$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: aWKFnwHqI5YstQeAt+Q8rXhQnXgc4ECMt9bDOqqyQZ0= Subject key identifier: DE:6F:D3:5B:32:A0:81:3A:66:1E:CC:2F:D0:D2:86:C4:39:12:DE:98 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: AA Signing time: Sat 23 Aug 2025 06:30:24 +0000 Manifest this update: Sat 23 Aug 2025 06:30:24 +0000 Manifest next update: Sat 30 Aug 2025 06:30:24 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: wuiXUYv67zAXeVDI5/Kv8VGHUCcosAp1jLcybG2QZ9M=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: Nw7bdEXIt94l0l1M2JoUcNpjGgfJnBtSbrpDec58/34=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: DTme312dtWhjs1JFg94y153qtB+lMbeMxpbcIu8vIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Aug 23 06:30:24 2025 GMT Not After : Aug 30 06:30:24 2025 GMT Subject: CN=68a96000-c36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:ac:ac:fd:2e:85:e3:1f:1e:51:a2:29:66: 62:69:84:66:04:0f:2f:34:11:60:32:eb:d9:44:f6: db:cc:51:4e:0a:42:88:28:14:90:8a:49:5b:44:7f: bd:67:64:2a:23:15:a9:55:f5:fc:fc:d6:36:69:16: cb:f0:e3:75:09:00:e7:1b:76:9d:6d:ad:31:43:0c: cd:90:87:59:e2:05:72:b7:6b:f8:b4:6b:04:e2:93: e6:06:46:63:47:2a:84:40:2c:1d:5f:21:f9:6f:cc: f4:75:3a:ac:37:b1:66:41:7e:36:36:3d:af:ad:20: 3c:a0:82:5a:f8:38:c0:12:88:12:89:21:02:1a:f7: a7:c5:2c:54:78:c6:08:e6:56:32:25:b5:45:36:f2: 91:22:2b:9d:3c:4a:b4:e5:4a:e3:d3:8d:14:7c:3a: cc:86:b9:fe:0a:70:d1:4b:96:63:ea:2b:d5:fa:c9: 91:2f:be:3c:48:32:59:56:29:bf:de:a9:89:7b:6c: 8b:79:6d:9c:49:a3:b3:2a:b6:fe:e8:cc:5c:28:c5: 81:e2:cd:49:19:5d:85:a8:e0:05:80:71:4f:b2:dc: da:6c:41:8c:82:6a:79:13:e2:c2:a9:f5:c6:12:bc: d3:56:f2:c6:75:fd:59:8e:1e:a2:41:60:ee:09:cd: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:D3:5B:32:A0:81:3A:66:1E:CC:2F:D0:D2:86:C4:39:12:DE:98 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9d:d0:fc:83:ec:df:5e:15:2b:f9:85:72:33:68:06:3f:96: 8b:1c:51:cf:77:68:77:d1:e2:2e:b4:59:63:b6:63:03:35:6a: 5f:b0:0a:66:e9:db:ad:37:de:e8:81:72:e2:fe:29:dd:68:46: 64:0c:55:fc:f1:bf:0e:66:21:5f:00:32:a6:b5:84:6a:22:65: de:a7:b9:ba:63:6d:59:37:da:36:57:6d:77:02:62:3d:31:ec: 9d:03:b9:3a:a5:89:54:1a:71:f5:3d:c3:5a:ac:f1:15:5f:17: f1:17:5b:6f:22:d4:00:43:71:fc:d8:e9:1a:fc:c5:db:fb:79: 86:95:39:e6:5b:78:e7:53:a5:32:7b:03:5a:13:9e:f6:b0:c2: 7a:be:ae:9c:6a:d1:1f:52:3f:bd:87:70:d6:2e:44:ef:7e:51: 47:c8:68:cd:7d:c0:77:f8:f3:30:2b:af:fc:f8:64:33:07:e8: 70:c1:e9:62:10:8a:f8:79:e2:49:eb:e3:4f:81:67:54:06:a5: 2a:45:58:72:2c:a3:42:84:bb:31:19:d8:fd:b7:9a:12:f7:43: 7b:ad:53:db:05:c0:50:53:34:d5:58:37:51:54:01:33:8f:d6: 4b:82:a1:92:27:bc:86:5e:0e:16:5d:ca:98:9f:38:8e:ba:32: 17:b2:12:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwODIzMDYzMDI0WhcNMjUwODMwMDYzMDI0WjAYMRYwFAYD VQQDEw02OGE5NjAwMC1jMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q6srP0uheMfHlGiKWZiaYRmBA8vNBFgMuvZRPbbzFFOCkKIKBSQiklbRH+9 Z2QqIxWpVfX8/NY2aRbL8ON1CQDnG3adba0xQwzNkIdZ4gVyt2v4tGsE4pPmBkZj RyqEQCwdXyH5b8z0dTqsN7FmQX42Nj2vrSA8oIJa+DjAEogSiSECGvenxSxUeMYI 5lYyJbVFNvKRIiudPEq05Urj040UfDrMhrn+CnDRS5Zj6ivV+smRL748SDJZVim/ 3qmJe2yLeW2cSaOzKrb+6MxcKMWB4s1JGV2FqOAFgHFPstzabEGMgmp5E+LCqfXG ErzTVvLGdf1Zjh6iQWDuCc22zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5v01sy oIE6Zh7ML9DShsQ5Et6YMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnndD8g+zfXhUr+YVyM2gGP5aLHFHPd2h30eIutFljtmMDNWpfsApm 6dutN97ogXLi/indaEZkDFX88b8OZiFfADKmtYRqImXep7m6Y21ZN9o2V213AmI9 MeydA7k6pYlUGnH1PcNarPEVXxfxF1tvItQAQ3H82Oka/MXb+3mGlTnmW3jnU6Uy ewNaE572sMJ6vq6catEfUj+9h3DWLkTvflFHyGjNfcB3+PMwK6/8+GQzB+hwweli EIr4eeJJ6+NPgWdUBqUqRVhyLKNChLsxGdj9t5oS90N7rVPbBcBQUzTVWDdRVAEz j9ZLgqGSJ7yGXg4WXcqYnziOujIXshKz -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:49 2025 by rpki-client