$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: iKWD8XMjK0vtANNXW24GobE4tQ49zj4LSeNk8HeOgyE= Subject key identifier: 37:CD:8B:84:1A:EF:4A:8C:C3:AC:56:31:0E:0D:29:EE:06:BC:39:EA Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 09DD Signing time: Fri 22 Aug 2025 20:05:18 +0000 Manifest this update: Fri 22 Aug 2025 20:05:18 +0000 Manifest next update: Fri 29 Aug 2025 20:05:18 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 6CNMFeLuZdJzFUPeNYD8bvxMPqaLVKOlTtuWJtP+nbI=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Uf8LYTZNddjyS9MPn91LjVgsJA/mrFvn5q0EDwmn+i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Aug 22 20:05:18 2025 GMT Not After : Aug 29 20:05:18 2025 GMT Subject: CN=68a8cd7e-62d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:8f:ba:ee:fb:56:66:a4:43:9c:c5:86:56: 09:26:5c:f8:41:e7:35:38:42:31:3d:36:1b:2c:e1: cf:e6:1d:0a:51:73:6d:c1:00:ff:9a:26:43:69:27: 6d:93:f5:f1:1f:fc:c3:13:c8:a3:19:2d:52:2c:79: 7d:66:8e:41:fe:3a:07:d5:bc:f6:39:e6:1d:d0:ec: ea:d0:ce:3d:51:e3:2e:14:75:fe:a3:76:5a:ae:f3: 3b:5d:0c:1f:ec:c6:dd:f6:1d:25:b7:be:86:c2:f5: ba:98:bc:9e:b2:96:5b:32:47:ad:6b:b1:ce:2d:57: db:c3:b7:4b:8f:46:79:52:21:78:77:43:69:1e:81: c2:a0:3d:bb:c6:52:e6:fa:de:d0:8b:28:6c:8b:a8: 01:23:e6:7f:23:00:e3:78:11:fd:55:c9:8d:bd:b5: 86:5a:87:99:60:e0:ce:1e:af:ac:8b:39:f4:78:13: ae:10:91:6e:cb:19:db:d3:bb:ba:81:c0:a9:b9:1a: 47:97:11:60:23:db:16:97:b0:19:c1:f7:89:81:21: 5b:5b:0e:a0:0d:f9:90:00:09:5a:5e:8c:7e:5a:51: 05:82:5b:26:96:2b:39:67:3e:11:1c:e1:82:1c:0b: 88:90:3e:25:34:d8:fe:64:68:be:d7:8c:a0:89:fe: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:8B:84:1A:EF:4A:8C:C3:AC:56:31:0E:0D:29:EE:06:BC:39:EA X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:4d:11:a1:7e:31:22:62:ca:b6:a3:0c:a6:bb:a0:a6:ea:b6: 45:10:90:84:35:95:3e:6a:af:46:08:98:2a:a0:f7:3e:24:db: 9f:41:ce:ae:59:72:23:56:d4:1f:59:9e:59:12:46:d1:20:7c: b3:0e:21:71:6e:d6:36:72:3b:75:52:38:20:ac:de:02:fe:48: 69:5f:9d:9d:80:e5:e1:b8:6f:c5:26:fc:0e:e6:ff:bf:5e:e9: 3e:06:b4:a9:21:25:33:e0:5c:de:69:57:9e:e4:ac:11:f7:a5: 46:8f:08:36:74:03:d9:ca:af:84:40:bf:38:ca:9c:47:a0:b0: 90:68:99:43:4f:b3:c8:34:18:d5:73:16:9f:de:e7:11:a4:ff: de:72:98:4e:2a:ec:9a:8e:f1:92:e7:8a:fc:e4:d9:31:49:68: 81:77:7a:c0:bf:d0:39:83:29:14:cd:9c:f4:50:1d:84:9c:c7: b0:9e:af:b1:b9:3d:2f:cf:e5:99:96:70:36:4e:eb:7b:2c:3a: b2:57:de:81:6f:d4:0f:ad:e1:13:13:fd:97:ce:d1:f5:65:de: 95:e3:97:37:32:5c:45:81:cf:b3:ff:eb:7b:5f:11:ef:48:41: 6d:3c:44:65:13:49:b4:a4:bf:84:81:44:cc:ca:d0:a1:0a:2c: 1b:6d:25:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUwODIyMjAwNTE4WhcNMjUwODI5MjAwNTE4WjAYMRYwFAYD VQQDEw02OGE4Y2Q3ZS02MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MCPuu77VmakQ5zFhlYJJlz4Qec1OEIxPTYbLOHP5h0KUXNtwQD/miZDaSdt k/XxH/zDE8ijGS1SLHl9Zo5B/joH1bz2OeYd0Ozq0M49UeMuFHX+o3ZarvM7XQwf 7Mbd9h0lt76GwvW6mLyespZbMketa7HOLVfbw7dLj0Z5UiF4d0NpHoHCoD27xlLm +t7Qiyhsi6gBI+Z/IwDjeBH9VcmNvbWGWoeZYODOHq+sizn0eBOuEJFuyxnb07u6 gcCpuRpHlxFgI9sWl7AZwfeJgSFbWw6gDfmQAAlaXox+WlEFglsmlis5Zz4RHOGC HAuIkD4lNNj+ZGi+14ygif7tlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfNi4Qa 70qMw6xWMQ4NKe4GvDnqMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMTRGhfjEiYsq2owymu6Cm6rZFEJCENZU+aq9GCJgqoPc+JNufQc6u WXIjVtQfWZ5ZEkbRIHyzDiFxbtY2cjt1UjggrN4C/khpX52dgOXhuG/FJvwO5v+/ Xuk+BrSpISUz4FzeaVee5KwR96VGjwg2dAPZyq+EQL84ypxHoLCQaJlDT7PINBjV cxaf3ucRpP/ecphOKuyajvGS54r85NkxSWiBd3rAv9A5gykUzZz0UB2EnMewnq+x uT0vz+WZlnA2Tut7LDqyV96Bb9QPreETE/2XztH1Zd6V45c3MlxFgc+z/+t7XxHv SEFtPERlE0m0pL+EgUTMytChCiwbbSXB -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:33 2025 by rpki-client