$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: 2A/BA/4svYfcAnc4R+b2UakIkmTfmKYY3QkTfn2dJ3U= Subject key identifier: 31:1E:B2:BE:BC:76:3E:46:A3:CE:7C:B1:30:8C:17:B5:72:5D:CA:73 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 020A Signing time: Fri 19 Sep 2025 02:42:14 +0000 Manifest this update: Fri 19 Sep 2025 02:42:13 +0000 Manifest next update: Fri 26 Sep 2025 02:42:13 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: qJ6Zdffkz03fn9ZA6/Hf0mFEvD9evwNZi0CzK9tO0xw=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Sep 19 02:42:13 2025 GMT Not After : Sep 26 02:42:13 2025 GMT Subject: CN=68ccc306-f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:90:40:c4:a8:bc:de:6a:a1:be:98:c8:48: 35:d2:02:d8:55:5e:5e:aa:8b:de:45:c5:f8:0d:e0: 8f:56:22:43:87:d3:79:78:f5:79:7f:1a:16:00:ab: ae:1f:66:d4:6e:69:f6:c1:91:76:8a:72:09:ae:07: 65:5d:5e:3f:bb:ef:5a:c9:eb:58:4b:67:79:23:e2: 18:e1:e3:e1:b5:a4:5f:0e:87:48:34:f6:b0:5c:1b: 0a:28:08:02:12:81:d6:d9:c9:50:31:2d:04:f9:6e: 4d:62:88:c7:4c:c5:d2:1c:b5:b3:b2:26:d7:2a:12: 5d:83:7f:ec:d9:b7:4b:ed:a6:3d:9f:0e:42:67:9f: 29:83:af:9b:96:ab:c9:b5:a5:5a:ce:1c:90:87:b3: dd:57:d1:91:8b:d0:6a:8a:8d:35:8b:d0:be:eb:e7: e2:1e:b5:7e:33:99:3e:e6:11:ae:9a:23:26:07:a6: b9:57:7b:0d:46:5f:5e:1a:b5:25:db:ea:be:63:7e: 0a:28:51:82:d9:de:61:c3:88:e4:0f:52:53:c4:f3: 36:f6:4b:70:7f:05:54:aa:5d:9b:74:76:8c:97:eb: fa:c1:4f:f7:21:4f:2e:55:cd:e0:e2:8e:70:ca:e6: 76:8a:7c:fc:c0:2f:10:a9:f2:67:53:67:5d:e9:7a: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1E:B2:BE:BC:76:3E:46:A3:CE:7C:B1:30:8C:17:B5:72:5D:CA:73 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:71:80:6e:06:85:cd:f6:80:cc:ff:e7:80:65:10:13:0c:50: a8:1c:ef:8f:ae:b0:8d:fa:42:db:db:e7:ee:1c:fc:f0:39:3d: 3e:a4:5b:2d:dc:de:6e:61:66:ee:6c:bf:b4:23:9a:96:44:38: 02:80:51:c9:2d:54:b1:b4:83:29:90:5c:fe:a7:d1:76:d6:ff: eb:b8:d0:17:68:64:d4:fe:01:64:77:3f:6f:28:6a:04:7e:ca: ae:3b:d8:18:a0:0e:94:7d:07:e7:10:57:0a:8b:9e:8f:5d:48: 00:a7:6b:4b:ba:28:09:32:28:e1:6a:40:ec:03:ff:59:ff:35: fd:07:4b:d5:04:bd:a5:b7:b7:a3:ab:47:32:53:18:85:17:de: 79:f7:6a:9f:0a:a1:3f:43:83:08:3a:84:bc:ba:c7:8b:dc:66: 7c:98:df:6a:fb:40:14:f4:98:0e:ff:63:28:5f:ba:09:16:20: b6:71:f1:66:1f:77:9d:1b:00:f4:79:c5:0f:6a:7a:ac:69:fc: f9:35:e8:1a:68:e4:c2:81:e2:b8:1b:9e:75:0c:8b:1d:ce:60: 63:59:07:c7:7f:ce:80:7f:a5:62:ce:23:67:95:b5:93:57:f2: db:8f:33:c9:48:b1:1c:e5:fa:c0:4d:fa:60:46:fc:9b:fd:c8: 77:6f:03:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwOTE5MDI0MjEzWhcNMjUwOTI2MDI0MjEzWjAYMRYwFAYD VQQDEw02OGNjYzMwNi1mMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbKQQMSovN5qob6YyEg10gLYVV5eqoveRcX4DeCPViJDh9N5ePV5fxoWAKuu H2bUbmn2wZF2inIJrgdlXV4/u+9ayetYS2d5I+IY4ePhtaRfDodINPawXBsKKAgC EoHW2clQMS0E+W5NYojHTMXSHLWzsibXKhJdg3/s2bdL7aY9nw5CZ58pg6+blqvJ taVazhyQh7PdV9GRi9Bqio01i9C+6+fiHrV+M5k+5hGumiMmB6a5V3sNRl9eGrUl 2+q+Y34KKFGC2d5hw4jkD1JTxPM29ktwfwVUql2bdHaMl+v6wU/3IU8uVc3g4o5w yuZ2inz8wC8QqfJnU2dd6XqeAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEesr68 dj5Go858sTCMF7VyXcpzMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJcYBuBoXN9oDM/+eAZRATDFCoHO+PrrCN+kLb2+fuHPzwOT0+pFst 3N5uYWbubL+0I5qWRDgCgFHJLVSxtIMpkFz+p9F21v/ruNAXaGTU/gFkdz9vKGoE fsquO9gYoA6UfQfnEFcKi56PXUgAp2tLuigJMijhakDsA/9Z/zX9B0vVBL2lt7ej q0cyUxiFF95592qfCqE/Q4MIOoS8useL3GZ8mN9q+0AU9JgO/2MoX7oJFiC2cfFm H3edGwD0ecUPanqsafz5NegaaOTCgeK4G551DIsdzmBjWQfHf86Af6ViziNnlbWT V/LbjzPJSLEc5frATfpgRvyb/ch3bwPW -----END CERTIFICATE-----Generated at Fri Sep 19 06:56:10 2025 by rpki-client