$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: LkX/yeGb2UhuOODGJ93sjOfSyqxKF9B27GX2k7yl9Vw= Subject key identifier: 45:D0:74:92:38:30:64:2B:8D:FD:DF:15:5E:F0:A6:11:00:D2:F3:E0 Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: E0 Signing time: Sat 09 Aug 2025 05:53:06 +0000 Manifest this update: Sat 09 Aug 2025 05:53:05 +0000 Manifest next update: Sat 16 Aug 2025 05:53:05 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: qIeo0ZVjwU2s+4YVLIM6lh5qGhZFEiQicamMYPHj2X0=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Aug 9 05:53:05 2025 GMT Not After : Aug 16 05:53:05 2025 GMT Subject: CN=6896e242-240c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:e4:ea:f2:a9:bc:46:ac:08:39:3c:b7:aa: c4:40:1d:59:09:f1:e3:30:31:eb:c3:f6:71:6d:4d: 1a:23:40:1c:74:9a:d4:59:64:a4:ca:9f:32:83:7b: 09:38:77:bb:6c:fd:4a:21:33:09:06:d8:44:9c:63: 41:37:04:0d:f1:78:f9:9a:75:2b:55:93:4b:ca:5b: 9d:8f:c1:93:26:62:62:1a:aa:36:ba:28:4f:18:08: c9:77:29:d2:37:88:99:bb:5b:03:5b:1e:e4:5b:83: b2:4c:5f:ee:40:44:89:84:85:76:5f:37:e4:12:51: 1f:34:4a:7b:15:b8:d1:b2:c8:8f:c4:20:48:18:15: c0:ff:75:e5:68:43:80:a4:a3:f9:4b:61:93:9d:f9: cc:ca:37:7c:39:ce:98:dc:1f:4b:c1:ce:e3:53:e3: e6:c2:44:25:6d:aa:81:fe:10:1a:fc:2c:9a:8e:6f: 09:e4:76:1c:31:3b:07:ff:de:bb:d8:2b:fb:25:44: c4:47:79:d3:c1:34:43:ee:50:4f:81:2a:34:74:38: 6f:e0:14:4c:11:da:89:32:00:41:41:a2:f5:4b:eb: 08:a9:a6:49:29:bc:df:01:c9:98:09:af:78:fd:6c: ff:1d:7b:d0:0c:d6:ab:9a:29:48:e1:98:28:e5:ef: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D0:74:92:38:30:64:2B:8D:FD:DF:15:5E:F0:A6:11:00:D2:F3:E0 X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:90:a4:67:bf:da:64:cb:5d:94:97:cc:35:3f:97:04:a1:9c: 43:e2:17:38:8a:87:7c:02:0e:5c:16:a7:93:dc:07:55:49:82: cb:21:c6:91:b7:75:dc:42:d3:0b:2a:6b:f1:51:88:0e:f8:87: 92:30:2a:84:52:71:5a:a3:72:fc:5d:e3:c0:fb:40:4f:df:ec: 37:28:b8:b2:b3:d8:e3:5c:b1:cd:79:6b:a7:04:ee:43:47:2d: 0f:33:f4:35:c7:9c:c6:87:29:2b:1e:26:4a:a2:59:85:f7:56: 44:f5:55:86:57:66:ec:75:7c:b9:99:77:e6:90:fd:b3:75:ca: 6f:a2:58:af:b4:12:03:ec:33:18:22:5e:e8:25:14:21:0b:1c: 97:6d:41:e3:57:12:44:f5:26:c2:16:5b:f5:2a:f1:db:ee:8b: 38:f5:3f:70:97:95:0d:73:72:ed:45:43:38:96:3e:8b:e2:65: 91:f2:13:68:28:4f:e3:87:34:35:60:ef:8b:e8:bc:79:9a:8e: f3:58:4f:62:c1:32:88:3c:6e:0b:01:63:ac:0e:b0:78:45:21: e4:a2:31:ae:64:61:7c:57:a6:d4:67:29:6f:12:6d:6c:13:e3: 8d:4c:08:61:a0:c7:33:88:ba:01:8a:96:76:65:43:0b:b5:29: ba:77:6a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUwODA5MDU1MzA1WhcNMjUwODE2MDU1MzA1WjAYMRYwFAYD VQQDEw02ODk2ZTI0Mi0yNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HLk6vKpvEasCDk8t6rEQB1ZCfHjMDHrw/ZxbU0aI0AcdJrUWWSkyp8yg3sJ OHe7bP1KITMJBthEnGNBNwQN8Xj5mnUrVZNLyludj8GTJmJiGqo2uihPGAjJdynS N4iZu1sDWx7kW4OyTF/uQESJhIV2XzfkElEfNEp7FbjRssiPxCBIGBXA/3XlaEOA pKP5S2GTnfnMyjd8Oc6Y3B9Lwc7jU+PmwkQlbaqB/hAa/Cyajm8J5HYcMTsH/967 2Cv7JUTER3nTwTRD7lBPgSo0dDhv4BRMEdqJMgBBQaL1S+sIqaZJKbzfAcmYCa94 /Wz/HXvQDNarmilI4Zgo5e8/YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXQdJI4 MGQrjf3fFV7wphEA0vPgMB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOkKRnv9pky12Ul8w1P5cEoZxD4hc4iod8Ag5cFqeT3AdVSYLLIcaR t3XcQtMLKmvxUYgO+IeSMCqEUnFao3L8XePA+0BP3+w3KLiys9jjXLHNeWunBO5D Ry0PM/Q1x5zGhykrHiZKolmF91ZE9VWGV2bsdXy5mXfmkP2zdcpvolivtBID7DMY Il7oJRQhCxyXbUHjVxJE9SbCFlv1KvHb7os49T9wl5UNc3LtRUM4lj6L4mWR8hNo KE/jhzQ1YO+L6Lx5mo7zWE9iwTKIPG4LAWOsDrB4RSHkojGuZGF8V6bUZylvEm1s E+ONTAhhoMcziLoBipZ2ZUMLtSm6d2qC -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:26 2025 by rpki-client