$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json) Hash identifier: kDmVPdAwtZml5Ypw/IssnWD3ll9RAZKUD78JcHXyPRo= Subject key identifier: 76:81:5F:0A:BC:64:A1:35:B5:A8:DD:04:39:29:1D:C6:4A:57:C1:F3 Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft Manifest number: 0462 Signing time: Sat 23 Aug 2025 00:25:09 +0000 Manifest this update: Sat 23 Aug 2025 00:25:09 +0000 Manifest next update: Sat 30 Aug 2025 00:25:09 +0000 Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: PrMsjLQ08WVckTxlpC2n6plDSE9aV8pMp+qKsopyL7s=) 2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: RiGNiFnNAoJRKUyYrUN1wLZV9I9idQnh7FmtgNq/Suc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Validity Not Before: Aug 23 00:25:09 2025 GMT Not After : Aug 30 00:25:09 2025 GMT Subject: CN=68a90a65-6a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:fc:6d:e8:8c:29:47:28:60:eb:50:0c:85: 97:42:c3:6d:45:30:61:72:15:e8:f2:ab:8f:c1:a2: 24:f4:50:67:a6:3e:f1:59:d9:54:28:af:46:2c:76: 69:d9:42:6a:ea:74:f4:3f:ce:aa:8c:31:d5:60:22: 96:f1:96:3f:b2:4c:d1:f1:15:67:6a:34:16:61:0f: f1:88:37:18:a4:86:c8:1d:b2:da:fb:7a:ed:92:ad: 05:96:63:65:3f:85:ff:c8:bb:5a:d1:c1:f9:2e:72: c3:8f:bc:62:f5:51:0a:17:ee:e4:05:6d:9a:c8:cf: 62:e1:98:08:19:d7:32:d9:03:b0:ab:c3:3e:6d:0a: 2c:d2:f0:b9:11:96:b7:3a:19:b7:7b:86:bb:e6:27: bb:8f:ba:c1:f2:dc:f4:62:84:27:29:61:d2:28:6b: f1:3e:c4:27:76:51:84:62:1e:59:85:81:b2:d8:2e: 53:01:93:98:7c:44:4e:25:62:33:d5:6b:07:12:e1: b6:47:eb:f6:b5:85:fd:2a:1f:bd:2b:87:47:97:be: 68:f3:fd:c5:6e:9e:a5:3c:40:06:8f:95:64:7d:ee: 8e:9d:65:ac:c2:21:b3:5e:37:39:4c:33:81:44:13: a5:26:db:88:a9:b7:a5:98:bf:90:19:c5:73:07:b9: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:81:5F:0A:BC:64:A1:35:B5:A8:DD:04:39:29:1D:C6:4A:57:C1:F3 X509v3 Authority Key Identifier: keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7c:e6:a3:1e:4e:6c:10:84:99:5e:7f:60:14:74:d8:53:60: 9c:06:fd:55:f0:72:5b:af:09:a9:62:41:c6:3c:3c:9c:91:40: 93:24:7f:bc:82:44:13:f4:3c:ce:21:47:9e:01:40:8e:12:37: d8:5b:84:e9:23:1e:27:24:ac:4c:ce:e1:95:2d:c6:ec:64:f6: db:2f:58:fa:7a:9b:60:5c:f6:ce:f0:df:7f:1e:ab:9f:25:52: e3:46:7d:cf:94:ec:73:ac:63:9c:7f:96:18:c8:16:54:c9:1e: 7c:26:a5:74:af:7a:6f:1c:e0:c8:60:95:11:22:c5:81:9b:32: bc:80:d0:51:d8:ec:08:18:21:93:0a:95:4f:11:9a:bf:be:df: 2e:68:01:0d:b1:78:77:dd:73:7c:40:82:cf:8b:7c:24:f8:75: e5:d5:58:ec:9e:c8:5e:43:6d:a4:c5:d4:ee:68:a8:6a:83:06: 60:56:f1:f4:83:9c:5b:3e:09:43:1c:d6:74:c3:6b:19:fc:54: 80:48:9c:94:3c:ee:9b:1f:0a:34:50:74:ed:4f:52:50:61:85: 05:53:5e:34:96:8c:20:54:64:8c:4f:30:df:43:95:89:62:0b: 99:97:37:1f:92:b4:96:60:71:7a:35:6d:f4:03:f6:d6:b1:d5: cb:45:98:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1 QUY3MTQzQ0QwHhcNMjUwODIzMDAyNTA5WhcNMjUwODMwMDAyNTA5WjAYMRYwFAYD VQQDEw02OGE5MGE2NS02YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP78beiMKUcoYOtQDIWXQsNtRTBhchXo8quPwaIk9FBnpj7xWdlUKK9GLHZp 2UJq6nT0P86qjDHVYCKW8ZY/skzR8RVnajQWYQ/xiDcYpIbIHbLa+3rtkq0FlmNl P4X/yLta0cH5LnLDj7xi9VEKF+7kBW2ayM9i4ZgIGdcy2QOwq8M+bQos0vC5EZa3 Ohm3e4a75ie7j7rB8tz0YoQnKWHSKGvxPsQndlGEYh5ZhYGy2C5TAZOYfEROJWIz 1WsHEuG2R+v2tYX9Kh+9K4dHl75o8/3Fbp6lPEAGj5Vkfe6OnWWswiGzXjc5TDOB RBOlJtuIqbelmL+QGcVzB7njCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaBXwq8 ZKE1tajdBDkpHcZKV8HzMB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGMi9CNTA1NDY1MjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhH UDFSOVRXUlh4TTFhOXhRODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxfOajHk5sEISZXn9gFHTYU2CcBv1V8HJbrwmpYkHGPDyckUCTJH+8 gkQT9DzOIUeeAUCOEjfYW4TpIx4nJKxMzuGVLcbsZPbbL1j6eptgXPbO8N9/Hquf JVLjRn3PlOxzrGOcf5YYyBZUyR58JqV0r3pvHODIYJURIsWBmzK8gNBR2OwIGCGT CpVPEZq/vt8uaAENsXh33XN8QILPi3wk+HXl1VjsnsheQ22kxdTuaKhqgwZgVvH0 g5xbPglDHNZ0w2sZ/FSASJyUPO6bHwo0UHTtT1JQYYUFU140lowgVGSMTzDfQ5WJ YguZlzcfkrSWYHF6NW30A/bWsdXLRZhb -----END CERTIFICATE-----Generated at Sat Aug 23 21:28:16 2025 by rpki-client