$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json) Hash identifier: Rg9lUz07Ei1jePr0MVZruBBRpeZOsofP647Hc3wReuQ= Subject key identifier: BB:4C:EE:5B:C5:65:26:31:4B:6D:5E:70:93:90:B0:3B:69:B5:91:C2 Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft Manifest number: 0152 Signing time: Sat 09 Aug 2025 04:33:57 +0000 Manifest this update: Sat 09 Aug 2025 04:33:57 +0000 Manifest next update: Sat 16 Aug 2025 04:33:56 +0000 Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: Tl+6Q1VsG9dHzWsnSyrRm+7shzKXIdPgQAA+p0SAqTs=) 2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: cZSiy4bCwDyhfeb/EZhFsCoqJYnevtXYXbg2+tmKMXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Validity Not Before: Aug 9 04:33:57 2025 GMT Not After : Aug 16 04:33:56 2025 GMT Subject: CN=6896cfb5-054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:f6:51:25:d6:4e:94:a9:49:db:77:c6:55: b6:7e:54:db:41:1f:2a:c7:e1:ed:ed:0c:ef:88:ab: 6d:df:75:1b:aa:db:ff:5b:8e:90:1d:4a:29:99:e8: 48:ad:4d:4c:98:ee:34:bb:f0:26:60:3b:fc:42:44: c8:db:b1:de:55:ab:d3:b4:34:78:90:36:f0:3d:68: d3:b8:2d:64:73:6b:a2:88:1a:49:40:d3:07:09:58: 4d:8d:4a:b0:56:3f:2f:3c:ae:5d:40:42:f8:1f:ea: b0:9f:d1:6a:e5:ce:b2:82:33:f9:19:a8:34:0b:58: 10:99:ca:06:e6:65:a5:40:7d:02:60:37:d3:4d:1a: a3:e1:13:bd:c9:d3:6b:66:a8:1e:44:71:38:e3:f2: 3f:bd:ea:7c:b8:71:ea:0b:49:4f:9b:c3:a9:29:0a: ee:91:ef:84:d7:e5:f0:f1:3d:11:7e:85:ca:b1:31: 1d:95:84:5d:ac:df:a9:89:44:88:05:12:2a:c0:5b: ff:8e:8e:ec:5d:7b:3b:3a:79:0f:56:c2:50:4c:d4: 7c:cd:f6:2d:43:e5:6b:51:a8:22:a0:35:a4:d3:43: e0:97:21:f4:cb:67:8a:88:7d:0c:f8:c5:6c:3b:00: 04:73:02:41:9a:b0:94:69:a1:8b:2f:db:1f:f3:df: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:EE:5B:C5:65:26:31:4B:6D:5E:70:93:90:B0:3B:69:B5:91:C2 X509v3 Authority Key Identifier: keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fd:00:03:1d:74:fe:f5:b0:f5:49:26:a7:f2:f4:98:0e:9e: 7a:4d:c0:c9:93:d4:41:44:5f:84:fa:3e:7e:ae:9b:a4:5b:c3: 90:68:c1:cc:04:39:6d:1c:db:f6:e7:61:bd:92:71:0c:14:0d: d0:2f:0b:df:b5:2e:fc:cc:35:a0:01:1a:a1:97:93:a2:0d:8d: 75:90:cf:46:f4:49:f7:33:ce:2b:3c:2c:4d:66:5a:de:18:45: 1e:4e:d0:fc:08:08:c6:e8:51:0b:87:9b:8a:28:df:b3:3b:28: dd:2f:af:ec:77:e1:ae:e8:2c:83:76:d2:9e:d2:86:42:96:31: 15:85:2a:66:f7:55:fb:fb:a3:09:dd:24:ac:39:e5:03:cf:b6: 77:9c:db:03:ba:18:4d:35:36:f2:30:45:f2:5a:cb:c0:0b:09: 59:47:3f:c8:e3:57:50:0d:2f:e1:96:02:50:c8:7a:e8:69:b9: c4:f2:ff:ac:b2:f2:58:65:d8:d7:a1:b6:11:78:61:ba:93:95: 90:32:b3:72:7f:cb:2b:04:32:57:89:6f:bd:70:2b:67:b7:d3: 64:89:42:87:42:8d:4e:87:60:26:44:dd:2b:31:d9:e1:e0:c5: 4c:2a:46:c3:71:ba:9f:59:b4:00:9e:2a:f2:a1:70:a2:5b:5c: 10:3c:7f:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz QURBNEZFMTAwHhcNMjUwODA5MDQzMzU3WhcNMjUwODE2MDQzMzU2WjAYMRYwFAYD VQQDEw02ODk2Y2ZiNS0wNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZH2USXWTpSpSdt3xlW2flTbQR8qx+Ht7QzviKtt33Ubqtv/W46QHUopmehI rU1MmO40u/AmYDv8QkTI27HeVavTtDR4kDbwPWjTuC1kc2uiiBpJQNMHCVhNjUqw Vj8vPK5dQEL4H+qwn9Fq5c6ygjP5Gag0C1gQmcoG5mWlQH0CYDfTTRqj4RO9ydNr ZqgeRHE44/I/vep8uHHqC0lPm8OpKQruke+E1+Xw8T0RfoXKsTEdlYRdrN+piUSI BRIqwFv/jo7sXXs7OnkPVsJQTNR8zfYtQ+VrUagioDWk00PglyH0y2eKiH0M+MVs OwAEcwJBmrCUaaGLL9sf89+mnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtM7lvF ZSYxS21ecJOQsDtptZHCMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMwNi8xNzE3OTIwRTcxNkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndR eG4zZXE3b09NMTQ2MmtfaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp/QADHXT+9bD1SSan8vSYDp56TcDJk9RBRF+E+j5+rpukW8OQaMHM BDltHNv252G9knEMFA3QLwvftS78zDWgARqhl5OiDY11kM9G9En3M84rPCxNZlre GEUeTtD8CAjG6FELh5uKKN+zOyjdL6/sd+Gu6CyDdtKe0oZCljEVhSpm91X7+6MJ 3SSsOeUDz7Z3nNsDuhhNNTbyMEXyWsvACwlZRz/I41dQDS/hlgJQyHroabnE8v+s svJYZdjXobYReGG6k5WQMrNyf8srBDJXiW+9cCtnt9NkiUKHQo1Oh2AmRN0rMdnh 4MVMKkbDcbqfWbQAniryoXCiW1wQPH+/ -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:25 2025 by rpki-client