$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: BaVmhrUWdzQ0Z8YAIMBiiLFoiYOlD06C6qGo8Dz6X7s= Subject key identifier: 64:DE:26:DC:CF:58:A9:33:69:5F:FD:3B:94:76:71:FD:DF:64:34:1E Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 92 Signing time: Sat 09 Aug 2025 04:45:45 +0000 Manifest this update: Sat 09 Aug 2025 04:45:44 +0000 Manifest next update: Sat 16 Aug 2025 04:45:44 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: vcQ2WZKFOPvDuuGPMPyR9tM1gXIATcSsmelwa6JhO0A=) 2: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Aug 9 04:45:44 2025 GMT Not After : Aug 16 04:45:44 2025 GMT Subject: CN=6896d278-bf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:9a:80:ba:56:46:59:60:51:63:ba:23:20: 33:e6:3f:d9:83:81:9a:9a:2b:29:8c:80:e0:0e:b3: 7d:d0:04:94:a7:a6:ec:2c:26:6a:61:6e:96:04:c0: dd:8f:0a:b9:29:ee:9a:6e:97:a5:a2:1d:eb:2d:73: 97:8b:af:a5:2a:7a:ee:57:60:47:37:5b:bf:fc:aa: a2:ff:e2:2d:2c:31:7b:4b:e3:71:67:8d:17:73:a2: 29:21:81:9e:48:35:08:8c:e4:82:db:18:78:e5:80: d3:8a:92:22:a9:65:2b:08:98:e7:ef:e5:fe:d8:7a: 1b:b9:49:11:32:fb:54:ea:32:17:e7:59:60:d2:3c: f3:e8:3c:80:4c:13:0a:43:63:ab:0e:c8:d9:20:04: 06:48:f8:b2:5a:0e:79:62:03:73:b6:d4:76:aa:d1: 37:3f:75:c8:32:f2:ad:5b:fd:ef:0a:3f:57:9d:2d: 92:ff:88:57:80:16:e0:4d:b2:24:51:e7:57:73:44: e8:95:69:44:d2:ea:14:1e:dc:ab:e3:53:a5:3b:8d: 18:ae:a3:be:14:9f:7b:3a:cf:77:26:d4:87:e9:ef: 0d:f2:7c:87:fe:c8:56:b0:ae:9b:86:0e:9a:27:a3: ee:05:75:57:4a:04:b5:1f:34:7e:b2:0b:4e:f0:2c: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:26:DC:CF:58:A9:33:69:5F:FD:3B:94:76:71:FD:DF:64:34:1E X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:04:5f:9a:6e:36:c5:d6:6d:e6:8d:c9:f1:73:5b:8a:fe:06: ad:ec:62:77:5c:ca:4a:4b:d5:66:b3:a0:95:c9:7a:c9:83:94: 8c:88:18:4c:98:ba:64:50:ae:fe:1b:39:e7:f6:89:e5:95:dd: 1a:ac:82:53:20:b6:c8:43:9b:84:f1:3a:66:b7:3e:bd:45:fa: 28:ff:82:7f:ba:16:b3:11:6a:ef:30:34:26:e1:dd:b7:36:91: 8f:59:e6:fc:b2:6d:fc:ba:84:c9:61:65:a2:97:71:56:cc:c4: 66:7e:dd:0c:fe:11:c9:07:9b:22:7f:f8:69:00:36:2c:3d:cb: 7e:f8:f0:6c:88:06:95:c0:6c:7d:98:94:8b:f4:a2:27:f0:1e: 51:ca:ef:5d:60:c3:b0:b6:2d:32:a5:14:f4:0d:8a:3e:81:f1: 0f:b8:41:fd:c9:99:53:ae:3b:c7:f7:42:86:f9:c6:a7:68:25: 6b:c2:61:99:37:31:45:8b:44:51:5b:0e:4d:af:fa:28:1a:10: cb:5b:07:35:31:05:a8:12:01:e3:e8:63:f6:00:3c:a4:d5:df: f0:17:f6:cc:7f:de:b4:7a:88:2f:da:73:38:2a:fd:8c:b7:8c: 15:88:e2:bf:dd:ad:af:ce:f1:93:28:3d:21:9b:74:a0:9e:9c: dc:dc:48:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUwODA5MDQ0NTQ0WhcNMjUwODE2MDQ0NTQ0WjAYMRYwFAYD VQQDEw02ODk2ZDI3OC1iZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5qagLpWRllgUWO6IyAz5j/Zg4GamispjIDgDrN90ASUp6bsLCZqYW6WBMDd jwq5Ke6abpeloh3rLXOXi6+lKnruV2BHN1u//Kqi/+ItLDF7S+NxZ40Xc6IpIYGe SDUIjOSC2xh45YDTipIiqWUrCJjn7+X+2HobuUkRMvtU6jIX51lg0jzz6DyATBMK Q2OrDsjZIAQGSPiyWg55YgNzttR2qtE3P3XIMvKtW/3vCj9XnS2S/4hXgBbgTbIk UedXc0TolWlE0uoUHtyr41OlO40YrqO+FJ97Os93JtSH6e8N8nyH/shWsK6bhg6a J6PuBXVXSgS1HzR+sgtO8Cwh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTeJtzP WKkzaV/9O5R2cf3fZDQeMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyBF+abjbF1m3mjcnxc1uK/gat7GJ3XMpKS9Vms6CVyXrJg5SMiBhM mLpkUK7+Gznn9onlld0arIJTILbIQ5uE8Tpmtz69Rfoo/4J/uhazEWrvMDQm4d23 NpGPWeb8sm38uoTJYWWil3FWzMRmft0M/hHJB5sif/hpADYsPct++PBsiAaVwGx9 mJSL9KIn8B5Ryu9dYMOwti0ypRT0DYo+gfEPuEH9yZlTrjvH90KG+canaCVrwmGZ NzFFi0RRWw5Nr/ooGhDLWwc1MQWoEgHj6GP2ADyk1d/wF/bMf960eogv2nM4Kv2M t4wViOK/3a2vzvGTKD0hm3Sgnpzc3Ege -----END CERTIFICATE-----Generated at Mon Aug 11 04:23:13 2025 by rpki-client