$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: 7V4Qs5+GwB689GCB9C5T4vR1DrnUc0ZM0Kma8P0WzxE= Subject key identifier: C9:78:57:3C:DE:C0:7B:29:2E:26:17:1E:03:D9:E0:BF:EF:A1:02:33 Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 05D7 Signing time: Tue 12 Aug 2025 23:27:08 +0000 Manifest this update: Tue 12 Aug 2025 23:27:08 +0000 Manifest next update: Tue 19 Aug 2025 23:27:08 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: pq+cs+6CVslqL/bON0kd18isaX7nkSXs69DVy290LXA=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: FUPhJ7viy8W3pQYFN/dbDBBE9qpZwOpzgVenyvyXp+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Validity Not Before: Aug 12 23:27:08 2025 GMT Not After : Aug 19 23:27:08 2025 GMT Subject: CN=689bcdcc-d0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:98:1c:bc:0a:a7:9f:a5:cb:9f:e9:f8:08: 7b:b2:55:49:c2:d0:6a:d0:a4:d4:8e:e8:c7:bb:59: f6:94:6c:0e:b2:af:89:8f:40:86:3d:91:c9:4d:06: 5c:bf:04:9c:ef:ae:7e:03:29:c5:fe:be:36:c1:af: fe:df:73:d2:20:b3:57:d6:d5:f3:db:0a:4a:e9:81: 62:43:62:c1:9f:2a:1d:79:4c:17:3b:f7:a2:11:18: a3:1b:e1:e0:97:fe:6b:4e:a2:7f:ea:71:50:fb:b2: af:fe:85:0c:80:4d:89:7b:26:9b:e4:21:c0:b9:96: d8:6f:6c:ac:30:0f:0c:e8:95:93:77:d7:49:d6:e4: ad:c0:49:28:a2:c2:30:c2:02:98:69:44:4a:e2:2a: 5b:9c:28:c4:16:fd:68:dc:02:d0:bc:01:e5:5a:f9: 49:61:b1:b2:e3:fe:6a:4f:9b:75:99:41:d1:74:69: 36:91:84:88:f7:0c:e1:0c:a5:ac:a7:cc:fa:52:88: ee:e4:b1:f1:fb:fa:e0:5a:f0:05:6d:a5:d5:c8:a3: c1:4b:31:24:b1:5d:dc:5c:3a:7a:80:58:14:8a:68: f6:31:ab:8b:35:79:94:32:8d:af:8d:af:7e:35:ab: 21:6b:1d:72:a8:78:56:a6:2f:e3:91:3a:c3:6b:0a: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:57:3C:DE:C0:7B:29:2E:26:17:1E:03:D9:E0:BF:EF:A1:02:33 X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ba:31:8e:a1:ef:3b:f0:26:68:ec:32:b6:55:75:e2:cd:9c: 7e:3f:a6:ff:3f:af:c5:41:ac:52:ab:fe:7b:71:c5:13:e3:f1: 38:2f:f1:76:d2:0a:6f:35:10:0c:66:ae:5e:9a:e9:ce:1f:da: 3c:7e:6a:b2:fe:41:9b:4b:d5:9f:28:22:5f:47:cd:01:c9:fe: 3f:0a:8e:35:56:6d:68:45:ac:dd:49:ba:c8:29:34:8d:21:3f: f0:5d:4a:f2:1e:ac:08:00:53:c4:e0:f0:da:53:c5:3a:16:d6: e5:6b:83:20:6d:87:5b:8e:11:60:f3:a0:67:46:3c:60:3e:04: 63:c5:18:8b:4f:22:f2:4f:34:da:1f:fb:66:f9:12:c1:9d:4b: dc:b0:f8:24:e5:80:0e:0c:8c:af:ef:f4:54:6b:38:24:be:23: fe:5d:c0:ec:a1:72:5e:cb:c1:5f:76:82:1f:a9:e1:d4:6a:4a: d6:9c:ad:3c:3b:6b:90:d6:04:8d:3b:4b:86:75:0e:88:e1:b5: 98:d8:d5:17:7c:6a:f3:17:38:e3:97:3d:95:a6:db:68:9d:18: 5f:4d:32:e6:3a:e0:d4:d1:48:e3:4d:d4:b5:a3:f8:ce:d9:c3: 14:de:8d:2a:42:8f:cc:fb:a8:c0:79:de:ee:78:f7:6c:e3:fa: 2e:24:5d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjUwODEyMjMyNzA4WhcNMjUwODE5MjMyNzA4WjAYMRYwFAYD VQQDEw02ODliY2RjYy1kMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZiYHLwKp5+ly5/p+Ah7slVJwtBq0KTUjujHu1n2lGwOsq+Jj0CGPZHJTQZc vwSc765+AynF/r42wa/+33PSILNX1tXz2wpK6YFiQ2LBnyodeUwXO/eiERijG+Hg l/5rTqJ/6nFQ+7Kv/oUMgE2Jeyab5CHAuZbYb2ysMA8M6JWTd9dJ1uStwEkoosIw wgKYaURK4ipbnCjEFv1o3ALQvAHlWvlJYbGy4/5qT5t1mUHRdGk2kYSI9wzhDKWs p8z6Uoju5LHx+/rgWvAFbaXVyKPBSzEksV3cXDp6gFgUimj2MauLNXmUMo2vja9+ Nashax1yqHhWpi/jkTrDawof8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl4Vzze wHspLiYXHgPZ4L/voQIzMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUujGOoe878CZo7DK2VXXizZx+P6b/P6/FQaxSq/57ccUT4/E4L/F2 0gpvNRAMZq5emunOH9o8fmqy/kGbS9WfKCJfR80Byf4/Co41Vm1oRazdSbrIKTSN IT/wXUryHqwIAFPE4PDaU8U6Ftbla4MgbYdbjhFg86BnRjxgPgRjxRiLTyLyTzTa H/tm+RLBnUvcsPgk5YAODIyv7/RUazgkviP+XcDsoXJey8FfdoIfqeHUakrWnK08 O2uQ1gSNO0uGdQ6I4bWY2NUXfGrzFzjjlz2VpttonRhfTTLmOuDU0UjjTdS1o/jO 2cMU3o0qQo/M+6jAed7uePds4/ouJF3l -----END CERTIFICATE-----Generated at Wed Aug 13 05:29:51 2025 by rpki-client