$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: n4miQ/+vDf/Kz+x6yv7JjEuq2amkRSwUiv0IlM42PJA= Subject key identifier: 66:91:F3:84:D9:6B:60:FB:84:62:E9:E9:ED:7D:D2:74:FF:AD:31:01 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 2017 Signing time: Fri 22 Aug 2025 16:45:26 +0000 Manifest this update: Fri 22 Aug 2025 16:45:26 +0000 Manifest next update: Fri 29 Aug 2025 16:45:26 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: idxHOjiv5Kf6OrIAuYXac3yerOMZH8jGANnzWNA4zAc=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Aug 22 16:45:26 2025 GMT Not After : Aug 29 16:45:26 2025 GMT Subject: CN=68a89ea6-3dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:de:02:b0:aa:41:63:fb:65:4c:65:57:fb:fe: 71:b4:c4:32:d0:24:4f:57:69:8a:ad:eb:90:1d:e7: c9:a7:4a:b1:2d:d0:ea:1a:78:c0:25:53:34:ee:62: e8:f4:dc:fc:d9:b9:6b:9b:ad:57:ae:da:dd:84:cf: f3:42:6d:e9:22:8a:f3:3d:58:fc:c6:be:e5:75:04: 94:d2:3d:ca:4e:54:1b:b5:c3:5d:7d:90:d1:20:df: 2d:80:fa:9f:9c:cc:44:55:9c:31:94:6e:a8:4e:26: ca:8a:3d:1c:40:95:a2:b0:77:86:54:73:0f:ef:b0: 53:ac:5c:89:30:f4:0d:c0:02:19:45:85:b5:af:6e: b3:6e:8e:af:6a:e7:81:a9:70:2e:a2:3e:bf:16:98: b4:5f:fd:cf:24:0d:fe:a0:45:1e:a6:4b:69:a4:e4: a1:c6:e1:ec:e7:07:e9:3e:08:a4:ca:9f:1d:ba:d6: 59:cb:df:75:ef:7d:f9:b3:38:b4:b2:e7:26:eb:27: 09:b4:e6:c1:bb:14:63:17:13:3e:6e:80:2b:db:90: 28:c8:a3:4a:7e:a5:e6:f3:ea:aa:29:2b:eb:18:e4: a5:5b:ea:86:a4:5c:65:e9:25:fe:c7:ca:53:68:ad: 6c:07:87:f0:69:37:b8:47:6b:c1:49:f0:f4:be:77: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:F3:84:D9:6B:60:FB:84:62:E9:E9:ED:7D:D2:74:FF:AD:31:01 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a3:32:37:16:7e:27:63:d8:9f:17:00:98:64:21:14:66:46: fa:16:c0:52:de:dc:a4:e0:6f:ec:b8:58:32:d6:45:31:78:c9: 9d:d7:45:7b:a8:15:1e:53:2e:fd:71:a5:ba:90:68:15:7d:3a: f8:c9:bc:f9:6a:49:8b:f9:ec:44:9d:fb:a1:51:65:99:1c:34: a0:30:b2:d5:88:c8:9b:46:a8:e5:29:2e:44:52:92:b4:b0:e0: ec:86:df:0d:4f:51:96:aa:93:09:33:d3:b7:8f:12:60:e0:4f: 0c:c5:61:30:58:75:23:5d:df:bc:a1:5d:fc:44:c1:6d:fa:9a: 4c:46:61:a8:48:39:8e:d4:d1:ca:3f:43:f9:a8:25:04:a0:c8: c2:bc:2e:04:76:3e:01:33:55:52:1e:95:cb:7f:86:fb:fc:51: ee:e3:d7:52:31:33:1f:b9:37:3a:bf:42:42:99:ee:43:86:60: 0c:d5:ef:53:06:bc:ca:61:98:1e:ef:4e:8c:d9:92:3e:78:0a: e1:96:c8:a6:4c:6c:6e:d5:57:6f:c6:38:19:57:7f:6f:61:a6: 61:c0:44:7a:bd:6c:32:bc:6c:0f:e5:46:17:e5:78:42:89:8c: d8:1f:4c:45:bc:7d:eb:bb:37:e4:8b:52:fe:96:97:72:02:ca: 35:06:e6:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwODIyMTY0NTI2WhcNMjUwODI5MTY0NTI2WjAYMRYwFAYD VQQDEw02OGE4OWVhNi0zZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA594CsKpBY/tlTGVX+/5xtMQy0CRPV2mKreuQHefJp0qxLdDqGnjAJVM07mLo 9Nz82blrm61XrtrdhM/zQm3pIorzPVj8xr7ldQSU0j3KTlQbtcNdfZDRIN8tgPqf nMxEVZwxlG6oTibKij0cQJWisHeGVHMP77BTrFyJMPQNwAIZRYW1r26zbo6vaueB qXAuoj6/Fpi0X/3PJA3+oEUepktppOShxuHs5wfpPgikyp8dutZZy9917335szi0 sucm6ycJtObBuxRjFxM+boAr25AoyKNKfqXm8+qqKSvrGOSlW+qGpFxl6SX+x8pT aK1sB4fwaTe4R2vBSfD0vnedWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaR84TZ a2D7hGLp6e190nT/rTEBMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7ozI3Fn4nY9ifFwCYZCEUZkb6FsBS3tyk4G/suFgy1kUxeMmd10V7 qBUeUy79caW6kGgVfTr4ybz5akmL+exEnfuhUWWZHDSgMLLViMibRqjlKS5EUpK0 sODsht8NT1GWqpMJM9O3jxJg4E8MxWEwWHUjXd+8oV38RMFt+ppMRmGoSDmO1NHK P0P5qCUEoMjCvC4Edj4BM1VSHpXLf4b7/FHu49dSMTMfuTc6v0JCme5DhmAM1e9T BrzKYZge706M2ZI+eArhlsimTGxu1VdvxjgZV39vYaZhwER6vWwyvGwP5UYX5XhC iYzYH0xFvH3ruzfki1L+lpdyAso1BuZ+ -----END CERTIFICATE-----Generated at Sat Aug 23 18:21:53 2025 by rpki-client