$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: gYSgBi9brswpJ/DsX9HyLo+qn2RIP4aQkem8b3pnI/w= Subject key identifier: 07:A8:95:DE:0E:2E:F5:5C:A3:B6:E3:7E:5E:6B:D4:82:36:52:DE:1F Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 0596 Signing time: Fri 22 Aug 2025 23:25:31 +0000 Manifest this update: Fri 22 Aug 2025 23:25:30 +0000 Manifest next update: Fri 29 Aug 2025 23:25:30 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: r9eSZY4+7jZU5zacy0MR2uDpbDl8giThdcJ0OzT3wv0=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Aug 22 23:25:30 2025 GMT Not After : Aug 29 23:25:30 2025 GMT Subject: CN=68a8fc6a-49ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bf:bf:67:cc:01:ad:12:92:53:e9:54:ec:78: 4d:e5:8a:8b:c6:d4:e2:6f:d9:c3:33:5c:c8:c1:86: 5c:f5:34:6a:1f:12:a4:6d:9a:88:54:36:ea:b0:bb: a9:29:0f:7c:54:07:56:4a:f1:97:7a:26:20:a9:b7: e6:f6:7a:49:81:12:2c:4e:3c:4e:0f:cd:9e:e7:f9: ea:54:72:f9:f9:fb:72:5d:63:30:2e:e0:bf:96:98: fb:b8:bc:92:24:bd:cb:59:e2:c3:a2:ea:25:61:4b: 51:b2:66:86:a0:cb:ce:96:c7:8a:cc:c3:aa:2c:ed: 57:aa:d2:41:2e:a3:1e:21:84:b7:bd:fe:c9:7d:66: a4:8d:06:20:5f:3d:59:b5:16:a6:d0:25:73:34:cc: 54:2a:90:40:50:6e:67:55:b9:73:45:bc:de:aa:34: 2f:a5:eb:71:89:d6:34:37:b1:c4:91:72:05:80:2c: 1f:a5:52:69:59:cb:1a:f3:19:0e:90:09:75:cb:bc: d1:61:c6:39:ec:14:36:c2:7a:64:39:11:ec:f7:1e: 35:c9:08:fd:a7:f9:64:7a:fa:85:b9:94:22:8e:7b: 0b:0a:9b:1c:a2:ad:a9:82:e4:91:64:8a:9a:d8:c6: 29:69:ee:9e:f3:23:ab:de:5a:16:9e:cd:3c:b3:9b: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A8:95:DE:0E:2E:F5:5C:A3:B6:E3:7E:5E:6B:D4:82:36:52:DE:1F X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ec:81:ec:8b:1a:f9:25:d6:c9:88:00:14:97:05:b6:84:c5: 0c:43:7d:a5:9d:b5:53:c1:3e:8b:58:e6:57:09:0a:f6:10:1d: 83:f8:c9:9c:ca:16:94:21:37:4f:b0:43:81:ae:0e:3f:b3:21: 72:9f:a0:29:ce:35:bf:10:12:94:7d:a4:c5:6a:39:49:ce:67: 1b:40:e8:f5:7f:15:12:d4:55:55:d1:72:8f:54:ad:fd:1c:ee: 23:22:7e:a5:70:02:27:8e:89:77:63:2d:bb:72:0b:33:cf:c9: da:97:08:38:79:a7:fc:d4:b1:a7:90:a1:9b:32:f2:04:cb:4d: cd:90:21:d7:06:13:a0:81:3f:1a:32:b5:76:0a:34:b2:67:fc: 0b:0a:90:de:5f:0b:5e:0d:d4:72:b9:70:b6:d8:79:1b:c6:d2: 34:f5:45:c0:04:c8:ae:3d:ea:ed:42:9e:40:13:87:a6:6d:91: fc:88:07:f6:5c:da:5f:c8:96:c1:e3:a3:fa:55:2b:85:a8:88: f2:eb:6d:3f:c1:ca:2b:ae:29:26:4c:82:8e:b6:bf:ef:0c:9b: 03:c8:f8:92:bb:eb:de:85:93:4d:fd:5c:62:ec:00:9c:e0:bb: f6:dd:38:c6:e5:de:e7:53:52:0a:52:c0:62:78:dc:cd:d1:87: d4:fb:fb:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwODIyMjMyNTMwWhcNMjUwODI5MjMyNTMwWjAYMRYwFAYD VQQDEw02OGE4ZmM2YS00OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77+/Z8wBrRKSU+lU7HhN5YqLxtTib9nDM1zIwYZc9TRqHxKkbZqIVDbqsLup KQ98VAdWSvGXeiYgqbfm9npJgRIsTjxOD82e5/nqVHL5+ftyXWMwLuC/lpj7uLyS JL3LWeLDouolYUtRsmaGoMvOlseKzMOqLO1XqtJBLqMeIYS3vf7JfWakjQYgXz1Z tRam0CVzNMxUKpBAUG5nVblzRbzeqjQvpetxidY0N7HEkXIFgCwfpVJpWcsa8xkO kAl1y7zRYcY57BQ2wnpkORHs9x41yQj9p/lkevqFuZQijnsLCpscoq2pguSRZIqa 2MYpae6e8yOr3loWns08s5sSCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeold4O LvVco7bjfl5r1II2Ut4fMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF7IHsixr5JdbJiAAUlwW2hMUMQ32lnbVTwT6LWOZXCQr2EB2D+Mmc yhaUITdPsEOBrg4/syFyn6ApzjW/EBKUfaTFajlJzmcbQOj1fxUS1FVV0XKPVK39 HO4jIn6lcAInjol3Yy27cgszz8nalwg4eaf81LGnkKGbMvIEy03NkCHXBhOggT8a MrV2CjSyZ/wLCpDeXwteDdRyuXC22HkbxtI09UXABMiuPertQp5AE4embZH8iAf2 XNpfyJbB46P6VSuFqIjy620/wcorrikmTIKOtr/vDJsDyPiSu+vehZNN/Vxi7ACc 4Lv23TjG5d7nU1IKUsBieNzN0YfU+/sH -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:32 2025 by rpki-client