37:49 2025 GMT Not After : Aug 29 16:37:49 2025 GMT Subject: CN=68a89cdd-eac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:65:2a:1a:17:9f:a1:bc:35:a6:e4:8b:45: 9e:3a:5f:2b:1c:5f:2e:3d:01:36:94:da:07:83:b5: 56:17:f2:99:d9:92:70:c7:90:18:7f:fa:97:a3:88: b0:31:f1:52:78:91:62:48:95:6e:66:4b:91:fb:25: aa:49:bd:af:d3:bd:67:2b:e6:50:04:c5:f0:c5:1e: 34:34:71:e1:fa:5a:ea:71:5f:29:5d:ec:45:52:f8: 4e:b5:de:95:74:ba:b8:14:13:9e:26:96:cf:ba:42: b5:90:f8:e9:1e:12:3e:e3:1a:7c:95:ce:24:e8:93: b3:aa:d9:ef:05:87:ba:9f:ca:3d:12:85:f1:33:3b: 65:62:e2:64:80:da:c4:ef:62:79:ef:b8:bc:06:a0: 94:c3:db:ae:fc:4f:15:db:79:27:b1:c8:f3:b3:0c: a2:a4:63:38:4c:dd:b2:5f:b4:23:99:4e:7f:86:77: d7:b0:87:a3:4d:be:11:a7:02:78:dd:f3:2e:1e:86: 2c:0b:46:30:86:49:f4:94:69:71:db:d8:23:f0:74: 89:44:2e:4f:12:6f:31:fa:f4:f1:9f:3f:a3:a2:ae: 78:24:a8:24:46:b3:a0:9a:73:a6:32:3e:31:f4:3c: f0:a8:77:77:01:f5:d9:6e:e7:6c:6a:e4:42:d6:ae: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:77:14:0F:A8:B6:46:D8:4B:D2:0A:F2:E5:C4:61:BF:3C:06:39 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:78:8e:24:8c:8a:ad:3e:d9:a0:b8:5f:42:3e:e5:98:76:e4: b9:82:5e:15:44:5a:ee:9a:15:1f:d7:8d:d3:59:be:9a:77:c3: 14:33:3c:5a:75:fd:97:dd:1d:40:40:de:91:10:12:ff:33:15: 7a:d9:90:9c:e7:3c:16:fd:ff:ff:f0:45:f0:78:35:05:92:65: a4:5d:45:fb:02:93:d9:c3:ce:de:e6:59:4e:fa:75:7e:d1:53: b2:7c:ab:e0:fa:f6:6c:24:47:07:4d:8c:a8:ba:f1:6e:a2:ce: 8e:fe:1d:88:8f:81:d6:4f:ce:ec:14:ae:eb:b4:0f:ee:fb:b1: d1:f2:39:0c:d1:b5:ae:65:55:4e:ac:27:ef:aa:fb:9e:cd:68: e8:6b:9d:c1:c6:e2:0c:53:ab:42:0f:e4:de:fd:60:fd:66:9d: d2:6b:6c:c7:7c:65:0a:39:a9:2a:89:06:f0:02:a5:c3:2d:c5: ed:a0:ef:de:c3:86:28:9d:9d:9a:03:c9:28:67:00:e5:d0:6b: 68:3d:4c:5c:00:32:5c:b9:fa:44:55:ee:0c:58:07:f6:9d:52: 69:90:f3:f7:47:96:a8:50:1b:86:c4:35:e1:53:a8:28:b3:91: 03:85:3a:7d:7e:61:84:28:ab:28:1b:d2:bf:69:be:bf:ad:54: f9:a2:2a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUwODIyMTYzNzQ5WhcNMjUwODI5MTYzNzQ5WjAYMRYwFAYD VQQDEw02OGE4OWNkZC1lYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dplKhoXn6G8Nabki0WeOl8rHF8uPQE2lNoHg7VWF/KZ2ZJwx5AYf/qXo4iw MfFSeJFiSJVuZkuR+yWqSb2v071nK+ZQBMXwxR40NHHh+lrqcV8pXexFUvhOtd6V dLq4FBOeJpbPukK1kPjpHhI+4xp8lc4k6JOzqtnvBYe6n8o9EoXxMztlYuJkgNrE 72J577i8BqCUw9uu/E8V23knscjzswyipGM4TN2yX7QjmU5/hnfXsIejTb4RpwJ4 3fMuHoYsC0Ywhkn0lGlx29gj8HSJRC5PEm8x+vTxnz+joq54JKgkRrOgmnOmMj4x 9DzwqHd3AfXZbudsauRC1q7bGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI6dxQP qLZG2EvSCvLlxGG/PAY5MB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2eI4kjIqtPtmguF9CPuWYduS5gl4VRFrumhUf143TWb6ad8MUMzxa df2X3R1AQN6REBL/MxV62ZCc5zwW/f//8EXweDUFkmWkXUX7ApPZw87e5llO+nV+ 0VOyfKvg+vZsJEcHTYyouvFuos6O/h2Ij4HWT87sFK7rtA/u+7HR8jkM0bWuZVVO rCfvqvuezWjoa53BxuIMU6tCD+Te/WD9Zp3Sa2zHfGUKOakqiQbwAqXDLcXtoO/e w4YonZ2aA8koZwDl0GtoPUxcADJcufpEVe4MWAf2nVJpkPP3R5aoUBuGxDXhU6go s5EDhTp9fmGEKKsoG9K/ab6/rVT5oirB -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:09 2025 by rpki-client