$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: hW4usU9VkZcdiRunjEsdcPqcdwQgPDX01RMwAh+91JY= Subject key identifier: E0:D5:1E:68:B0:FE:D3:34:2B:43:6C:02:B9:C5:64:E2:20:BE:9A:1A Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 2009 Signing time: Fri 08 Aug 2025 16:49:11 +0000 Manifest this update: Fri 08 Aug 2025 16:49:11 +0000 Manifest next update: Fri 15 Aug 2025 16:49:11 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: lIHIa7YltjNnXjtA6Sdrj2OVIx2Lrf5o4cMzM4jEygo=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Aug 8 16:49:11 2025 GMT Not After : Aug 15 16:49:11 2025 GMT Subject: CN=68962a87-f0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:1b:7b:26:8b:83:3a:9b:26:0c:cd:39:13: d2:9a:06:94:f3:72:83:c5:8e:bd:15:15:6e:1a:8a: 30:f0:cd:03:30:d6:b5:44:e7:de:79:c6:d4:7f:cc: a3:76:98:90:ce:dd:57:ef:c1:a4:2a:f8:59:85:6e: f1:c3:3b:aa:32:55:ec:75:1d:ab:ad:4a:d6:21:4a: 3e:0f:3a:a0:3c:e6:93:33:9c:96:58:b0:9e:0e:5d: a6:8c:8a:87:67:1e:06:21:3d:b2:3c:b7:71:1f:54: cb:d3:f7:0e:f0:72:54:ef:c6:d2:fa:9a:6d:ef:28: f0:5c:ff:4e:a6:3f:60:22:3d:72:a7:f7:6e:ec:58: 98:08:1e:f9:36:b4:74:78:67:a1:41:79:1f:06:1f: 25:ee:79:7d:92:52:c2:d8:19:c3:31:c8:6d:74:72: 8c:f4:51:41:6c:54:4b:e9:38:05:3f:74:94:01:23: f8:2e:86:4a:94:1e:ad:2e:94:c2:7a:db:4a:ca:7a: 2b:6f:ff:ea:38:27:71:13:2b:ad:a0:17:1b:c0:7a: 79:0d:13:9e:5d:bf:ed:27:d4:a8:52:7a:36:3a:fb: 4f:37:ff:df:cc:f4:1e:f5:4d:c9:53:49:14:3a:37: 69:25:16:26:f1:ec:a4:c3:1a:af:19:69:cc:c9:db: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:1E:68:B0:FE:D3:34:2B:43:6C:02:B9:C5:64:E2:20:BE:9A:1A X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:2f:87:0b:2a:7c:0c:7b:d4:ce:9b:b4:20:1e:8d:ef:2f:8c: 02:0c:33:33:98:07:88:3a:55:a7:c2:f0:d6:05:38:7b:33:cf: be:bc:02:50:2d:57:6d:ac:ab:e1:38:fc:0f:d1:7d:2f:2e:99: 2c:ae:09:53:d8:4b:1c:ac:e2:5e:75:18:a1:22:8f:be:06:74: df:90:22:2c:80:08:00:8e:f5:9e:da:9f:07:db:03:0f:51:74: f0:79:9d:c2:05:ab:4f:06:80:55:14:2c:21:6e:07:f1:dd:2f: 5f:9b:51:df:1a:1a:4d:ec:f1:94:16:ac:32:d9:79:9c:3f:88: 77:54:6c:44:50:06:e4:1b:9a:0d:61:37:d9:5f:1b:f1:ae:83: 98:f1:0f:02:cd:eb:4b:c0:c0:0a:88:25:da:32:d3:6d:62:5f: 5a:43:f3:41:e6:19:2d:f6:17:b1:7a:73:0a:e1:c1:48:55:a9: 72:ad:66:ac:63:30:a3:a5:ef:26:2a:31:6e:a7:f8:26:b4:b5: f8:b5:8d:3c:e5:82:b3:b8:00:21:ea:e8:16:1b:8b:11:13:46: b2:20:e7:79:11:0c:00:cb:b5:b8:1b:4d:ae:56:e8:c8:ff:3f: 97:b4:ed:9c:9b:80:cf:2f:b6:f7:f9:ae:cb:ae:9c:ff:1c:cf: 5e:5c:5f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwODA4MTY0OTExWhcNMjUwODE1MTY0OTExWjAYMRYwFAYD VQQDEw02ODk2MmE4Ny1mMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xAbeyaLgzqbJgzNORPSmgaU83KDxY69FRVuGoow8M0DMNa1ROfeecbUf8yj dpiQzt1X78GkKvhZhW7xwzuqMlXsdR2rrUrWIUo+DzqgPOaTM5yWWLCeDl2mjIqH Zx4GIT2yPLdxH1TL0/cO8HJU78bS+ppt7yjwXP9Opj9gIj1yp/du7FiYCB75NrR0 eGehQXkfBh8l7nl9klLC2BnDMchtdHKM9FFBbFRL6TgFP3SUASP4LoZKlB6tLpTC ettKynorb//qOCdxEyutoBcbwHp5DROeXb/tJ9SoUno2OvtPN//fzPQe9U3JU0kU OjdpJRYm8eykwxqvGWnMydubAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODVHmiw /tM0K0NsArnFZOIgvpoaMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDL4cLKnwMe9TOm7QgHo3vL4wCDDMzmAeIOlWnwvDWBTh7M8++vAJQ LVdtrKvhOPwP0X0vLpksrglT2EscrOJedRihIo++BnTfkCIsgAgAjvWe2p8H2wMP UXTweZ3CBatPBoBVFCwhbgfx3S9fm1HfGhpN7PGUFqwy2XmcP4h3VGxEUAbkG5oN YTfZXxvxroOY8Q8CzetLwMAKiCXaMtNtYl9aQ/NB5hkt9hexenMK4cFIValyrWas YzCjpe8mKjFup/gmtLX4tY085YKzuAAh6ugWG4sRE0ayIOd5EQwAy7W4G02uVujI /z+XtO2cm4DPL7b3+a7Lrpz/HM9eXF+L -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:47 2025 by rpki-client