$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: OxzLjUlzDC3FLDftR3RuID9tuefbqf69ct32SxaqLzY= Subject key identifier: BA:7C:DA:6F:FE:D5:8B:E5:EA:95:08:B4:55:17:9A:71:69:B0:26:31 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02FF Signing time: Sun 07 Sep 2025 01:39:10 +0000 Manifest this update: Sun 07 Sep 2025 01:39:10 +0000 Manifest next update: Sun 14 Sep 2025 01:39:10 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: Jfn1+uQH0FiuPsSRcZc6Sx499jq0gVt5Sp7Vw1Z+9kg=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Sep 7 01:39:10 2025 GMT Not After : Sep 14 01:39:10 2025 GMT Subject: CN=68bce23e-054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:e2:dc:fc:de:aa:7a:f8:e7:1e:14:d7:24: 03:a6:e5:f3:fa:65:ae:bb:8a:c1:20:be:76:78:98: 3e:cf:cc:b6:84:f7:72:f1:a0:8f:30:56:89:2e:f7: b8:0d:f2:ee:1c:29:eb:66:63:f4:22:87:e3:4a:b7: f9:b1:53:51:e2:b0:92:9d:85:c4:5b:5b:cb:79:3a: f7:16:53:a7:30:48:3c:51:3d:bb:ac:7e:ab:bc:15: e4:92:c8:7e:01:14:9c:06:15:2b:83:c9:10:4e:26: 86:f6:65:9f:22:f8:f3:cc:18:e2:ab:00:75:63:10: f4:f6:17:9a:74:5d:44:83:5c:4c:65:c9:be:67:44: 74:37:a2:e5:06:4a:30:d6:d9:44:99:01:85:6a:63: c5:bd:1e:77:3f:08:e4:69:50:9d:53:e9:3f:d4:a5: fa:1e:83:4c:f4:b9:ad:15:84:e9:41:01:b5:b4:dc: c2:f1:cc:3e:c5:f1:e7:2a:c3:13:7e:d0:72:1b:03: 56:5d:13:c8:40:c1:07:09:f6:c6:a6:a3:95:4b:07: 64:75:57:99:e1:4d:de:69:f4:1a:d5:c9:9c:ea:56: 3e:53:a2:f0:b6:d0:2d:67:b7:61:d3:0f:33:51:7f: 07:95:e7:bc:a7:e3:00:dd:c9:ff:30:3a:c9:03:63: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:DA:6F:FE:D5:8B:E5:EA:95:08:B4:55:17:9A:71:69:B0:26:31 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cc:82:33:02:e3:b5:01:c8:a4:b4:1d:9d:47:bb:04:ca:81: 3c:9e:ce:71:38:58:12:ef:3e:92:b9:95:f6:e8:ec:96:6e:80: db:6a:14:79:76:57:86:c3:e6:48:81:6b:93:b1:5f:fe:21:95: c8:45:56:7c:74:6b:c6:02:c3:d5:d3:8c:c6:09:72:3e:00:78: 62:54:50:86:94:c9:eb:ce:67:7b:aa:0c:2d:38:84:bb:6e:7a: 9e:16:93:95:e8:37:9b:5d:e9:68:7d:09:e1:8e:69:1d:dc:ac: 35:38:55:0c:bd:a4:23:57:6f:73:67:3c:1c:78:e7:d8:61:1a: 04:93:35:06:14:84:49:67:35:1e:c8:b2:10:d0:78:55:b3:5e: 1b:98:f0:c1:be:0c:b2:cf:31:f6:62:9c:f0:cc:35:2b:40:b0: 64:a4:d4:c8:12:34:5b:f7:be:7c:67:90:9d:c2:86:6f:4c:f1: 87:3f:8d:f0:fd:32:87:71:4c:af:7e:7e:cb:7b:0b:d2:17:ab: 6a:a9:a5:8e:7a:c3:99:1a:ef:87:53:3a:66:e9:33:e9:2a:4c: 2d:28:74:d1:41:70:3a:00:0f:17:a7:52:8d:53:8e:6a:38:a6: 7b:11:45:08:9e:ae:f4:dd:80:59:38:16:c3:a5:a6:53:25:d5: 43:d9:3e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwOTA3MDEzOTEwWhcNMjUwOTE0MDEzOTEwWjAYMRYwFAYD VQQDEw02OGJjZTIzZS0wNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3V/i3Pzeqnr45x4U1yQDpuXz+mWuu4rBIL52eJg+z8y2hPdy8aCPMFaJLve4 DfLuHCnrZmP0IofjSrf5sVNR4rCSnYXEW1vLeTr3FlOnMEg8UT27rH6rvBXkksh+ ARScBhUrg8kQTiaG9mWfIvjzzBjiqwB1YxD09headF1Eg1xMZcm+Z0R0N6LlBkow 1tlEmQGFamPFvR53PwjkaVCdU+k/1KX6HoNM9LmtFYTpQQG1tNzC8cw+xfHnKsMT ftByGwNWXRPIQMEHCfbGpqOVSwdkdVeZ4U3eafQa1cmc6lY+U6LwttAtZ7dh0w8z UX8Hlee8p+MA3cn/MDrJA2P5nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp82m/+ 1Yvl6pUItFUXmnFpsCYxMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANzIIzAuO1AciktB2dR7sEyoE8ns5xOFgS7z6SuZX26OyWboDbahR5 dleGw+ZIgWuTsV/+IZXIRVZ8dGvGAsPV04zGCXI+AHhiVFCGlMnrzmd7qgwtOIS7 bnqeFpOV6DebXelofQnhjmkd3Kw1OFUMvaQjV29zZzwceOfYYRoEkzUGFIRJZzUe yLIQ0HhVs14bmPDBvgyyzzH2YpzwzDUrQLBkpNTIEjRb9758Z5CdwoZvTPGHP43w /TKHcUyvfn7LewvSF6tqqaWOesOZGu+HUzpm6TPpKkwtKHTRQXA6AA8Xp1KNU45q OKZ7EUUInq703YBZOBbDpaZTJdVD2T5a -----END CERTIFICATE-----Generated at Mon Sep 8 22:13:04 2025 by rpki-client