$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: mTGTI4sibskEc/ep+qQinWFUk9yM1zr6+9JZHGVyfB4= Subject key identifier: 3F:6B:2A:22:A1:98:93:D8:D2:02:91:A9:5F:84:C2:A0:F5:C6:D1:87 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C66 Signing time: Sun 10 Aug 2025 18:25:21 +0000 Manifest this update: Sun 10 Aug 2025 18:25:21 +0000 Manifest next update: Sun 17 Aug 2025 18:25:21 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: 8IIDj/2OxcaEjXJroXpJ4BZYbn6IW9tfuiam9w3AEUA=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Aug 10 18:25:21 2025 GMT Not After : Aug 17 18:25:21 2025 GMT Subject: CN=6898e411-b9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:89:04:b5:92:d0:bf:c7:69:94:fa:07:c0: 1a:04:93:b0:15:fc:e5:94:ba:2b:ea:67:c0:1e:ff: 5f:e1:29:4a:05:bb:bb:67:90:1f:ef:f6:c1:85:4d: e7:99:35:14:6a:a3:cb:c1:4d:9d:9f:8b:60:75:8c: 27:be:97:fd:e6:e5:2f:4a:29:29:c6:94:79:36:70: 57:ff:ac:51:0c:d9:27:9a:64:1d:51:b3:c8:20:49: f3:88:51:55:9f:63:bb:73:28:7f:85:0b:b2:e9:8a: b1:fa:51:1d:70:20:16:1d:d6:9d:db:39:85:b9:c1: 1e:75:2f:87:26:5a:4c:5f:0e:3e:82:28:6e:91:77: 47:1e:1a:88:e1:13:9a:e3:fe:6e:2e:38:38:ec:5b: f0:7d:f5:8a:d6:ef:27:15:e6:ea:61:16:cc:ca:49: 2e:24:9e:63:21:0e:1a:a8:7e:cb:a6:42:41:bc:11: f0:3f:a2:e6:d9:7b:5f:43:d1:ad:1f:12:ad:49:bc: e7:76:dd:6d:86:2e:7b:e2:e1:06:d2:6e:84:63:9d: e7:3b:4c:b0:70:44:f8:2a:49:ce:03:89:3c:0b:49: 15:1e:f3:ee:5e:7e:e3:d0:07:e3:5a:cb:85:f9:78: 38:b5:fc:00:b8:d2:91:fb:52:26:a7:8a:66:25:79: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6B:2A:22:A1:98:93:D8:D2:02:91:A9:5F:84:C2:A0:F5:C6:D1:87 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:85:c8:70:91:9b:22:e0:20:60:6c:dc:cb:eb:dc:28:55:b1: 51:d5:75:2e:24:02:aa:63:1a:4c:5c:6e:05:c8:38:39:fd:f4: 63:5d:6c:b8:ac:d5:b4:96:e1:fc:d3:2a:fb:de:47:ab:3e:f2: 22:59:9c:eb:99:20:02:bb:cb:21:24:7f:ee:29:4f:70:b4:03: e7:76:46:30:16:bc:57:c0:93:a1:db:85:23:a6:a1:ca:52:7d: 28:65:44:de:b4:c5:78:85:4b:80:46:b9:74:02:d9:08:7a:b2: a1:19:81:6c:c3:21:f9:bd:fb:0e:3b:39:a0:8d:54:e0:61:d0: 6e:04:59:08:69:bb:7e:00:39:af:46:6c:db:77:f6:5b:49:16: 8b:cc:41:45:77:b2:ad:61:6f:ed:f8:6f:57:ee:d0:b3:9e:8e: 9f:fa:7d:e0:32:b2:0d:e4:0a:e8:ac:32:60:0e:ec:3b:b5:7a: 4a:19:fe:ec:1d:1d:e2:73:4a:5b:5b:85:da:66:03:a0:53:42: a6:a8:1a:fa:4b:51:78:11:2b:8a:4c:f0:38:77:4b:8b:e4:36: ac:5e:ba:b5:bf:03:b0:a9:65:0f:5b:87:b7:f0:75:f1:89:17: bc:b0:28:91:a6:bd:66:94:0d:f1:e8:13:9c:a6:2a:26:57:08: 8c:56:12:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUwODEwMTgyNTIxWhcNMjUwODE3MTgyNTIxWjAYMRYwFAYD VQQDEw02ODk4ZTQxMS1iOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyuJBLWS0L/HaZT6B8AaBJOwFfzllLor6mfAHv9f4SlKBbu7Z5Af7/bBhU3n mTUUaqPLwU2dn4tgdYwnvpf95uUvSikpxpR5NnBX/6xRDNknmmQdUbPIIEnziFFV n2O7cyh/hQuy6Yqx+lEdcCAWHdad2zmFucEedS+HJlpMXw4+gihukXdHHhqI4ROa 4/5uLjg47FvwffWK1u8nFebqYRbMykkuJJ5jIQ4aqH7LpkJBvBHwP6Lm2XtfQ9Gt HxKtSbzndt1thi574uEG0m6EY53nO0ywcET4KknOA4k8C0kVHvPuXn7j0AfjWsuF +Xg4tfwAuNKR+1Imp4pmJXmWvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9rKiKh mJPY0gKRqV+EwqD1xtGHMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThchwkZsi4CBgbNzL69woVbFR1XUuJAKqYxpMXG4FyDg5/fRjXWy4 rNW0luH80yr73kerPvIiWZzrmSACu8shJH/uKU9wtAPndkYwFrxXwJOh24UjpqHK Un0oZUTetMV4hUuARrl0AtkIerKhGYFswyH5vfsOOzmgjVTgYdBuBFkIabt+ADmv Rmzbd/ZbSRaLzEFFd7KtYW/t+G9X7tCzno6f+n3gMrIN5ArorDJgDuw7tXpKGf7s HR3ic0pbW4XaZgOgU0KmqBr6S1F4ESuKTPA4d0uL5DasXrq1vwOwqWUPW4e38HXx iRe8sCiRpr1mlA3x6BOcpiomVwiMVhK/ -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:05 2025 by rpki-client