$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: X7L/8ABWLmLSPeo0IuLgXc5QVqdFTM7soHBAI+z+0SU= Subject key identifier: 0C:65:A3:00:D8:E3:0F:31:92:41:B7:4F:C1:8B:48:70:F4:D2:85:5E Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 58 Signing time: Sat 09 Aug 2025 07:43:30 +0000 Manifest this update: Sat 09 Aug 2025 07:43:30 +0000 Manifest next update: Sat 16 Aug 2025 07:43:30 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: AZoCP2tCaeW+vm4IwYtntwjnwkw//a3nSaAEtU4h3jc=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Aug 9 07:43:30 2025 GMT Not After : Aug 16 07:43:30 2025 GMT Subject: CN=6896fc22-25c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:99:97:b4:8e:58:af:7b:84:79:34:54:3d: 1f:dc:8c:72:ee:b0:e6:f3:69:e1:93:fb:7b:42:9d: 99:e6:c1:4f:8b:05:79:44:0c:d5:f6:63:ce:19:59: 53:14:e4:c3:5d:f9:34:c9:73:3b:8f:eb:da:d7:e9: 48:01:bc:fc:2d:eb:56:9e:37:ae:ae:35:23:f4:80: f3:e9:99:e1:eb:e7:7d:39:c5:1f:71:7a:d5:01:ae: 42:75:52:07:1c:bc:d2:81:95:06:9b:b8:02:43:93: ce:e7:39:09:16:32:e5:3e:d2:fa:cc:90:9a:68:b6: 5a:98:7d:54:5b:82:ae:a9:4a:6f:28:c0:2d:3a:cc: bd:6c:ea:f4:81:25:a7:a9:9c:b7:20:f8:36:62:3a: 31:82:19:99:e7:70:24:a7:93:41:cf:d5:36:12:2b: 1f:1c:f7:4b:84:2b:24:67:69:3e:49:d1:d1:e9:eb: 37:7c:08:02:bf:6b:70:aa:6a:1a:45:43:24:1b:e6: 12:e3:3d:6d:a1:e3:20:47:37:48:aa:fb:96:6a:37: a8:3d:6d:fe:31:e9:9b:7c:56:dd:d2:f7:31:2a:a7: a2:f4:dc:e0:00:16:d3:84:0b:23:65:08:a5:a9:1e: 56:25:23:c8:52:b7:b8:f6:55:70:77:cc:e5:29:99: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:A3:00:D8:E3:0F:31:92:41:B7:4F:C1:8B:48:70:F4:D2:85:5E X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:63:56:76:9c:3a:ca:b7:19:6f:80:43:f5:29:43:fa:a0:cb: 82:8d:a9:8e:3b:66:28:98:30:8f:9a:90:16:34:9a:ae:cc:d4: 2c:66:36:41:e6:f5:93:c5:7f:79:fd:af:ed:2e:62:21:3c:94: 65:06:be:08:a1:49:50:f5:45:7d:7f:c5:ac:c3:aa:46:58:8b: 61:22:0a:3c:a0:82:f5:d8:e7:30:7b:c4:3c:c4:0c:b1:36:65: b0:5c:b3:5a:b9:4a:0a:09:32:91:11:d6:a3:7b:f3:66:21:e2: 25:1c:97:8c:9f:12:a1:fe:b3:e3:a3:4e:8c:55:5a:82:2c:26: 4d:27:cf:57:fe:f0:61:18:d2:78:be:df:f1:54:7d:46:04:7c: 92:3e:e8:0b:7f:b8:e2:c7:65:fd:b1:98:83:6d:37:12:2f:3f: 7b:f4:9c:9d:72:f2:9a:13:7b:e7:90:b3:53:27:47:5e:c0:27: 09:c8:5e:4c:4f:0b:e9:25:44:a0:24:7b:ad:30:c2:ee:21:f6: 86:b9:a8:b3:5c:66:52:f2:d3:88:42:c7:68:cd:2d:30:9b:29: 2e:b4:3a:ab:52:91:5c:43:db:e0:74:2d:c3:48:b0:bd:e4:b8: ed:dd:2f:c4:64:58:35:b8:dd:60:a9:cc:c7:75:29:3d:c0:2b: 83:1c:ee:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNEU2OEIwNDhERDNEREJBNUY0NzhGMUZEMjg4QTg2MThC QTlGQUJBQTAeFw0yNTA4MDkwNzQzMzBaFw0yNTA4MTYwNzQzMzBaMBgxFjAUBgNV BAMTDTY4OTZmYzIyLTI1YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpypmXtI5Yr3uEeTRUPR/cjHLusObzaeGT+3tCnZnmwU+LBXlEDNX2Y84ZWVMU 5MNd+TTJczuP69rX6UgBvPwt61aeN66uNSP0gPPpmeHr5305xR9xetUBrkJ1Ugcc vNKBlQabuAJDk87nOQkWMuU+0vrMkJpotlqYfVRbgq6pSm8owC06zL1s6vSBJaep nLcg+DZiOjGCGZnncCSnk0HP1TYSKx8c90uEKyRnaT5J0dHp6zd8CAK/a3CqahpF QyQb5hLjPW2h4yBHN0iq+5ZqN6g9bf4x6Zt8Vt3S9zEqp6L03OAAFtOECyNlCKWp HlYlI8hSt7j2VXB3zOUpmSPXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDGWjANjj DzGSQbdPwYtIcPTShV4wHwYDVR0jBBgwFoAUTmiwSN0926X0ePH9KIqGGLqfq6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzNDQjc3OUUwRjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG1pd1NOMDkyNlgwZVBIOUtJcUdHTHFmcTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzNDQjc3OUUwRjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZY MGVQSDlLSXFHR0xxZnE2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpjVnacOsq3GW+AQ/UpQ/qgy4KNqY47ZiiYMI+akBY0mq7M1CxmNkHm 9ZPFf3n9r+0uYiE8lGUGvgihSVD1RX1/xazDqkZYi2EiCjyggvXY5zB7xDzEDLE2 ZbBcs1q5SgoJMpER1qN782Yh4iUcl4yfEqH+s+OjToxVWoIsJk0nz1f+8GEY0ni+ 3/FUfUYEfJI+6At/uOLHZf2xmINtNxIvP3v0nJ1y8poTe+eQs1MnR17AJwnIXkxP C+klRKAke60wwu4h9oa5qLNcZlLy04hCx2jNLTCbKS60OqtSkVxD2+B0LcNIsL3k uO3dL8RkWDW43WCpzMd1KT3AK4Mc7pw= -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:23 2025 by rpki-client