$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: cFeqcqEJhdaDTs2rfHs8wBSXW2AYxgBJb2ARTcRzTqQ= Subject key identifier: 19:DB:91:CE:07:8B:DC:BD:3B:90:AB:A2:37:EA:88:B7:2D:2A:3E:F4 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: FD Signing time: Sat 23 Aug 2025 05:22:07 +0000 Manifest this update: Sat 23 Aug 2025 05:22:06 +0000 Manifest next update: Sat 30 Aug 2025 05:22:06 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: y2yC9nGY9fLZKNofm/B5140OoH0dR5L+4RpZRCdCw70=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Aug 23 05:22:06 2025 GMT Not After : Aug 30 05:22:06 2025 GMT Subject: CN=68a94fff-8a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:5c:ca:ae:4e:44:5e:41:aa:f4:b3:7a:5c: 8c:f5:51:65:c3:6b:c4:15:02:76:e6:f3:97:5f:ae: 94:df:93:f3:63:3a:b3:64:05:b0:bf:ba:27:d8:8c: df:16:f4:2c:1a:44:f9:0d:a4:3e:79:da:03:26:0c: 5c:ea:b0:e1:b3:7b:c9:b9:a3:0b:95:12:34:25:51: e6:2e:86:a6:73:eb:cf:7c:5c:2a:77:00:46:23:3b: ae:df:33:18:13:33:2a:1e:cc:96:49:75:67:70:9b: b8:c0:3f:fd:f9:21:47:6d:65:2c:07:fd:40:85:6d: 0d:39:53:9f:65:15:83:87:77:a9:6e:f7:b9:d2:c4: 5d:1f:f9:43:7f:21:2d:e1:cc:2d:c8:1f:20:7e:86: 10:2c:bc:fa:59:38:f5:c2:c2:e6:c7:36:e9:0d:97: 60:68:c1:5a:97:90:ec:05:55:2f:39:59:05:b8:bb: 29:5a:8b:33:8a:93:fc:c5:02:c3:c5:c5:d7:c1:a8: 21:75:a4:ce:09:e1:2e:d8:a1:11:41:22:68:61:cc: f0:be:56:86:39:42:b0:57:8d:0f:7d:eb:a9:e8:05: 41:c5:05:83:2b:80:83:78:f1:7b:b4:fa:97:87:ce: ae:4f:ef:e3:c7:cf:82:01:73:bf:14:3a:0a:23:6a: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DB:91:CE:07:8B:DC:BD:3B:90:AB:A2:37:EA:88:B7:2D:2A:3E:F4 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:25:65:82:2e:ee:25:44:b7:e5:43:63:86:6c:31:e2:f8:40: 85:70:00:90:86:0c:b5:a5:db:8c:e5:24:a0:0f:81:ee:d7:03: 65:d0:f5:1f:b5:5e:2e:65:4b:bd:ad:87:dd:e2:7b:ac:d5:94: 77:59:19:84:3a:2c:26:15:61:49:1d:0e:d2:5f:33:b5:3e:c1: e3:28:d4:1f:0e:d9:5f:6b:86:60:8c:32:c5:52:95:2b:aa:90: b3:8f:bf:07:bc:c7:3e:85:81:dd:99:aa:33:07:0c:25:c2:10: bb:c9:d9:b9:92:21:56:d0:32:da:58:e9:c7:bd:48:04:e8:41: 89:ea:af:21:10:61:e0:53:5a:98:2f:2a:d9:c8:b6:50:af:d2: 45:c5:6b:80:c5:2d:2f:ee:5a:0c:29:25:02:50:2d:fc:f3:54: a4:c1:2d:e7:89:5a:44:93:1e:34:cb:f5:21:94:27:ed:8a:58: 4d:df:87:81:30:cc:2e:9e:a0:ad:71:2e:f9:da:6e:80:a4:96: 67:c3:8e:4b:98:41:be:54:17:d8:fe:80:dc:5c:96:72:09:51: 33:a3:54:61:2f:06:24:af:3d:6d:35:ac:bc:29:c8:51:06:38: d3:1e:ae:c0:05:cf:11:46:4a:ec:05:10:de:06:34:63:af:58: 74:4d:6a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwODIzMDUyMjA2WhcNMjUwODMwMDUyMjA2WjAYMRYwFAYD VQQDEw02OGE5NGZmZi04YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO5cyq5ORF5BqvSzelyM9VFlw2vEFQJ25vOXX66U35PzYzqzZAWwv7on2Izf FvQsGkT5DaQ+edoDJgxc6rDhs3vJuaMLlRI0JVHmLoamc+vPfFwqdwBGIzuu3zMY EzMqHsyWSXVncJu4wD/9+SFHbWUsB/1AhW0NOVOfZRWDh3epbve50sRdH/lDfyEt 4cwtyB8gfoYQLLz6WTj1wsLmxzbpDZdgaMFal5DsBVUvOVkFuLspWoszipP8xQLD xcXXwaghdaTOCeEu2KERQSJoYczwvlaGOUKwV40Pfeup6AVBxQWDK4CDePF7tPqX h86uT+/jx8+CAXO/FDoKI2rViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnbkc4H i9y9O5CrojfqiLctKj70MB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWJWWCLu4lRLflQ2OGbDHi+ECFcACQhgy1pduM5SSgD4Hu1wNl0PUf tV4uZUu9rYfd4nus1ZR3WRmEOiwmFWFJHQ7SXzO1PsHjKNQfDtlfa4ZgjDLFUpUr qpCzj78HvMc+hYHdmaozBwwlwhC7ydm5kiFW0DLaWOnHvUgE6EGJ6q8hEGHgU1qY LyrZyLZQr9JFxWuAxS0v7loMKSUCUC3881SkwS3niVpEkx40y/UhlCftilhN34eB MMwunqCtcS752m6ApJZnw45LmEG+VBfY/oDcXJZyCVEzo1RhLwYkrz1tNay8KchR BjjTHq7ABc8RRkrsBRDeBjRjr1h0TWqm -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:00 2025 by rpki-client