$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json) Hash identifier: Agns5JoinV2BdJ9aAKYpz7RZ100WoKNaqpLERtwP9n8= Subject key identifier: 53:2F:F2:E8:99:8A:B3:57:D0:14:67:81:81:3F:D6:66:5A:A2:B1:68 Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft Manifest number: 6D Signing time: Wed 17 Sep 2025 07:40:48 +0000 Manifest this update: Wed 17 Sep 2025 07:40:47 +0000 Manifest next update: Wed 24 Sep 2025 07:40:47 +0000 Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: +9Vf0OvmtZ5x6mbkJ+So0VFNcRE1HU3wdK0v+CmEQ9M=) 2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: NYtoABq9iaZ7RDTNr8tHyhssdbHGRtrQu/5JhSbINm0=) 3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: ezXoOJmaQ+T0/SBG+83qcx+7CgpMAs0wB76/qo16lME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Validity Not Before: Sep 17 07:40:47 2025 GMT Not After : Sep 24 07:40:47 2025 GMT Subject: CN=68ca6600-d0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:57:88:2a:2a:05:e1:4b:8b:ba:ea:8e:bf: 44:eb:c4:0f:0f:f3:18:0c:3e:3d:2e:18:45:ec:b5: c5:e8:a3:8a:90:5a:c9:dc:96:af:1d:d5:69:7b:12: 59:4e:06:0e:e0:50:d1:79:eb:7b:51:d8:7e:48:1c: ab:06:9c:82:e4:38:8b:36:7c:ce:f9:16:2e:1f:7c: 6c:af:a2:7a:6a:8a:18:93:01:0e:07:3b:e7:bb:90: e0:90:3a:25:88:64:a9:25:ac:41:fe:aa:c1:fa:c8: ce:30:cc:66:3d:3d:5d:a5:20:a5:8d:47:61:da:e4: ea:8c:94:69:58:85:31:52:8a:38:2e:56:c9:bf:7b: 5a:08:f3:44:fb:7c:6c:ba:e3:77:9a:e0:2e:47:39: fc:aa:a7:6e:79:e9:0a:b1:5f:b5:75:82:16:82:65: bb:76:6b:38:5d:b5:f3:1a:fa:3c:8c:c7:bc:be:ec: 54:6f:0d:75:3a:81:34:ed:18:ca:06:63:6e:2f:ff: 83:a1:b5:fb:18:1d:ec:ae:56:04:2c:6a:ab:e3:38: 10:fb:9c:99:45:33:89:d3:5b:79:4c:24:78:c6:6b: 9e:0d:71:7e:94:2b:2a:f6:2e:d1:8f:c8:7d:7f:4e: 1b:1b:ae:3f:14:f6:1f:6a:a5:a9:69:4c:5c:47:ad: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:F2:E8:99:8A:B3:57:D0:14:67:81:81:3F:D6:66:5A:A2:B1:68 X509v3 Authority Key Identifier: keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:4d:d1:1e:fb:ad:29:cf:85:b8:8b:71:e7:b4:5c:a8:06:13: 94:49:2d:01:c5:9c:2d:10:46:e5:d2:80:d6:92:b1:6a:dc:fb: 14:df:27:b6:df:5f:c7:43:e6:ef:d0:59:06:76:7e:c2:22:ed: 14:f4:7d:99:af:dd:71:44:04:1c:a1:8a:b2:fa:ba:56:32:36: 37:26:2d:d0:d0:a5:f4:76:9c:5b:2a:38:ba:cf:b2:b2:fc:87: 7f:48:b1:7f:ec:08:fa:53:6e:b7:00:7a:e6:f8:7e:bf:c6:9e: f9:44:34:5d:67:06:aa:0c:48:e8:e2:05:69:b5:07:8a:03:c9: 71:17:be:af:91:1c:fc:99:22:36:ef:9b:7e:d0:a8:0c:1e:8d: 04:a6:21:b9:57:0e:0a:4e:bb:93:3a:72:c0:35:bb:50:d3:ce: 88:5e:8c:9d:35:52:a6:6e:1b:65:ae:05:3f:87:90:53:38:08: 7a:55:81:34:11:e0:8e:e4:1e:58:4e:10:cb:95:8e:b8:d5:5c: 02:56:4b:99:2d:40:41:f6:4b:b9:1e:c6:aa:4f:0a:d0:7d:8a: 06:91:e0:80:5b:f4:67:60:28:dd:f6:3e:35:e7:58:21:8e:f8: fb:d1:77:e7:1a:f0:aa:e2:82:e9:75:84:60:30:c0:f5:a0:d8: 87:b9:71:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjZFODExMC8GA1UEBRMoNEMyMjEyMUFERkFFM0Y1NzUyODAxNjUxNTFDM0ZEMzBF M0FBRkQwMTAeFw0yNTA5MTcwNzQwNDdaFw0yNTA5MjQwNzQwNDdaMBgxFjAUBgNV BAMTDTY4Y2E2NjAwLWQwYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAsFeIKioF4UuLuuqOv0TrxA8P8xgMPj0uGEXstcXoo4qQWsnclq8d1Wl7EllO Bg7gUNF563tR2H5IHKsGnILkOIs2fM75Fi4ffGyvonpqihiTAQ4HO+e7kOCQOiWI ZKklrEH+qsH6yM4wzGY9PV2lIKWNR2Ha5OqMlGlYhTFSijguVsm/e1oI80T7fGy6 43ea4C5HOfyqp2556QqxX7V1ghaCZbt2azhdtfMa+jyMx7y+7FRvDXU6gTTtGMoG Y24v/4OhtfsYHeyuVgQsaqvjOBD7nJlFM4nTW3lMJHjGa54NcX6UKyr2LtGPyH1/ Thsbrj8U9h9qpalpTFxHrWw5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUy/y6JmK s1fQFGeBgT/WZlqisWgwHwYDVR0jBBgwFoAUTCISGt+uP1dSgBZRUcP9MOOq/QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2NkU4L0Q4Mzg4RDM0RjNG QzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFkU2dCWlJVY1A5TU9PcV9R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENJU0d0LXVQMWRTZ0JaUlVjUDlNT09xX1FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 NkU4L0Q4Mzg4RDM0RjNGQzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFk U2dCWlJVY1A5TU9PcV9RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdN0R77rSnPhbiLcee0XKgGE5RJLQHFnC0QRuXSgNaSsWrc+xTfJ7bf X8dD5u/QWQZ2fsIi7RT0fZmv3XFEBByhirL6ulYyNjcmLdDQpfR2nFsqOLrPsrL8 h39IsX/sCPpTbrcAeub4fr/GnvlENF1nBqoMSOjiBWm1B4oDyXEXvq+RHPyZIjbv m37QqAwejQSmIblXDgpOu5M6csA1u1DTzohejJ01UqZuG2WuBT+HkFM4CHpVgTQR 4I7kHlhOEMuVjrjVXAJWS5ktQEH2S7kexqpPCtB9igaR4IBb9GdgKN32PjXnWCGO +PvRd+ca8Krigul1hGAwwPWg2Ie5ccw= -----END CERTIFICATE-----Generated at Fri Sep 19 05:14:24 2025 by rpki-client