$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: xdWF86BktJ18m6qXsU9/Y4z6QmP9qG5lezK7bu/JTg0= Subject key identifier: B0:BA:20:87:BA:F3:76:82:2B:C6:28:70:48:82:91:59:97:DE:6C:FE Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:51:46 +0000 Manifest this update: Sat 23 Aug 2025 05:51:45 +0000 Manifest next update: Sat 30 Aug 2025 05:51:45 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: R+3ntA1c6mJfHfmiGzLIN7fYJjDmN6uv9Xj1F6lJNtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Aug 23 05:51:45 2025 GMT Not After : Aug 30 05:51:45 2025 GMT Subject: CN=68a956f2-60da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:03:96:91:51:ea:21:04:14:da:a4:a0:1a: 7e:9c:40:84:e2:73:02:28:f3:bd:aa:ac:fc:77:d3: 50:08:b9:48:10:18:99:ff:e5:9b:91:35:11:6a:ae: 02:17:fc:23:3d:d6:4b:3b:03:1a:77:90:05:af:07: 5b:5d:30:c1:de:3a:86:55:0e:cd:67:63:4c:c3:31: 3e:ee:55:89:64:e8:63:e8:4e:27:c9:7c:60:65:e0: 0e:7a:50:02:d9:19:df:47:6e:e3:34:9e:fe:76:df: 2d:0d:dd:44:d4:c0:d0:1f:b5:c9:65:85:ec:24:d4: 68:52:8d:8d:98:2d:89:9a:09:7b:61:b6:61:40:93: 51:40:ad:2e:3a:1f:b8:fa:6f:a3:d5:99:2e:fc:63: 5b:0e:f1:ee:ee:a9:ce:90:dc:ba:4c:0c:a4:af:cc: 1b:68:c3:1b:9d:ba:3e:4a:12:a6:c9:84:43:71:ce: a4:4b:25:b8:75:3b:9c:eb:cb:8d:e4:4b:55:3b:ce: d8:c7:f8:45:ae:9a:f1:7d:2c:7d:76:eb:e2:ee:4c: e3:42:f1:bb:d5:35:d3:b1:a5:d0:e3:d2:88:74:7a: da:47:3b:32:cc:26:7c:ec:71:e9:54:b5:d4:16:d8: a1:2e:40:1b:bf:c7:73:5f:07:16:4b:22:bb:fb:0c: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:20:87:BA:F3:76:82:2B:C6:28:70:48:82:91:59:97:DE:6C:FE X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:24:a6:e2:22:f0:28:f3:d3:b6:d2:eb:05:c0:06:db:68:cb: 1d:77:58:46:4c:dc:8c:72:78:2c:e8:51:64:b1:8f:b7:c4:2a: 84:a9:69:c0:3e:d6:c2:b7:26:93:91:0c:6e:7e:16:46:3a:cd: 59:5a:c9:29:ee:ae:09:b7:2a:42:1b:ac:3e:76:71:74:8b:7d: d7:8d:ec:b7:ab:8f:cf:4e:04:74:4e:91:64:2f:27:4c:22:f6: 8c:ea:38:dd:c8:f4:d2:1a:10:ee:21:54:f6:57:cb:3f:50:19: 57:ae:d2:20:a4:2c:28:26:97:cd:5d:e0:5b:79:c4:7a:18:41: 77:46:d4:1f:fe:f1:4f:7c:44:f0:4e:b2:1d:d5:7a:e8:a9:38: d6:52:cc:c3:44:52:a4:2a:78:57:36:27:1d:b1:fa:8a:b9:3d: bd:ba:19:1b:42:a7:bc:39:61:9e:17:a4:07:f3:3c:7a:72:c7: c5:58:cb:4a:c2:b5:8f:7c:ca:72:4d:12:1d:01:3b:1c:87:2d: 08:c5:74:33:4e:83:27:f0:7b:87:1b:c1:1d:46:e6:e5:ba:15: 71:2d:6e:e6:b0:e3:9e:a4:45:43:89:6a:a6:09:f2:92:a2:f3: 5e:dd:10:97:87:d8:a7:0f:59:e4:5c:df:3b:31:ba:82:1e:dc: 94:9b:7a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUwODIzMDU1MTQ1WhcNMjUwODMwMDU1MTQ1WjAYMRYwFAYD VQQDEw02OGE5NTZmMi02MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl08DlpFR6iEEFNqkoBp+nECE4nMCKPO9qqz8d9NQCLlIEBiZ/+WbkTURaq4C F/wjPdZLOwMad5AFrwdbXTDB3jqGVQ7NZ2NMwzE+7lWJZOhj6E4nyXxgZeAOelAC 2RnfR27jNJ7+dt8tDd1E1MDQH7XJZYXsJNRoUo2NmC2Jmgl7YbZhQJNRQK0uOh+4 +m+j1Zku/GNbDvHu7qnOkNy6TAykr8wbaMMbnbo+ShKmyYRDcc6kSyW4dTuc68uN 5EtVO87Yx/hFrprxfSx9duvi7kzjQvG71TXTsaXQ49KIdHraRzsyzCZ87HHpVLXU FtihLkAbv8dzXwcWSyK7+wxXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC6IIe6 83aCK8YocEiCkVmX3mz+MB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJKbiIvAo89O20usFwAbbaMsdd1hGTNyMcngs6FFksY+3xCqEqWnA PtbCtyaTkQxufhZGOs1ZWskp7q4JtypCG6w+dnF0i33Xjey3q4/PTgR0TpFkLydM IvaM6jjdyPTSGhDuIVT2V8s/UBlXrtIgpCwoJpfNXeBbecR6GEF3RtQf/vFPfETw TrId1XroqTjWUszDRFKkKnhXNicdsfqKuT29uhkbQqe8OWGeF6QH8zx6csfFWMtK wrWPfMpyTRIdATschy0IxXQzToMn8HuHG8EdRubluhVxLW7msOOepEVDiWqmCfKS ovNe3RCXh9inD1nkXN87MbqCHtyUm3pJ -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:50 2025 by rpki-client