$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: +JW2dOJP6RTT7XyicHXBLIJLlh9QTtKT+xnq6fKv8b4= Subject key identifier: 58:50:26:98:AF:F6:3B:7C:F9:E6:CB:CD:9C:C5:41:ED:13:16:1C:7E Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 4E Signing time: Sat 23 Aug 2025 07:34:12 +0000 Manifest this update: Sat 23 Aug 2025 07:34:12 +0000 Manifest next update: Sat 30 Aug 2025 07:34:11 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: ebcxWzOSia77ZiKSsQvafkbBSdT2LYc8LE8RtL0+47c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Aug 23 07:34:12 2025 GMT Not After : Aug 30 07:34:11 2025 GMT Subject: CN=68a96ef4-4aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:da:a5:6f:d2:5f:d3:67:5b:4b:c7:7e:9e: cf:0f:a6:b9:18:c8:51:9e:05:71:42:c5:68:6b:15: 86:21:b4:bd:6c:2d:f7:35:53:83:7d:16:f0:39:06: 60:8d:46:c3:07:64:3a:0f:7e:de:a4:c5:01:b4:a1: 75:05:54:5f:64:e9:ce:74:05:cf:d1:c6:80:c1:e8: f5:92:9c:fd:ed:b5:07:33:2e:c8:f0:ee:2b:b2:c9: 3c:e6:b8:d0:29:49:84:a5:68:91:7e:92:9c:39:44: 61:02:dc:f2:ad:ae:d5:25:9d:cd:38:79:d7:72:e7: b4:af:08:3c:b3:49:a7:9f:b7:fa:f4:16:43:c1:97: ec:cf:14:92:19:ff:d1:86:75:fa:7f:d7:c9:6f:90: ff:41:16:80:1e:85:41:3f:d8:02:24:c6:7e:6e:9f: ad:c3:cc:3f:a5:f2:fa:84:88:75:e9:5c:e9:db:18: 01:8e:d6:90:85:21:70:8c:c3:95:89:06:a9:53:de: 11:90:be:b1:58:30:1a:eb:fd:42:a9:48:25:bd:48: e1:93:f6:af:69:b5:6f:69:26:96:e8:f7:ac:4b:df: 91:bb:f8:ba:12:75:e0:4a:21:a1:b5:15:bb:5c:ac: bd:65:89:dd:f3:82:a2:79:b8:25:fd:e7:71:23:28: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:26:98:AF:F6:3B:7C:F9:E6:CB:CD:9C:C5:41:ED:13:16:1C:7E X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:5f:fa:1b:c4:65:f6:6d:63:25:af:cd:a5:e4:70:20:bc: 51:79:42:68:e8:36:03:fa:a4:88:11:5a:6e:a5:a7:a6:84:34: 72:ab:c2:7f:f8:97:42:8a:b7:32:0f:84:01:3c:da:df:0a:9d: 76:94:27:84:82:e9:44:c2:47:0f:fe:e7:61:be:cf:b4:b8:bf: 16:2d:87:5b:7b:ad:08:c6:19:66:98:73:29:39:00:0c:65:fe: 9c:28:88:42:28:4e:28:86:9a:79:af:fd:06:ef:69:3b:c9:39: 2c:67:cb:f4:a6:e4:b3:bb:73:e3:fd:7d:0a:69:9c:73:db:12: 92:ef:0d:de:0d:a5:4e:f8:cf:b3:6e:b2:6c:d5:cb:9e:52:14: 62:a4:1b:f5:dd:72:ab:1e:04:89:62:14:64:61:66:3c:67:84: 1f:d8:a0:08:c4:f8:2c:32:a2:bd:ae:9e:2c:2e:37:43:e0:5c: 16:c2:aa:7b:22:2a:1b:64:78:0a:bd:8e:b5:d2:f8:bd:8b:6a: 25:fe:7b:02:dc:95:27:4f:35:ad:bc:1f:9b:f5:a2:26:88:7e: 21:64:90:fa:d8:8b:b9:4a:7e:8a:af:60:bc:de:6c:44:d3:8b: 2a:9f:95:ce:09:c9:4e:55:82:37:d8:19:3c:8c:c5:b8:1e:53: 33:ac:e5:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA4MjMwNzM0MTJaFw0yNTA4MzAwNzM0MTFaMBgxFjAUBgNV BAMTDTY4YTk2ZWY0LTRhYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWwtqlb9Jf02dbS8d+ns8PprkYyFGeBXFCxWhrFYYhtL1sLfc1U4N9FvA5BmCN RsMHZDoPft6kxQG0oXUFVF9k6c50Bc/RxoDB6PWSnP3ttQczLsjw7iuyyTzmuNAp SYSlaJF+kpw5RGEC3PKtrtUlnc04eddy57SvCDyzSaeft/r0FkPBl+zPFJIZ/9GG dfp/18lvkP9BFoAehUE/2AIkxn5un63DzD+l8vqEiHXpXOnbGAGO1pCFIXCMw5WJ BqlT3hGQvrFYMBrr/UKpSCW9SOGT9q9ptW9pJpbo96xL35G7+LoSdeBKIaG1Fbtc rL1lid3zgqJ5uCX953EjKAnTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWFAmmK/2 O3z55svNnMVB7RMWHH4wHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHsX/obxGX2bWMlr82l5HAgvFF5QmjoNgP6pIgRWm6lp6aENHKrwn/4 l0KKtzIPhAE82t8KnXaUJ4SC6UTCRw/+52G+z7S4vxYth1t7rQjGGWaYcyk5AAxl /pwoiEIoTiiGmnmv/QbvaTvJOSxny/Sm5LO7c+P9fQppnHPbEpLvDd4NpU74z7Nu smzVy55SFGKkG/XdcqseBIliFGRhZjxnhB/YoAjE+Cwyor2uniwuN0PgXBbCqnsi KhtkeAq9jrXS+L2LaiX+ewLclSdPNa28H5v1oiaIfiFkkPrYi7lKfoqvYLzebETT iyqflc4JyU5VgjfYGTyMxbgeUzOs5cs= -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:33 2025 by rpki-client