$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: o1Ho32iMiiifFsXtGpjEqb+JgbBYi91aBn33yhSo/yY= Subject key identifier: AD:13:08:18:99:F3:10:C6:A8:13:DF:03:CF:10:3B:6E:49:CB:7F:CF Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34D1 Signing time: Fri 22 Aug 2025 14:29:46 +0000 Manifest this update: Fri 22 Aug 2025 14:29:45 +0000 Manifest next update: Fri 29 Aug 2025 14:29:45 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: v1zzedGqmvkPY6ENblf/WbZKQUs2HFxNcHaEMCBL7uE=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13558 (0x34f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Aug 22 14:29:45 2025 GMT Not After : Aug 29 14:29:45 2025 GMT Subject: CN=68a87eda-769c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:f5:ba:ca:7f:81:46:98:fc:23:c1:46:df: bf:e9:4b:11:92:09:a6:a0:22:d5:ae:cd:48:02:24: 6b:6b:90:1a:af:f7:f3:6a:5c:a1:74:13:84:65:62: b7:f7:14:08:eb:a8:c6:fd:17:ad:b7:f1:ee:a0:a2: 93:d3:36:f0:44:db:ef:38:f6:8e:7b:25:42:5f:ce: a1:95:ad:d2:f4:cf:7f:a8:34:98:50:1b:67:bb:98: 41:c1:04:ff:a5:cc:bc:f5:56:96:ed:7f:ff:56:82: a0:88:8c:01:dd:84:9d:c5:0d:37:01:47:1a:da:d0: 6e:23:82:5c:92:6d:b2:f8:fc:79:be:1f:a9:41:10: 7f:83:88:38:15:11:dc:3f:cc:2f:1c:02:dd:18:80: b6:41:f1:a9:60:0b:5c:73:4b:24:3d:3a:3a:a0:e6: cc:f1:89:4f:b2:b8:8a:5b:ea:a1:9a:9e:8c:96:33: 25:77:8d:5f:37:d9:ee:28:b7:84:44:39:ce:1e:99: b4:b7:77:14:ea:6b:c9:fd:7e:b4:6f:a1:1e:92:af: 9c:44:af:41:d7:fd:28:68:01:5c:8c:6b:bf:64:ee: de:19:08:c4:e5:1b:df:df:64:98:92:7a:4c:ac:16: e3:d6:8d:0c:b3:0d:7d:68:c3:31:4f:2f:bb:c6:96: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:08:18:99:F3:10:C6:A8:13:DF:03:CF:10:3B:6E:49:CB:7F:CF X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:50:e4:94:01:ad:30:75:f3:b8:ef:a1:53:1f:50:05:ca:6f: 56:39:b8:42:38:55:8e:6d:c5:2f:c8:71:5b:ae:c6:ab:46:4b: 3a:40:77:65:dc:80:fa:8c:d3:7e:2e:1d:e0:69:6f:7b:0c:24: 35:40:3c:ac:11:48:e6:c7:1f:8c:14:62:43:71:21:ab:ed:6c: d7:a0:d0:13:c8:36:7f:ce:63:3c:85:5f:cd:31:eb:50:fa:d5: 5e:06:6e:4f:a2:ba:7c:4c:fb:5c:b2:42:f7:60:50:be:13:4b: 6b:ad:e0:27:cb:15:7a:33:f5:ca:d6:12:06:76:0e:0a:fb:49: 46:af:36:fd:65:88:cf:78:d9:ce:70:0a:63:7e:ee:c2:e3:f5: a9:08:1c:f9:cb:94:df:8e:60:45:f4:a3:a6:34:df:c4:0a:c6: 32:c3:43:8d:9c:ab:fd:c3:ab:e9:71:05:fb:db:9c:d7:79:ac: 0d:4a:4f:f5:8a:ef:d2:c2:03:a7:24:99:72:f9:60:2a:e3:be: 70:2c:af:11:34:42:04:57:d4:41:1b:77:5d:b2:9e:f9:1e:fa: 35:e3:4e:10:8a:ee:a1:f9:68:a5:a6:67:61:91:26:ee:db:aa: b9:07:fb:4c:3e:e7:77:9e:5c:12:bf:d4:c8:e0:35:89:dc:97: 42:b4:df:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwODIyMTQyOTQ1WhcNMjUwODI5MTQyOTQ1WjAYMRYwFAYD VQQDEw02OGE4N2VkYS03NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+b1usp/gUaY/CPBRt+/6UsRkgmmoCLVrs1IAiRra5Aar/fzalyhdBOEZWK3 9xQI66jG/Rett/HuoKKT0zbwRNvvOPaOeyVCX86hla3S9M9/qDSYUBtnu5hBwQT/ pcy89VaW7X//VoKgiIwB3YSdxQ03AUca2tBuI4Jckm2y+Px5vh+pQRB/g4g4FRHc P8wvHALdGIC2QfGpYAtcc0skPTo6oObM8YlPsriKW+qhmp6MljMld41fN9nuKLeE RDnOHpm0t3cU6mvJ/X60b6Eekq+cRK9B1/0oaAFcjGu/ZO7eGQjE5Rvf32SYknpM rBbj1o0Msw19aMMxTy+7xpZheQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0TCBiZ 8xDGqBPfA88QO25Jy3/PMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJUOSUAa0wdfO476FTH1AFym9WObhCOFWObcUvyHFbrsarRks6QHdl 3ID6jNN+Lh3gaW97DCQ1QDysEUjmxx+MFGJDcSGr7WzXoNATyDZ/zmM8hV/NMetQ +tVeBm5Porp8TPtcskL3YFC+E0trreAnyxV6M/XK1hIGdg4K+0lGrzb9ZYjPeNnO cApjfu7C4/WpCBz5y5TfjmBF9KOmNN/ECsYyw0ONnKv9w6vpcQX725zXeawNSk/1 iu/SwgOnJJly+WAq475wLK8RNEIEV9RBG3ddsp75Hvo1404Qiu6h+WilpmdhkSbu 26q5B/tMPud3nlwSv9TI4DWJ3JdCtN/O -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:00 2025 by rpki-client