$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: AgESL+Apl7mFWgfCgkqy+gvRiQK1ypU3XGph1l92wL4= Subject key identifier: 28:AF:33:32:95:21:12:2C:D5:56:ED:42:69:B3:6B:5E:AE:99:A1:00 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0C89 Signing time: Fri 08 Aug 2025 21:02:51 +0000 Manifest this update: Fri 08 Aug 2025 21:02:50 +0000 Manifest next update: Fri 15 Aug 2025 21:02:50 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: wiQZgrGVh5PJWrommp4ZlEYnBji8QTiZ8Q1P1UT+5mQ=) 2: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: S0EFM1LlMU93Q/SmaTsXJfrCySvLdm2xsJllc0bdMTA=) 3: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: qJqe7xZLrZpale4qfa8dX4Bwzzbb4MiCN1zRa6JcZMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Aug 8 21:02:50 2025 GMT Not After : Aug 15 21:02:50 2025 GMT Subject: CN=689665fb-0fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f4:22:ff:cb:74:03:54:87:8f:f8:aa:05:0e: 11:ee:ea:03:f8:67:5c:29:11:33:26:27:30:3a:46: a7:fc:9e:9f:bf:21:89:10:c6:1a:df:f0:d6:57:6c: 8b:d5:14:64:af:3d:57:05:70:16:60:8e:91:4d:21: d9:7d:84:19:9c:d4:a0:1e:72:1b:97:e3:18:2b:28: ee:db:d7:1b:01:09:a8:52:33:23:d0:16:f8:2d:af: 56:0c:77:0f:18:00:37:97:2e:26:9d:28:e6:0a:27: a7:5d:67:cb:ca:5a:af:a4:7e:56:70:ac:7a:3e:b1: 08:4a:58:bf:bb:fe:33:cb:8f:64:e7:de:62:21:eb: 78:bf:31:50:63:ae:70:75:17:eb:4f:89:34:67:cd: de:30:ac:89:90:57:c7:a9:6c:db:f1:3d:04:bc:39: 23:8c:0c:8f:15:44:8d:30:9f:9c:11:1e:4f:3b:e9: 5d:4d:bb:62:4c:89:32:60:bc:53:64:b2:12:3b:09: b6:2c:19:c4:0c:1f:18:d0:85:01:75:60:23:4a:44: 33:1e:9a:63:41:31:45:50:fe:8f:55:a7:ab:41:9a: 9a:ec:f0:b4:bf:de:fd:b0:0c:9f:9d:b1:23:f9:d2: 11:e3:dc:70:94:ba:4a:7c:da:6d:a7:25:4e:fe:c3: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AF:33:32:95:21:12:2C:D5:56:ED:42:69:B3:6B:5E:AE:99:A1:00 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e5:2d:e8:14:63:02:b9:a1:dc:ab:37:c1:96:bc:47:59:f6: 10:a2:b5:78:25:fd:f4:5c:99:a3:6a:9a:c7:78:8b:dd:41:dc: d8:0d:fe:d8:9b:d1:e6:09:8d:f9:23:ff:45:6c:2d:5f:1a:ff: 06:fc:f7:ec:b4:80:6e:85:52:d2:82:4a:3c:ec:78:5e:f7:9b: 59:78:61:df:92:3c:9f:12:9b:9d:f5:3f:06:c0:d5:26:56:9f: 0f:74:0e:aa:43:95:ef:24:f4:97:ee:69:f8:b1:21:a0:f6:50: 13:d0:f4:db:61:50:8a:ff:95:3c:e9:07:3a:71:1a:75:88:2f: bc:03:c5:05:c7:e2:18:db:6c:7f:54:4b:8e:eb:c9:1b:08:21: b7:2a:87:90:a0:65:93:be:ef:8b:d8:64:64:e2:ba:c0:18:c9: 73:66:d6:ad:b9:c1:a9:cd:43:cf:c0:3a:47:25:59:ba:6d:ff: 19:fa:7e:0e:27:5b:9d:ca:aa:11:3a:ba:dc:f1:cd:06:ea:3b: 3e:fb:55:56:74:ff:c0:cc:99:c9:a2:64:e8:53:da:4c:01:d4: 83:9b:f7:3a:c8:98:fe:19:f3:72:4a:ff:d5:ac:28:a7:5c:dc: b2:07:54:d7:89:99:a1:88:88:06:83:4c:de:55:b4:f5:c5:0f: 79:35:96:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjUwODA4MjEwMjUwWhcNMjUwODE1MjEwMjUwWjAYMRYwFAYD VQQDEw02ODk2NjVmYi0wZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vQi/8t0A1SHj/iqBQ4R7uoD+GdcKREzJicwOkan/J6fvyGJEMYa3/DWV2yL 1RRkrz1XBXAWYI6RTSHZfYQZnNSgHnIbl+MYKyju29cbAQmoUjMj0Bb4La9WDHcP GAA3ly4mnSjmCienXWfLylqvpH5WcKx6PrEISli/u/4zy49k595iIet4vzFQY65w dRfrT4k0Z83eMKyJkFfHqWzb8T0EvDkjjAyPFUSNMJ+cER5PO+ldTbtiTIkyYLxT ZLISOwm2LBnEDB8Y0IUBdWAjSkQzHppjQTFFUP6PVaerQZqa7PC0v979sAyfnbEj +dIR49xwlLpKfNptpyVO/sPh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCivMzKV IRIs1VbtQmmza16umaEAMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ5S3oFGMCuaHcqzfBlrxHWfYQorV4Jf30XJmjaprHeIvdQdzYDf7Y m9HmCY35I/9FbC1fGv8G/PfstIBuhVLSgko87Hhe95tZeGHfkjyfEpud9T8GwNUm Vp8PdA6qQ5XvJPSX7mn4sSGg9lAT0PTbYVCK/5U86Qc6cRp1iC+8A8UFx+IY22x/ VEuO68kbCCG3KoeQoGWTvu+L2GRk4rrAGMlzZtatucGpzUPPwDpHJVm6bf8Z+n4O J1udyqoROrrc8c0G6js++1VWdP/AzJnJomToU9pMAdSDm/c6yJj+GfNySv/VrCin XNyyB1TXiZmhiIgGg0zeVbT1xQ95NZah -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:15 2025 by rpki-client