$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: ybpxmZxm+xBqFiveks9wBZF8qabv0UsX3jd0hyYMimQ= Subject key identifier: 1A:08:97:4C:8D:95:7B:9F:34:2F:55:F6:79:00:92:1C:12:5E:B1:52 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 29 Signing time: Thu 07 Aug 2025 08:24:59 +0000 Manifest this update: Thu 07 Aug 2025 08:24:59 +0000 Manifest next update: Thu 14 Aug 2025 08:24:59 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: LLmKkp3u5yHf3MzPXPxZy3S8PokS1AscnrFGTZd7p8s=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Aug 7 08:24:59 2025 GMT Not After : Aug 14 08:24:59 2025 GMT Subject: CN=689462db-e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:f8:b8:dd:93:41:9a:25:d3:b3:9e:7e:66: f9:a3:52:3d:43:d3:e8:99:59:25:0b:04:88:3d:eb: 2a:76:37:d4:20:88:dd:6c:59:d3:59:d9:28:fb:53: f4:8f:58:c9:4b:2e:25:1f:ec:f0:f5:c5:76:f7:f7: 39:72:ed:ab:95:db:5d:65:25:92:72:ae:35:14:1f: 79:90:81:32:d0:1e:e7:57:68:97:b9:49:ed:68:b9: bd:d6:46:66:e0:ba:7c:2d:94:6a:e1:bf:79:cf:b6: 5f:02:50:e1:7b:60:80:5d:a2:6a:43:58:7e:3d:fa: da:f7:b0:ed:ce:8a:de:84:61:7d:27:0c:e1:48:93: 71:f5:72:b3:dc:93:a0:3d:be:84:27:af:e5:8b:a6: e0:8c:d2:aa:0e:af:73:e9:55:0d:7e:2f:43:07:d9: 01:76:e5:7f:50:84:f3:0b:ce:02:82:69:84:73:b6: 8c:1b:4c:59:99:39:c6:27:5d:1d:de:4f:82:8f:13: cb:b0:d9:b2:e4:8b:ec:59:fd:94:34:a9:78:ff:25: 78:e5:76:52:c7:c3:8d:9a:71:89:5c:cf:bd:25:ec: 73:4c:e2:ce:82:df:a7:66:15:96:28:a7:4a:57:df: 51:44:56:a6:2f:a7:67:b4:f1:00:d9:48:3c:f0:45: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:97:4C:8D:95:7B:9F:34:2F:55:F6:79:00:92:1C:12:5E:B1:52 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a3:b7:ee:f2:c4:45:e0:d4:05:1d:1d:88:97:09:8d:5b:5e: b4:7c:4d:31:20:a6:db:63:b8:c0:d0:b0:bf:f8:34:9f:23:5f: 7c:be:14:1c:0a:86:e9:9f:25:06:8b:06:f8:bf:c3:b3:a4:7b: 3c:ec:b1:ff:82:7b:dd:1f:12:f9:80:37:55:83:ef:d9:c4:66: c8:23:7a:e7:36:64:98:b4:a5:05:71:dc:08:f3:0e:4b:7a:2a: 07:3d:51:e9:3a:e9:ce:8d:f6:a3:71:0b:70:e7:1a:56:18:bf: 4d:38:88:f6:c1:16:fd:27:59:23:3e:00:78:0a:12:64:09:e5: 56:38:9b:fd:c2:5e:0c:fe:ee:57:86:c9:cf:6c:15:91:7e:16: b1:ef:af:a4:14:f6:00:12:c8:2b:86:50:0d:0f:cd:06:d6:5f: eb:70:61:b8:a5:62:6c:83:9b:24:b4:dc:9f:e8:03:f1:4d:b7: d1:a9:16:87:e7:12:05:e0:5e:1c:57:90:33:8d:0a:d4:4f:78: 3d:23:a5:99:7c:d6:c6:c0:62:c4:5d:70:24:ab:4b:f5:df:2a: 08:4e:97:c5:ad:47:4c:68:97:5b:3e:24:87:97:4e:3d:b8:6d: e0:d2:5b:8e:de:53:26:33:a3:30:66:74:e7:11:06:03:51:b7: f3:96:8d:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTA4MDcwODI0NTlaFw0yNTA4MTQwODI0NTlaMBgxFjAUBgNV BAMTDTY4OTQ2MmRiLWUyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3Pi43ZNBmiXTs55+ZvmjUj1D0+iZWSULBIg96yp2N9QgiN1sWdNZ2Sj7U/SP WMlLLiUf7PD1xXb39zly7auV211lJZJyrjUUH3mQgTLQHudXaJe5Se1oub3WRmbg unwtlGrhv3nPtl8CUOF7YIBdompDWH49+tr3sO3Oit6EYX0nDOFIk3H1crPck6A9 voQnr+WLpuCM0qoOr3PpVQ1+L0MH2QF25X9QhPMLzgKCaYRztowbTFmZOcYnXR3e T4KPE8uw2bLki+xZ/ZQ0qXj/JXjldlLHw42acYlcz70l7HNM4s6C36dmFZYop0pX 31FEVqYvp2e08QDZSDzwRTiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGgiXTI2V e580L1X2eQCSHBJesVIwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyjt+7yxEXg1AUdHYiXCY1bXrR8TTEgpttjuMDQsL/4NJ8jX3y+FBwK humfJQaLBvi/w7Okezzssf+Ce90fEvmAN1WD79nEZsgjeuc2ZJi0pQVx3AjzDkt6 Kgc9Uek66c6N9qNxC3DnGlYYv004iPbBFv0nWSM+AHgKEmQJ5VY4m/3CXgz+7leG yc9sFZF+FrHvr6QU9gASyCuGUA0PzQbWX+twYbilYmyDmyS03J/oA/FNt9GpFofn EgXgXhxXkDONCtRPeD0jpZl81sbAYsRdcCSrS/XfKghOl8WtR0xol1s+JIeXTj24 beDSW47eUyYzozBmdOcRBgNRt/OWjWo= -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:17 2025 by rpki-client