$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: gEsjgRctko8xh9wlB3fTan0h3qj54AqQXl/SCyLQuGs= Subject key identifier: 59:86:A3:E3:50:F9:57:9D:C2:69:31:C9:6D:0A:2C:96:34:02:91:8C Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 0708 Signing time: Fri 22 Aug 2025 22:02:33 +0000 Manifest this update: Fri 22 Aug 2025 22:02:33 +0000 Manifest next update: Fri 29 Aug 2025 22:02:33 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: FDNCKDi+QLMcKbTH4u9f7jXN9bdftBp1FbDKkaxXeOQ=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Aug 22 22:02:33 2025 GMT Not After : Aug 29 22:02:33 2025 GMT Subject: CN=68a8e8f9-2a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:cf:c6:15:76:61:14:3e:3d:c7:cd:d7:28: 45:70:c5:d4:43:3c:9e:6b:c2:0e:c0:d5:0f:92:24: 40:bb:27:5e:cb:15:6d:be:e0:c6:e1:dd:24:f1:06: ae:be:cf:20:e1:1f:c5:67:48:43:de:cc:cb:4d:71: d5:1c:fe:67:d1:63:3f:ae:64:d5:b5:d3:e8:54:db: ef:05:55:75:59:c6:c6:7d:f9:e4:9f:85:7f:94:11: ae:07:ec:93:a1:fc:a3:07:91:f1:94:9d:87:2c:a1: 27:a4:45:74:ce:66:2a:1f:5b:42:a0:cf:6f:62:33: cd:89:8a:c6:51:37:8b:78:0a:52:7e:6f:d5:bc:8e: b9:94:f0:f0:20:74:02:8f:d8:5b:e2:41:15:59:fc: b7:4f:eb:e8:7d:4d:65:f7:f7:11:6f:83:55:2c:7a: ad:a0:8d:ec:f3:07:67:09:fa:ea:b6:2e:ca:92:cc: 0e:32:bb:83:2c:27:48:8a:b6:b1:28:68:b3:76:c0: 33:c9:04:2a:dc:14:76:c9:42:7d:68:b9:64:f1:a2: ee:7a:ab:9b:45:d8:6e:c3:14:86:73:dd:08:f1:a5: aa:8e:46:8c:d6:7f:15:ce:d7:c0:20:42:94:27:e8: 69:f9:5e:6d:d9:90:04:8f:e7:62:4c:35:c6:00:80: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:A3:E3:50:F9:57:9D:C2:69:31:C9:6D:0A:2C:96:34:02:91:8C X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:03:c6:13:3b:91:02:46:8e:31:0b:8f:e9:28:67:f7:f6:38: 69:fe:db:9a:96:3e:f0:d4:e2:0d:ff:5c:a0:cb:2a:75:61:e7: 1b:03:6a:f8:ed:6f:c3:fd:31:30:77:eb:e6:8d:80:26:e5:b3: 58:45:3c:c7:75:ca:e0:c0:09:11:b3:e1:6c:18:bf:4d:2e:81: a0:94:50:58:1b:dc:0a:36:6a:d3:67:ea:d8:a3:ec:8e:8c:b4: de:9c:f5:a3:13:17:93:f9:62:fb:a2:05:64:de:e5:71:fc:75: fa:1b:cc:d1:3d:f7:12:44:f8:5f:07:03:fa:b7:23:1c:10:e7: 22:cb:6d:52:c8:77:6a:ce:e1:99:d2:37:c3:0c:a6:5f:49:70: 09:14:88:68:c3:c9:bb:ca:78:dc:0c:0c:fd:3d:fe:49:a0:2c: 3c:74:fd:26:f2:bc:77:c8:3b:9f:1c:21:84:ce:78:44:8f:40: c0:00:b5:17:ad:fe:8a:be:a4:6a:dc:c8:f0:07:6d:06:9f:f7: b3:13:fb:f2:e2:4a:68:b8:9f:27:a7:3d:13:1a:b0:15:9f:29: 72:ce:55:b2:ba:f8:5e:fb:5e:ae:13:81:d4:d8:60:81:81:b8: e4:23:7b:42:e8:15:99:d9:c7:ed:54:5b:c5:26:43:d1:2d:32: 67:cf:0e:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUwODIyMjIwMjMzWhcNMjUwODI5MjIwMjMzWjAYMRYwFAYD VQQDEw02OGE4ZThmOS0yYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnELPxhV2YRQ+PcfN1yhFcMXUQzyea8IOwNUPkiRAuydeyxVtvuDG4d0k8Qau vs8g4R/FZ0hD3szLTXHVHP5n0WM/rmTVtdPoVNvvBVV1WcbGffnkn4V/lBGuB+yT ofyjB5HxlJ2HLKEnpEV0zmYqH1tCoM9vYjPNiYrGUTeLeApSfm/VvI65lPDwIHQC j9hb4kEVWfy3T+vofU1l9/cRb4NVLHqtoI3s8wdnCfrqti7KkswOMruDLCdIirax KGizdsAzyQQq3BR2yUJ9aLlk8aLuequbRdhuwxSGc90I8aWqjkaM1n8VztfAIEKU J+hp+V5t2ZAEj+diTDXGAICo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmGo+NQ +VedwmkxyW0KLJY0ApGMMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDA8YTO5ECRo4xC4/pKGf39jhp/tualj7w1OIN/1ygyyp1YecbA2r4 7W/D/TEwd+vmjYAm5bNYRTzHdcrgwAkRs+FsGL9NLoGglFBYG9wKNmrTZ+rYo+yO jLTenPWjExeT+WL7ogVk3uVx/HX6G8zRPfcSRPhfBwP6tyMcEOciy21SyHdqzuGZ 0jfDDKZfSXAJFIhow8m7ynjcDAz9Pf5JoCw8dP0m8rx3yDufHCGEznhEj0DAALUX rf6KvqRq3MjwB20Gn/ezE/vy4kpouJ8npz0TGrAVnylyzlWyuvhe+16uE4HU2GCB gbjkI3tC6BWZ2cftVFvFJkPRLTJnzw6Q -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:54 2025 by rpki-client