$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: 7DJi1FwGHPqCItq9DR4S/keMw+zd84BSDr5DVmHchUM= Subject key identifier: 05:B1:33:C2:AA:96:75:F8:BB:ED:AE:F6:C4:11:E8:3A:E3:09:A9:C6 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0A88 Signing time: Fri 22 Aug 2025 20:44:41 +0000 Manifest this update: Fri 22 Aug 2025 20:44:40 +0000 Manifest next update: Fri 29 Aug 2025 20:44:40 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: 8rYcKMgk1Pvh+yzQvc8ug0g0YB3wtfYP9mJab7+oHbw=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 22 20:44:40 2025 GMT Not After : Aug 29 20:44:40 2025 GMT Subject: CN=68a8d6b8-1985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:85:22:94:db:1e:18:fa:fa:e3:2c:4c:98: 86:84:ee:95:a4:27:eb:ba:30:43:a7:e2:5a:00:2a: bc:5f:63:58:53:6a:80:00:41:bb:de:e4:65:49:d0: 61:46:38:b1:65:8d:50:39:af:85:e8:12:af:eb:7d: d2:b7:5a:68:5e:39:cf:0b:36:bb:8d:71:6f:4a:08: 54:df:71:07:cf:7b:ea:11:32:c2:af:83:05:13:3a: 19:6f:fe:38:b6:e5:98:46:f4:a5:66:59:8d:83:09: f8:24:53:02:bd:50:ec:4a:02:fe:47:0c:69:67:3a: c7:82:b2:e0:30:88:ea:6d:3e:1d:0b:c5:fe:b2:e8: cf:33:50:36:a6:62:d3:38:71:5a:52:61:1b:50:e5: b4:1a:0d:15:82:39:a9:19:dd:1f:96:f1:5b:7a:b4: e2:ad:fb:4e:53:bd:a1:94:48:a1:a5:df:19:d3:06: 41:e9:46:53:fa:e1:89:28:8c:6b:b6:d9:1c:b9:d5: 9c:15:f2:42:0d:8d:9a:29:44:66:7c:78:f8:a9:80: 58:b6:d9:43:33:76:b2:dd:35:b0:07:fc:7d:1d:b6: bd:53:00:d1:01:7c:3a:71:53:ff:4b:80:37:be:f2: 0e:c9:6c:04:8a:05:7d:23:2c:e3:3a:fe:4f:00:ee: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B1:33:C2:AA:96:75:F8:BB:ED:AE:F6:C4:11:E8:3A:E3:09:A9:C6 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:6f:be:dc:fc:ea:80:6a:94:aa:4b:06:15:ce:70:f3:a4: f1:18:f4:f7:b6:a7:58:f1:b2:f4:0c:50:b7:72:3c:61:67:fb: ad:a8:01:1c:08:6b:2e:3d:5b:c4:21:50:51:4f:a7:d2:1d:55: 3d:0b:86:90:ea:57:d8:b8:96:71:23:b7:ce:16:c4:55:ff:b5: 55:e8:b0:56:5f:6f:ed:70:ed:64:b8:25:09:c6:07:7e:a5:a2: 50:89:ee:fa:ac:55:9d:2a:f3:d6:23:ef:67:f4:6a:af:c2:27: 7c:9b:1b:89:59:ce:64:c0:fd:ba:a4:5d:95:4a:65:fa:c9:47: 6a:54:de:e3:23:71:37:42:bd:2f:5f:cd:70:c4:8e:c7:aa:48: 30:c1:ab:2f:09:85:26:92:c5:a3:93:ef:ee:13:90:1e:9e:15: b8:cc:5e:88:da:05:54:72:ef:8a:e8:ae:59:dd:b6:22:f0:72: e8:81:4d:fc:0d:09:04:29:b3:cb:92:d6:c8:d8:72:6f:21:e8: bf:4e:be:e0:71:f3:91:33:8e:39:42:ff:09:63:b4:07:80:ed: 9f:b9:c7:7f:2d:75:02:67:64:bd:84:8a:b3:5b:fc:18:8a:80: d3:6f:81:97:15:cf:99:73:35:78:e7:6d:53:4d:5e:9c:2a:eb: c3:69:39:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwODIyMjA0NDQwWhcNMjUwODI5MjA0NDQwWjAYMRYwFAYD VQQDEw02OGE4ZDZiOC0xOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v2FIpTbHhj6+uMsTJiGhO6VpCfrujBDp+JaACq8X2NYU2qAAEG73uRlSdBh RjixZY1QOa+F6BKv633St1poXjnPCza7jXFvSghU33EHz3vqETLCr4MFEzoZb/44 tuWYRvSlZlmNgwn4JFMCvVDsSgL+RwxpZzrHgrLgMIjqbT4dC8X+sujPM1A2pmLT OHFaUmEbUOW0Gg0VgjmpGd0flvFberTirftOU72hlEihpd8Z0wZB6UZT+uGJKIxr ttkcudWcFfJCDY2aKURmfHj4qYBYttlDM3ay3TWwB/x9Hba9UwDRAXw6cVP/S4A3 vvIOyWwEigV9IyzjOv5PAO6/IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWxM8Kq lnX4u+2u9sQR6DrjCanGMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Km++3PzqgGqUqksGFc5w86TxGPT3tqdY8bL0DFC3cjxhZ/utqAEc CGsuPVvEIVBRT6fSHVU9C4aQ6lfYuJZxI7fOFsRV/7VV6LBWX2/tcO1kuCUJxgd+ paJQie76rFWdKvPWI+9n9Gqvwid8mxuJWc5kwP26pF2VSmX6yUdqVN7jI3E3Qr0v X81wxI7HqkgwwasvCYUmksWjk+/uE5AenhW4zF6I2gVUcu+K6K5Z3bYi8HLogU38 DQkEKbPLktbI2HJvIei/Tr7gcfORM445Qv8JY7QHgO2fucd/LXUCZ2S9hIqzW/wY ioDTb4GXFc+ZczV4521TTV6cKuvDaTkr -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:40 2025 by rpki-client