$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: 3gbRVwt3yz80xoLEKGQUIPRVOLQ0meA36WrawyvR3LI= Subject key identifier: 51:71:EF:9A:12:07:B9:70:0D:95:3A:63:22:31:5C:23:09:33:B2:BA Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01F5 Signing time: Fri 22 Aug 2025 16:27:16 +0000 Manifest this update: Fri 22 Aug 2025 16:27:16 +0000 Manifest next update: Fri 29 Aug 2025 16:27:16 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: q7yvgjbl4dTwA0vqK4NzzXi02/0QuG/H/3OwOBZHwfg=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Aug 22 16:27:16 2025 GMT Not After : Aug 29 16:27:16 2025 GMT Subject: CN=68a89a64-5432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:2d:aa:ca:c2:36:b4:35:af:90:8c:d7:07: 17:72:f5:8a:33:71:be:ea:7f:df:22:31:fa:41:77: 7a:c0:a4:bf:81:86:54:f6:10:7c:ed:c0:9d:08:d0: 73:28:60:d3:95:c7:11:38:09:e1:3e:4a:dd:23:00: 1e:4c:53:b2:b0:bc:4c:4a:06:22:89:e1:01:ba:89: 4f:09:3a:51:a7:ae:94:5a:2b:e1:ec:8f:7a:8c:1a: c5:e3:92:03:64:53:9f:71:24:7c:d0:2c:79:26:70: 70:bc:95:d1:95:aa:89:70:26:cb:b0:4c:3e:a8:92: 97:ee:8a:f5:71:9e:17:36:50:0b:5d:b3:4f:62:cd: de:70:21:1f:d4:da:52:b7:58:12:cc:cc:78:ec:29: ea:e5:2a:75:93:c2:9e:e2:57:58:0a:eb:5e:81:2c: 9d:28:6f:5a:a4:88:38:e5:dc:e0:b2:ea:8f:44:a7: 4e:1d:cb:66:8f:09:0b:80:72:18:1d:5c:27:a2:3b: 9b:82:5a:b3:3d:ab:7d:43:63:e4:10:2d:24:fa:54: 32:19:bf:ff:21:ec:fd:13:21:65:31:7b:83:96:31: bd:72:40:54:05:f2:bd:b4:6f:70:71:a0:33:21:ad: fa:5b:33:7d:37:68:7b:94:54:19:f1:dc:69:6b:4c: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:71:EF:9A:12:07:B9:70:0D:95:3A:63:22:31:5C:23:09:33:B2:BA X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ac:29:06:a1:0a:b1:f6:c4:b3:2e:df:6b:56:18:c3:b8:22: af:68:a0:73:45:1e:53:86:70:a8:14:81:04:52:14:b2:b8:76: 2f:fa:0f:92:f0:34:b1:60:ba:f3:e5:1d:01:08:58:62:2d:ba: bc:dc:6a:38:ab:e0:30:03:1c:65:be:34:fa:de:2d:b7:2b:c5: b5:2c:8f:9a:a7:19:f4:06:04:3b:db:85:ed:86:81:d9:1e:54: 5a:fb:ca:e9:77:16:c4:34:43:f9:3e:85:85:fb:35:93:b4:ae: db:3a:6d:19:e2:46:2b:ae:84:97:3b:c5:6b:96:6b:cc:0f:d8: de:da:0a:10:a7:eb:ae:b3:7d:50:dc:cd:f9:70:2a:5f:19:8e: 89:2e:0e:64:8b:18:12:33:b1:64:cc:b2:a0:ce:3f:d4:bd:d4: 06:13:ea:b9:5f:d3:66:0c:11:c7:2e:44:46:da:50:09:e1:46: 9f:80:49:3e:e2:83:7b:b2:9c:6a:bb:5d:06:16:b1:3b:51:0f: da:d7:3d:23:fc:72:53:78:99:8d:88:e6:1b:51:9e:67:af:dc: 3d:9f:e4:56:be:8b:bf:72:6d:4c:92:b0:5a:b6:d6:fa:6d:18: b7:d2:47:01:b6:55:63:e0:14:c5:5a:31:fb:ae:92:6a:15:b8: 85:fb:21:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwODIyMTYyNzE2WhcNMjUwODI5MTYyNzE2WjAYMRYwFAYD VQQDEw02OGE4OWE2NC01NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0awtqsrCNrQ1r5CM1wcXcvWKM3G+6n/fIjH6QXd6wKS/gYZU9hB87cCdCNBz KGDTlccROAnhPkrdIwAeTFOysLxMSgYiieEBuolPCTpRp66UWivh7I96jBrF45ID ZFOfcSR80Cx5JnBwvJXRlaqJcCbLsEw+qJKX7or1cZ4XNlALXbNPYs3ecCEf1NpS t1gSzMx47Cnq5Sp1k8Ke4ldYCutegSydKG9apIg45dzgsuqPRKdOHctmjwkLgHIY HVwnojubglqzPat9Q2PkEC0k+lQyGb//Iez9EyFlMXuDljG9ckBUBfK9tG9wcaAz Ia36WzN9N2h7lFQZ8dxpa0wWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFx75oS B7lwDZU6YyIxXCMJM7K6MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYrCkGoQqx9sSzLt9rVhjDuCKvaKBzRR5ThnCoFIEEUhSyuHYv+g+S 8DSxYLrz5R0BCFhiLbq83Go4q+AwAxxlvjT63i23K8W1LI+apxn0BgQ724XthoHZ HlRa+8rpdxbENEP5PoWF+zWTtK7bOm0Z4kYrroSXO8VrlmvMD9je2goQp+uus31Q 3M35cCpfGY6JLg5kixgSM7FkzLKgzj/UvdQGE+q5X9NmDBHHLkRG2lAJ4UafgEk+ 4oN7spxqu10GFrE7UQ/a1z0j/HJTeJmNiOYbUZ5nr9w9n+RWvou/cm1MkrBattb6 bRi30kcBtlVj4BTFWjH7rpJqFbiF+yEn -----END CERTIFICATE-----Generated at Sat Aug 23 12:42:01 2025 by rpki-client