$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: cnXChPfy6UXANWBlufbgfsfqDSDQx3sPaKgSZ3mHE6s= Subject key identifier: C1:6C:4C:EE:FD:8C:DD:BF:D8:B8:9C:F5:DF:7B:78:6B:43:3B:A7:A6 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 018E Signing time: Sat 23 Aug 2025 03:42:00 +0000 Manifest this update: Sat 23 Aug 2025 03:41:59 +0000 Manifest next update: Sat 30 Aug 2025 03:41:59 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: oL7oASoxaRur8S9uGZbYDAvkJWUKpKDRA53UZlgj6lM=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Aug 23 03:41:59 2025 GMT Not After : Aug 30 03:41:59 2025 GMT Subject: CN=68a93887-1e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:01:71:f4:ae:2f:65:36:ed:d9:f0:43:21: a5:c0:ff:66:05:04:d9:02:f7:be:76:49:0c:8d:a5: 51:92:b5:2e:01:d2:1c:f5:e8:d9:ef:87:e3:6a:02: 25:07:3e:f2:ad:df:84:20:b3:0b:d8:bf:97:44:bb: 7b:d3:88:fe:22:28:8a:7f:52:66:fa:0e:17:98:4d: f7:43:df:d6:de:0f:eb:7f:af:d5:04:82:c5:f8:7d: d4:d0:d6:1d:f8:38:ca:2b:2c:2b:5e:56:a5:ee:6e: 89:56:4c:90:3e:48:da:b3:ba:dc:ca:78:41:6f:38: 1a:2b:30:d9:c4:a9:fc:2e:c8:ef:3b:64:13:07:f0: f8:96:b5:9a:d3:93:f8:ed:6b:0c:38:07:7b:0e:2e: ee:fa:ad:31:0f:e1:99:f9:15:71:99:1b:c6:15:49: aa:4e:cb:14:d2:1f:37:13:9d:1b:2c:b2:21:fe:62: 84:37:b2:13:fb:ea:87:bb:14:b9:68:04:cc:77:6c: b7:d8:e9:54:f1:3e:d3:42:bf:27:b8:bb:a2:20:0b: 0d:85:96:36:db:b7:fb:f0:24:ad:c0:38:7f:24:8f: c6:11:d7:dc:ab:f6:a1:cc:d2:b0:93:d1:8c:45:e0: 7a:36:db:21:1a:5e:09:58:05:61:59:03:85:f7:38: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:4C:EE:FD:8C:DD:BF:D8:B8:9C:F5:DF:7B:78:6B:43:3B:A7:A6 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:92:c1:fa:09:9e:09:d2:31:0a:dc:48:44:13:e2:98:12: 0d:9b:82:f9:85:a3:06:a1:e3:9a:76:c8:16:74:ec:9f:cf:1f: 75:22:0e:a4:6e:a3:f9:e3:55:d5:0b:2a:e7:24:dd:fc:2d:58: a3:35:18:6f:55:82:4e:d8:8b:93:1e:eb:d5:c4:fc:f5:1b:0f: a0:c6:80:90:a1:48:c4:85:f8:0d:1f:7b:24:c9:54:e2:bf:fc: d4:2a:25:3d:74:dc:8a:8e:98:74:0e:a9:98:79:65:b7:eb:69: 4b:86:b0:5c:83:1d:9b:3e:86:ab:68:92:5f:0b:0a:e4:34:85: d2:10:f4:60:b8:6e:97:1d:40:a1:72:1a:98:fe:24:90:62:71: c1:1c:45:0a:61:15:22:a1:de:b4:2d:03:fd:3a:28:f7:af:1d: 3a:23:4a:67:36:0a:34:ac:9b:95:c1:69:6b:80:ea:1e:de:20: 20:6f:cf:18:86:1e:ac:b0:b1:18:9e:fa:16:80:9e:d7:9f:36: b8:8e:e8:c2:b9:bc:49:b4:99:be:98:36:c5:ba:da:d4:53:84: 57:f5:67:8e:b8:f1:94:5a:48:22:b7:ae:07:2e:7d:cd:5c:ba: 75:25:6d:b6:b8:26:eb:31:66:50:1b:c5:78:cc:c0:ef:08:f2: 47:97:90:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwODIzMDM0MTU5WhcNMjUwODMwMDM0MTU5WjAYMRYwFAYD VQQDEw02OGE5Mzg4Ny0xZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KwBcfSuL2U27dnwQyGlwP9mBQTZAve+dkkMjaVRkrUuAdIc9ejZ74fjagIl Bz7yrd+EILML2L+XRLt704j+IiiKf1Jm+g4XmE33Q9/W3g/rf6/VBILF+H3U0NYd +DjKKywrXlal7m6JVkyQPkjas7rcynhBbzgaKzDZxKn8LsjvO2QTB/D4lrWa05P4 7WsMOAd7Di7u+q0xD+GZ+RVxmRvGFUmqTssU0h83E50bLLIh/mKEN7IT++qHuxS5 aATMd2y32OlU8T7TQr8nuLuiIAsNhZY227f78CStwDh/JI/GEdfcq/ahzNKwk9GM ReB6NtshGl4JWAVhWQOF9zibqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFsTO79 jN2/2Lic9d97eGtDO6emMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJ5LB+gmeCdIxCtxIRBPimBINm4L5haMGoeOadsgWdOyfzx91Ig6k bqP541XVCyrnJN38LVijNRhvVYJO2IuTHuvVxPz1Gw+gxoCQoUjEhfgNH3skyVTi v/zUKiU9dNyKjph0DqmYeWW362lLhrBcgx2bPoaraJJfCwrkNIXSEPRguG6XHUCh chqY/iSQYnHBHEUKYRUiod60LQP9Oij3rx06I0pnNgo0rJuVwWlrgOoe3iAgb88Y hh6ssLEYnvoWgJ7Xnza4jujCubxJtJm+mDbFutrUU4RX9WeOuPGUWkgit64HLn3N XLp1JW22uCbrMWZQG8V4zMDvCPJHl5BU -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:35 2025 by rpki-client