$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: Yx75nD0NQLQbtcxOnFCWq7b8yDY+qoi4JKvUfIJSR2k= Subject key identifier: C9:4B:07:99:60:BF:55:03:57:99:C3:71:FE:CE:91:4D:D6:0A:86:0D Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 01C2 Signing time: Mon 11 Aug 2025 03:04:22 +0000 Manifest this update: Mon 11 Aug 2025 03:04:21 +0000 Manifest next update: Mon 18 Aug 2025 03:04:21 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: J7DAn0ivspIC8HssfdHh+QSp9SgKMxCKNPy0Ws6W+wc=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Aug 11 03:04:21 2025 GMT Not After : Aug 18 03:04:21 2025 GMT Subject: CN=68995db6-4d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:a1:4e:ef:e5:36:c8:ab:f0:10:ae:f6:7a: 53:13:e4:a0:0d:ba:eb:4a:15:e9:fc:44:55:dd:c8: 40:4a:dd:d8:c9:f0:87:d0:13:4f:b3:62:ed:95:79: 19:a5:bc:72:a1:dc:30:39:b2:79:27:9c:4c:84:14: fc:9c:19:42:11:3e:18:74:21:18:37:14:68:f4:67: d0:7c:7d:a5:ce:02:16:33:0f:2b:c5:f0:4d:ff:0c: fe:0e:d0:6a:ab:6e:69:95:ca:c1:8b:95:b9:e1:e0: cd:99:f1:da:04:3f:27:cd:04:5a:f8:93:4b:e4:7d: aa:f2:35:be:04:c5:ac:84:df:b5:22:78:75:b5:b9: a1:f5:80:3e:69:3a:f9:2d:07:e5:d1:d8:1a:a4:15: ac:e9:b8:fb:aa:c0:4a:5b:e7:bb:a4:5c:b0:c1:e7: d1:1b:ca:5b:55:6e:4f:8a:b2:eb:03:0b:fc:ac:5a: 1c:a8:87:03:d5:f6:6c:24:27:ce:a6:15:db:11:9a: d7:00:30:01:1f:c2:eb:69:ce:88:a2:8a:2b:86:91: 24:06:0d:7a:d2:c6:98:7d:03:6b:c6:68:29:19:03: 4a:7b:62:6f:96:89:87:f8:c7:b5:7b:40:98:5c:29: 9e:ad:96:d9:18:68:cd:83:21:15:ea:5d:33:ac:b8: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4B:07:99:60:BF:55:03:57:99:C3:71:FE:CE:91:4D:D6:0A:86:0D X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8a:b2:b8:0a:84:3f:b9:b4:e8:1f:3b:29:34:84:84:1a:89: 59:4f:af:07:0a:97:9b:14:6f:a3:77:ed:b0:a5:55:77:a1:66: 89:57:51:1f:ec:e5:5f:aa:ed:69:85:0b:9b:2f:ed:d7:a0:57: 92:d5:10:15:bf:91:27:ff:d9:70:b6:b0:80:b9:91:cf:db:25: b8:73:e6:86:93:c8:9f:a3:52:b8:90:ed:0d:6b:ba:86:2b:df: 84:1a:17:0e:3c:21:2b:90:03:a7:2b:4b:4a:e2:d5:24:23:b9: b4:68:4c:d5:6e:4a:62:4f:ce:9d:2c:97:a8:6c:b3:53:0c:20: 96:07:a3:5c:3b:da:a0:94:b7:5f:d6:5c:51:5d:86:11:b7:69: 7b:d1:98:95:66:7e:04:c1:c5:5f:0c:1b:8b:ec:2f:45:55:cb: 6e:29:8b:f9:86:18:f4:f2:fe:17:00:a8:13:c7:15:45:bf:bd: 13:8b:25:3d:cb:ff:35:2f:80:50:13:62:c1:2c:2d:af:d6:6e: 84:22:c8:e7:4f:0e:ec:bb:51:e2:cb:94:86:cd:6f:0c:43:78: 86:35:8e:75:5c:be:84:97:1f:0b:d1:df:57:d5:a4:80:c1:2e: 73:93:63:29:43:ce:d9:26:de:8e:12:fb:fc:43:71:f8:11:24: b5:d7:b4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUwODExMDMwNDIxWhcNMjUwODE4MDMwNDIxWjAYMRYwFAYD VQQDEw02ODk5NWRiNi00ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy2hTu/lNsir8BCu9npTE+SgDbrrShXp/ERV3chASt3YyfCH0BNPs2LtlXkZ pbxyodwwObJ5J5xMhBT8nBlCET4YdCEYNxRo9GfQfH2lzgIWMw8rxfBN/wz+DtBq q25plcrBi5W54eDNmfHaBD8nzQRa+JNL5H2q8jW+BMWshN+1Inh1tbmh9YA+aTr5 LQfl0dgapBWs6bj7qsBKW+e7pFywwefRG8pbVW5PirLrAwv8rFocqIcD1fZsJCfO phXbEZrXADABH8Lrac6IooorhpEkBg160saYfQNrxmgpGQNKe2JvlomH+Me1e0CY XCmerZbZGGjNgyEV6l0zrLhgiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlLB5lg v1UDV5nDcf7OkU3WCoYNMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdirK4CoQ/ubToHzspNISEGolZT68HCpebFG+jd+2wpVV3oWaJV1Ef 7OVfqu1phQubL+3XoFeS1RAVv5En/9lwtrCAuZHP2yW4c+aGk8ifo1K4kO0Na7qG K9+EGhcOPCErkAOnK0tK4tUkI7m0aEzVbkpiT86dLJeobLNTDCCWB6NcO9qglLdf 1lxRXYYRt2l70ZiVZn4EwcVfDBuL7C9FVctuKYv5hhj08v4XAKgTxxVFv70TiyU9 y/81L4BQE2LBLC2v1m6EIsjnTw7su1Hiy5SGzW8MQ3iGNY51XL6Elx8L0d9X1aSA wS5zk2MpQ87ZJt6OEvv8Q3H4ESS117Qq -----END CERTIFICATE-----Generated at Mon Aug 11 04:34:09 2025 by rpki-client