$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: Nv9nWSWNy1UO1YELj5urLOrv7/SwBdEuxQ49Pv/F57w= Subject key identifier: 6E:DE:4F:64:C7:BB:C9:CD:42:D9:5F:82:9D:01:A2:CC:D7:A4:8E:D0 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 058F Signing time: Fri 08 Aug 2025 23:42:35 +0000 Manifest this update: Fri 08 Aug 2025 23:42:35 +0000 Manifest next update: Fri 15 Aug 2025 23:42:35 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: VS6bpuu9K+16ZL4np7x9Qj60k/WJ68a1EeVM0qb8chk=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Aug 8 23:42:35 2025 GMT Not After : Aug 15 23:42:35 2025 GMT Subject: CN=68968b6b-0619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:87:87:c7:5f:17:7a:4c:c1:49:26:4a:20: 04:19:25:b8:fb:42:a5:df:da:6e:f7:0e:0b:d3:64: a8:35:50:ea:55:49:7c:5a:9d:5b:9b:44:4f:68:0a: 07:6a:3d:9e:37:ec:1d:29:35:b3:9a:d7:a6:ea:c4: a1:9d:a5:28:12:d7:c3:eb:4a:80:51:e3:9a:76:82: 9a:a0:15:a5:22:05:cb:6e:66:65:af:4f:7e:46:5a: de:c6:b2:70:e4:1e:fe:a6:a3:83:06:51:ed:08:47: f5:7d:44:f1:ee:6a:5a:08:1e:0d:9c:c5:e8:67:cd: ad:e8:a0:07:71:bb:eb:f3:1a:06:f3:71:7d:2c:12: b4:a1:1c:f0:ce:e1:c2:c5:0b:ec:54:cf:0e:56:70: 0b:7f:13:0d:d0:20:4d:2c:9c:8c:78:19:9a:86:a7: d1:6c:47:fb:6d:05:8e:01:4a:12:89:be:67:6c:ec: 41:6e:25:5e:c2:77:e6:ca:b5:1c:e7:c7:5c:0e:a0: d8:29:33:33:26:15:82:d6:8a:b3:09:a7:0f:3d:ce: 18:60:d0:58:71:95:cf:b2:21:46:3c:8a:dc:e7:04: 0a:69:42:04:32:3d:fb:56:5f:17:0f:a7:ac:59:fc: 88:af:0d:a5:a9:fa:e0:ed:07:44:ba:51:c8:3d:89: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:4F:64:C7:BB:C9:CD:42:D9:5F:82:9D:01:A2:CC:D7:A4:8E:D0 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:00:a7:26:d9:7a:7f:a6:08:99:ca:73:ff:72:c1:07:7c:0e: 9c:36:22:43:d8:ea:21:a1:f7:60:6d:a6:fd:76:01:98:3b:6e: 9e:08:8a:0e:b9:d0:12:1d:7b:20:70:36:b2:57:42:fd:6c:a7: 22:82:93:19:2d:47:19:32:3b:1e:9e:73:51:8e:7d:ec:8e:0e: c0:0f:41:29:55:a6:12:3a:ab:3c:fd:2a:cb:66:84:2f:ef:93: 66:4f:3d:4e:8e:5b:ed:a0:92:d1:66:da:ef:52:9a:fc:ee:e9: f9:6d:a1:22:e2:e9:4f:db:44:16:d1:42:00:12:15:5c:db:aa: 53:a7:5d:e3:2b:a9:0c:1f:2c:22:69:2b:2f:84:7a:ed:b6:2e: 1c:22:d0:37:7e:bc:e7:61:f8:9e:10:7f:5e:4f:16:13:87:09: a2:29:93:d6:30:4e:bd:2b:b8:c8:38:47:8b:54:56:fc:42:96: 05:11:6a:35:46:8f:b7:7b:4c:ed:6e:bb:d4:48:8d:60:33:8f: 7e:a9:9f:05:e0:44:20:85:ae:7f:d4:39:a9:c8:9f:1e:b3:cd: f6:fa:e7:35:59:bd:73:6d:df:51:ff:5e:f8:56:d2:60:40:9e: 7e:62:32:84:ca:87:ce:3a:1f:21:00:e5:a6:1e:02:48:c8:c9: 47:75:45:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwODA4MjM0MjM1WhcNMjUwODE1MjM0MjM1WjAYMRYwFAYD VQQDEw02ODk2OGI2Yi0wNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztaHh8dfF3pMwUkmSiAEGSW4+0Kl39pu9w4L02SoNVDqVUl8Wp1bm0RPaAoH aj2eN+wdKTWzmtem6sShnaUoEtfD60qAUeOadoKaoBWlIgXLbmZlr09+RlrexrJw 5B7+pqODBlHtCEf1fUTx7mpaCB4NnMXoZ82t6KAHcbvr8xoG83F9LBK0oRzwzuHC xQvsVM8OVnALfxMN0CBNLJyMeBmahqfRbEf7bQWOAUoSib5nbOxBbiVewnfmyrUc 58dcDqDYKTMzJhWC1oqzCacPPc4YYNBYcZXPsiFGPIrc5wQKaUIEMj37Vl8XD6es WfyIrw2lqfrg7QdEulHIPYlzewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7eT2TH u8nNQtlfgp0BoszXpI7QMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYAKcm2Xp/pgiZynP/csEHfA6cNiJD2Oohofdgbab9dgGYO26eCIoO udASHXsgcDayV0L9bKcigpMZLUcZMjsennNRjn3sjg7AD0EpVaYSOqs8/SrLZoQv 75NmTz1OjlvtoJLRZtrvUpr87un5baEi4ulP20QW0UIAEhVc26pTp13jK6kMHywi aSsvhHrtti4cItA3frznYfieEH9eTxYThwmiKZPWME69K7jIOEeLVFb8QpYFEWo1 Ro+3e0ztbrvUSI1gM49+qZ8F4EQgha5/1DmpyJ8es832+uc1Wb1zbd9R/174VtJg QJ5+YjKEyofOOh8hAOWmHgJIyMlHdUUI -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:20 2025 by rpki-client