$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: JXZDLb3XXwu80F7bAIgjb/d/nQiD0TecpSAbjRSeo14= Subject key identifier: 75:C9:7C:B5:21:18:AF:76:B8:F8:DA:FB:25:08:D0:92:3E:F6:CF:71 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 07FF Signing time: Fri 22 Aug 2025 21:07:08 +0000 Manifest this update: Fri 22 Aug 2025 21:07:08 +0000 Manifest next update: Fri 29 Aug 2025 21:07:08 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: An/HfirfjWSMlQNp597uQQg98vNK9Gd5P3NnNzPf9hA=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Aug 22 21:07:08 2025 GMT Not After : Aug 29 21:07:08 2025 GMT Subject: CN=68a8dbfc-85a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:88:20:df:e2:13:e9:3e:92:bd:e7:76:c5: 9f:26:84:38:bc:39:d7:49:95:07:1f:61:82:6f:1a: de:ee:11:2a:2f:4b:35:a0:ad:80:6b:09:79:00:44: 6c:37:6d:aa:32:44:ef:14:2e:f8:35:dd:ee:79:c8: d8:95:7c:d4:15:12:cb:b7:dd:2f:b0:d5:43:65:69: d7:94:bb:88:69:d1:8a:cd:95:fb:fb:d6:d6:dd:9b: f4:80:95:55:12:75:01:01:32:e7:2c:29:25:49:7d: 76:f0:f7:0e:48:c0:28:d6:b7:da:78:fe:40:46:e6: 17:69:63:78:9f:85:32:45:a3:f7:e6:84:5d:c3:e6: 34:3f:69:d0:8d:b9:9b:48:72:4c:43:4d:74:45:a0: f2:21:76:8a:fb:4c:4d:3a:52:25:ab:5d:26:53:56: 88:c5:c3:92:89:46:45:8f:1e:f6:56:ee:22:e3:74: 39:18:af:c9:2f:5f:18:3f:f5:e0:88:77:46:bf:cc: 0b:e0:bd:74:36:82:82:6a:7e:35:47:d7:67:fd:e4: a1:bb:3b:79:75:7b:e8:cc:06:96:8f:d6:c2:23:e8: f4:4e:94:9e:be:c1:b6:30:72:55:69:9e:41:aa:ed: 50:ff:24:54:e1:ee:b3:34:e9:57:e9:2e:de:1a:ba: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:7C:B5:21:18:AF:76:B8:F8:DA:FB:25:08:D0:92:3E:F6:CF:71 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b4:d0:fa:c8:9b:f1:57:44:4e:51:2e:ea:12:f6:bf:81:9c: 27:d7:5c:0c:f1:85:77:89:6f:7a:16:49:7a:18:23:88:c1:85: 63:8d:4f:e3:19:41:74:37:9d:66:e7:9c:14:f3:fd:08:ae:d0: 78:94:47:91:c7:e4:17:2e:6d:84:cf:0b:f1:db:b5:a7:c8:6e: 1c:e6:d1:48:58:c7:b3:85:d3:4c:77:30:a2:5c:15:49:96:b6: 20:a3:4c:b0:96:f3:d1:ac:cc:76:00:8b:d4:6e:ed:30:af:8d: cb:55:b8:e1:ad:89:53:db:fe:42:6e:46:e8:a9:f8:e1:bb:7d: 0c:ae:d4:9c:43:f5:cf:f2:64:09:bd:6e:60:4d:3e:5f:ce:6c: 49:68:28:e4:0d:24:ff:db:83:14:4f:a9:d6:8c:4b:75:30:2a: 51:40:d7:0a:6c:e9:39:cd:69:79:8e:1d:da:f0:65:e2:34:a9: c5:19:01:35:e1:68:c9:84:b2:08:6d:04:3a:8c:18:a8:19:1a: 02:69:ad:ca:a1:ca:50:d3:5c:e6:85:dc:88:b6:a2:90:87:18: 3c:25:87:05:cf:1a:6f:9a:20:14:ab:c5:66:b9:4c:70:3f:26: 47:05:81:15:f4:5b:a9:f8:f9:38:d0:7f:a0:80:ea:8b:fb:d7: fe:c6:74:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUwODIyMjEwNzA4WhcNMjUwODI5MjEwNzA4WjAYMRYwFAYD VQQDEw02OGE4ZGJmYy04NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cyIIN/iE+k+kr3ndsWfJoQ4vDnXSZUHH2GCbxre7hEqL0s1oK2Aawl5AERs N22qMkTvFC74Nd3uecjYlXzUFRLLt90vsNVDZWnXlLuIadGKzZX7+9bW3Zv0gJVV EnUBATLnLCklSX128PcOSMAo1rfaeP5ARuYXaWN4n4UyRaP35oRdw+Y0P2nQjbmb SHJMQ010RaDyIXaK+0xNOlIlq10mU1aIxcOSiUZFjx72Vu4i43Q5GK/JL18YP/Xg iHdGv8wL4L10NoKCan41R9dn/eShuzt5dXvozAaWj9bCI+j0TpSevsG2MHJVaZ5B qu1Q/yRU4e6zNOlX6S7eGrqAFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXJfLUh GK92uPja+yUI0JI+9s9xMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQActND6yJvxV0ROUS7qEva/gZwn11wM8YV3iW96Fkl6GCOIwYVjjU/j GUF0N51m55wU8/0IrtB4lEeRx+QXLm2Ezwvx27WnyG4c5tFIWMezhdNMdzCiXBVJ lrYgo0ywlvPRrMx2AIvUbu0wr43LVbjhrYlT2/5Cbkboqfjhu30MrtScQ/XP8mQJ vW5gTT5fzmxJaCjkDST/24MUT6nWjEt1MCpRQNcKbOk5zWl5jh3a8GXiNKnFGQE1 4WjJhLIIbQQ6jBioGRoCaa3KocpQ01zmhdyItqKQhxg8JYcFzxpvmiAUq8VmuUxw PyZHBYEV9Fup+Pk40H+ggOqL+9f+xnTp -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:52 2025 by rpki-client