$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: uPUp9yr1sSZNIIPccDoh/bM3BtmaNcxSgQ5knVPhgXc= Subject key identifier: E2:AD:3D:BC:B3:CC:93:F6:06:74:7B:ED:DA:BC:3E:3C:96:6D:6A:CD Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: BD Signing time: Sat 23 Aug 2025 06:03:50 +0000 Manifest this update: Sat 23 Aug 2025 06:03:49 +0000 Manifest next update: Sat 30 Aug 2025 06:03:49 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: ogwCKQt6FhfMs5+0t0k9CGTYZa8CvlVHXGhFbKlrNhM=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: jmXb0sPHquklWucQNPULW9k7ur2PuqaFZnebmPVFmaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Aug 23 06:03:49 2025 GMT Not After : Aug 30 06:03:49 2025 GMT Subject: CN=68a959c5-b84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:f1:de:87:4e:a3:e8:c3:65:d8:70:dd:31: 96:0b:82:de:10:54:6a:ce:61:c3:3f:9a:02:d3:ba: b1:3c:64:1e:03:95:7b:ef:3a:f1:6b:8d:07:14:4b: 2f:ff:0d:f5:93:42:99:90:2c:60:33:58:b7:7a:58: 38:66:be:75:5f:71:40:63:63:18:2a:c6:53:ac:f4: 7a:ca:3a:d1:61:a3:99:08:f7:d1:09:0d:64:5e:58: bb:fa:5b:a0:77:91:98:d2:08:6f:50:ec:c2:df:10: 62:fe:89:8f:86:6b:f3:95:29:99:cd:08:fe:3a:6a: 3d:d1:86:ad:76:cc:8c:fe:f0:f7:fb:ae:e2:a8:c0: 66:30:58:11:1c:74:60:32:c8:00:e6:00:fb:43:c4: 5c:7f:49:cf:b4:47:61:d5:3f:18:76:a4:e1:9d:f7: 09:24:8f:35:95:8b:9e:ec:b1:f7:7b:df:2f:e7:ba: fd:a4:05:c8:d4:3f:0f:db:8e:4c:c6:fb:45:a5:68: f9:4a:01:95:67:fd:62:1f:97:0f:92:7c:93:96:0c: 73:9d:07:3e:29:85:a4:5e:96:13:00:88:f0:5f:a4: 36:8d:d1:32:76:aa:07:e7:de:f9:79:6f:1b:e1:d4: 77:47:4e:f0:08:71:01:a2:8e:ca:19:7c:f5:02:a7: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:3D:BC:B3:CC:93:F6:06:74:7B:ED:DA:BC:3E:3C:96:6D:6A:CD X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:2c:ab:b4:71:54:c6:80:d8:f9:cc:03:ec:f9:e5:97:9e:46: 2c:d0:18:53:d9:8d:3c:0f:61:ba:54:b8:fb:82:ae:1a:d8:fb: 93:f4:4b:bb:41:16:59:1b:c8:1b:76:05:ab:e6:b4:3e:11:74: 0f:ef:8d:06:dd:a8:e2:fd:43:66:95:39:62:09:be:10:55:b4: ff:69:a7:b2:43:22:29:0c:c6:67:bc:d4:90:b8:ec:0e:27:c8: bd:04:ad:08:9b:0f:ea:7b:4b:c5:da:df:26:f6:32:83:73:4e: cb:b5:93:90:93:0a:4e:d3:ef:02:db:7d:e3:52:99:5d:7e:52: a6:d8:09:d7:cc:41:71:c3:a3:c9:04:9c:96:95:c9:07:a4:19: b1:02:0f:e8:f7:50:c9:59:30:4a:b4:a5:f0:8e:b9:b9:31:c8: 20:55:63:bb:79:20:2f:3b:fe:86:3b:b4:d2:d4:66:be:80:aa: f6:d0:8a:97:01:0c:73:20:0c:4c:61:bb:56:2f:df:f3:e2:43: 13:f0:04:00:7b:4d:09:c8:be:f2:5d:f0:3c:36:fb:4e:3d:ec: 71:31:b5:d9:a6:8b:9c:45:b3:c8:e9:e7:7c:e8:6e:08:be:16: fa:13:b1:42:cf:a8:e1:a0:0c:c8:fd:b0:8b:11:cd:8e:d9:fe: 0a:06:8f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUwODIzMDYwMzQ5WhcNMjUwODMwMDYwMzQ5WjAYMRYwFAYD VQQDEw02OGE5NTljNS1iODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOXx3odOo+jDZdhw3TGWC4LeEFRqzmHDP5oC07qxPGQeA5V77zrxa40HFEsv /w31k0KZkCxgM1i3elg4Zr51X3FAY2MYKsZTrPR6yjrRYaOZCPfRCQ1kXli7+lug d5GY0ghvUOzC3xBi/omPhmvzlSmZzQj+Omo90YatdsyM/vD3+67iqMBmMFgRHHRg MsgA5gD7Q8Rcf0nPtEdh1T8YdqThnfcJJI81lYue7LH3e98v57r9pAXI1D8P245M xvtFpWj5SgGVZ/1iH5cPknyTlgxznQc+KYWkXpYTAIjwX6Q2jdEydqoH5975eW8b 4dR3R07wCHEBoo7KGXz1AqdRUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKtPbyz zJP2BnR77dq8PjyWbWrNMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAELKu0cVTGgNj5zAPs+eWXnkYs0BhT2Y08D2G6VLj7gq4a2PuT9Eu7 QRZZG8gbdgWr5rQ+EXQP740G3aji/UNmlTliCb4QVbT/aaeyQyIpDMZnvNSQuOwO J8i9BK0Imw/qe0vF2t8m9jKDc07LtZOQkwpO0+8C233jUpldflKm2AnXzEFxw6PJ BJyWlckHpBmxAg/o91DJWTBKtKXwjrm5McggVWO7eSAvO/6GO7TS1Ga+gKr20IqX AQxzIAxMYbtWL9/z4kMT8AQAe00JyL7yXfA8NvtOPexxMbXZpoucRbPI6ed86G4I vhb6E7FCz6jhoAzI/bCLEc2O2f4KBo+j -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:48 2025 by rpki-client