$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft File: taxoaa_ZUfiX3UqnJWT78qNW2Es.mft (raw, json) Hash identifier: N/sz4s5I7fnE4AsAHgXRrFnCgJHXGjll3tYG0EcGKCc= Subject key identifier: B3:29:D1:11:63:8B:4A:11:CB:A0:D2:9C:8C:53:29:CB:58:E7:49:38 Authority key identifier: B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B Certificate issuer: /CN=A91F5C0D/serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft Manifest number: 06A6 Signing time: Fri 22 Aug 2025 22:24:51 +0000 Manifest this update: Fri 22 Aug 2025 22:24:51 +0000 Manifest next update: Fri 29 Aug 2025 22:24:51 +0000 Files and hashes: 1: taxoaa_ZUfiX3UqnJWT78qNW2Es.crl (hash: 7U3PNObsnVNQhfGjz3qkC/fpsmm6LBlQKoaoNRc1Rao=) 2: F9D4AAB87DA911EB8532A559C4F9AE02.roa (hash: hdcM24QfcZM6XSytMTfe6jwtskbdb02rkwvBVCKn3ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5C0D, serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Validity Not Before: Aug 22 22:24:51 2025 GMT Not After : Aug 29 22:24:51 2025 GMT Subject: CN=68a8ee33-bfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:53:98:e5:d4:16:40:8d:e6:8b:ef:6f:40: 00:1f:cb:6f:16:fd:2d:19:2f:c9:b5:75:3a:2d:ae: 20:a5:02:23:88:7f:2c:8b:53:6e:30:d6:10:d6:03: c8:3f:6b:4b:93:2a:3c:e8:db:ec:15:9c:78:05:b9: 26:95:be:69:16:47:3f:36:11:94:c5:c1:d6:ae:05: a3:97:eb:82:fd:b4:3b:cf:bc:39:eb:da:61:c4:d1: 01:fc:83:e8:78:4c:84:93:40:b3:20:e5:53:e0:30: cc:14:1e:ab:28:11:27:81:18:f0:e8:ac:49:8c:2d: ac:3f:1e:bc:1c:67:bb:3d:0f:ec:54:2c:2c:24:32: 19:19:78:47:a7:b4:53:12:c2:25:9d:05:a3:a7:eb: 8f:e7:d0:25:75:5e:77:24:5d:24:0d:fe:95:c5:34: b0:ad:8b:17:cc:64:5b:6d:f1:50:8f:b4:c5:5d:85: a7:2f:9e:2c:de:86:44:b0:ba:91:58:fe:40:e0:8b: c4:d5:7d:aa:ad:a0:ec:21:dc:b2:08:c3:a3:2f:6a: 6a:12:0c:1e:92:6d:ca:fa:02:77:cc:59:c5:e1:ea: 24:ad:84:10:f8:6c:c9:0b:b9:e7:c0:00:90:44:55: 47:f6:5a:c6:a3:ba:10:19:83:eb:bb:b7:ee:e9:c8: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:29:D1:11:63:8B:4A:11:CB:A0:D2:9C:8C:53:29:CB:58:E7:49:38 X509v3 Authority Key Identifier: keyid:B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9a:83:92:36:a4:e3:9a:b2:93:b7:a2:8e:fb:72:08:3f:8a: a5:77:af:5e:ac:e3:74:e7:38:9f:d4:71:0a:4b:b5:28:fc:24: 79:62:71:b6:f6:78:7d:53:a1:86:e3:53:00:46:a9:71:c4:37: c1:ab:85:34:2a:9d:3a:f6:39:b1:3c:da:57:c7:de:41:c3:49: 48:51:49:53:47:77:6f:f5:1d:ff:fe:9f:30:b1:04:2f:89:38: 43:b4:36:90:1d:fb:4f:7a:03:6b:03:32:21:8c:a4:89:54:a5: dd:78:9a:ba:e4:65:73:d2:70:68:e6:d4:b2:f4:37:3d:48:c8: 84:d8:81:6f:af:eb:aa:5b:e3:97:75:da:ab:94:e9:0e:bd:7a: 7a:5d:c1:f9:9f:dd:f2:c2:ba:47:7f:3d:c7:3c:69:86:6a:87: a7:0b:ce:9b:55:0e:35:88:d6:41:81:63:eb:66:f3:cd:6e:90: f3:06:e9:09:62:28:65:b4:fe:a8:98:ba:f2:50:d4:88:e9:97: c7:3c:94:27:08:48:8b:31:2a:96:88:af:22:bb:8d:d3:96:56: 6e:2c:e3:d4:ee:a5:f4:75:39:f5:5d:30:1d:e0:bf:b6:98:72: 41:a4:dc:27:03:e8:99:4e:71:ff:d1:17:9b:9c:a4:e0:bf:b7: 41:71:a5:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDMEQxMTAvBgNVBAUTKEI1QUM2ODY5QUZEOTUxRjg5N0RENEFBNzI1NjRGQkYy QTM1NkQ4NEIwHhcNMjUwODIyMjIyNDUxWhcNMjUwODI5MjIyNDUxWjAYMRYwFAYD VQQDEw02OGE4ZWUzMy1iZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1RTmOXUFkCN5ovvb0AAH8tvFv0tGS/JtXU6La4gpQIjiH8si1NuMNYQ1gPI P2tLkyo86NvsFZx4Bbkmlb5pFkc/NhGUxcHWrgWjl+uC/bQ7z7w569phxNEB/IPo eEyEk0CzIOVT4DDMFB6rKBEngRjw6KxJjC2sPx68HGe7PQ/sVCwsJDIZGXhHp7RT EsIlnQWjp+uP59AldV53JF0kDf6VxTSwrYsXzGRbbfFQj7TFXYWnL54s3oZEsLqR WP5A4IvE1X2qraDsIdyyCMOjL2pqEgwekm3K+gJ3zFnF4eokrYQQ+GzJC7nnwACQ RFVH9lrGo7oQGYPru7fu6ciD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMp0RFj i0oRy6DSnIxTKctY50k4MB8GA1UdIwQYMBaAFLWsaGmv2VH4l91KpyVk+/KjVthL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUMwRC81RUY3NTE1NDdE QTgxMUVCOUJFODRFNThDNEY5QUUwMi90YXhvYWFfWlVmaVgzVXFuSldUNzhxTlcy RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RheG9hYV9aVWZpWDNVcW5KV1Q3OHFOVzJFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUMwRC81RUY3NTE1NDdEQTgxMUVCOUJFODRFNThDNEY5QUUwMi90YXhvYWFfWlVm aVgzVXFuSldUNzhxTlcyRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtmoOSNqTjmrKTt6KO+3IIP4qld69erON05zif1HEKS7Uo/CR5YnG2 9nh9U6GG41MARqlxxDfBq4U0Kp069jmxPNpXx95Bw0lIUUlTR3dv9R3//p8wsQQv iThDtDaQHftPegNrAzIhjKSJVKXdeJq65GVz0nBo5tSy9Dc9SMiE2IFvr+uqW+OX ddqrlOkOvXp6XcH5n93ywrpHfz3HPGmGaoenC86bVQ41iNZBgWPrZvPNbpDzBukJ YihltP6omLryUNSI6ZfHPJQnCEiLMSqWiK8iu43TllZuLOPU7qX0dTn1XTAd4L+2 mHJBpNwnA+iZTnH/0RebnKTgv7dBcaWK -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:16 2025 by rpki-client