$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: O2qyEJe6X8i6JzSQE0ltW61hJJ20/vlvUZ6mbLu1YAY= Subject key identifier: 39:4F:D0:EB:D8:60:B9:FD:E4:D3:F7:43:42:FD:00:4D:AF:82:2B:37 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 0744 Signing time: Thu 18 Sep 2025 22:00:01 +0000 Manifest this update: Thu 18 Sep 2025 22:00:01 +0000 Manifest next update: Thu 25 Sep 2025 22:00:01 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: Sj61CAGfXIrd7sXvZyoGA8YpxA1T6gb9tKlCtQJAKj0=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: 8umaFtJV5TgBXJUzmNOXuQWmgpWLTZbpyNtna3LX4IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: Sep 18 22:00:01 2025 GMT Not After : Sep 25 22:00:01 2025 GMT Subject: CN=68cc80e1-4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:04:75:df:41:33:63:73:85:f8:93:82:e6: 3e:fd:93:de:fa:34:7e:fc:a5:27:52:eb:33:09:f4: 68:9a:81:67:f6:4b:43:a7:2e:f5:a7:76:db:97:55: 13:b4:5c:6c:17:c1:55:a8:34:5b:68:f1:b2:28:b7: 88:c6:bf:46:e8:b1:ee:8c:15:92:0a:1b:38:86:73: a2:a3:cc:d1:ff:e5:fc:af:6e:81:68:b1:d2:82:14: d1:cf:11:60:99:94:33:0e:91:46:8b:96:23:a1:8f: e0:28:d9:39:c8:4e:64:f7:3c:78:69:85:80:81:56: 16:3d:bc:a0:05:44:0e:f8:a2:be:6e:74:fc:29:ee: a1:02:55:ef:84:fc:53:0b:9d:8f:c2:ff:c7:20:cf: 79:5b:8c:5f:d4:cd:d9:bb:54:d0:a1:08:a5:2e:a4: d6:9c:50:2e:8e:9c:b4:d7:ec:f3:ad:a3:63:b1:80: 79:da:d8:f2:d7:10:db:7d:a2:66:d9:55:a1:91:c3: 5d:28:02:3e:30:6b:d0:70:94:b5:f4:0a:fb:78:ff: b4:3e:ad:f4:8c:8a:d2:a8:9a:e6:86:9c:b4:7e:ae: b8:b0:7b:69:47:45:32:72:41:83:a4:6d:5d:7a:53: a9:d6:1e:c8:be:99:b2:8f:6b:88:3a:bb:7b:49:4d: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:D0:EB:D8:60:B9:FD:E4:D3:F7:43:42:FD:00:4D:AF:82:2B:37 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8f:af:99:72:ce:f3:93:d9:33:d7:c4:50:ab:fc:f9:b8:c1: d7:ae:c6:44:07:f4:5d:34:41:37:16:de:d3:cc:cf:46:4e:1d: 9c:60:57:8c:50:2e:8d:7d:0a:b6:8b:96:bf:4b:7b:60:c7:23: 99:34:2b:7c:06:05:36:ec:ac:8f:b3:a7:44:33:ac:df:c5:6a: a4:24:6b:c0:2e:1c:4c:2f:26:ac:40:cd:8d:e9:20:5e:da:9e: 53:e3:5a:88:15:84:42:f6:a9:71:1e:d4:93:42:55:31:61:ad: e1:6d:88:05:3f:5e:67:02:72:5d:ea:b2:79:3d:48:7f:4d:1d: c1:d0:e4:c9:4c:ac:9e:4b:7c:fd:23:6a:05:ea:02:70:e8:9c: 73:52:ce:a5:84:ec:a9:1e:fc:27:24:a1:16:41:f9:39:c7:7b: a6:0f:00:13:2e:e1:b9:27:71:a9:4a:24:d6:01:10:12:3f:48: fb:fd:ee:9a:f6:a5:9a:2b:77:a3:60:8a:a0:68:55:39:c4:ec: 70:47:ad:24:bf:38:01:bc:56:42:76:b9:ea:ae:e3:7d:3a:08: 80:b4:96:2f:6c:77:47:fd:0f:20:50:c5:bd:5d:4c:61:e3:dc: 3c:3b:a1:c4:96:98:c2:45:06:d2:24:c9:98:f9:20:e5:4e:8f: 01:0a:d0:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUwOTE4MjIwMDAxWhcNMjUwOTI1MjIwMDAxWjAYMRYwFAYD VQQDEw02OGNjODBlMS00OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTwEdd9BM2NzhfiTguY+/ZPe+jR+/KUnUuszCfRomoFn9ktDpy71p3bbl1UT tFxsF8FVqDRbaPGyKLeIxr9G6LHujBWSChs4hnOio8zR/+X8r26BaLHSghTRzxFg mZQzDpFGi5YjoY/gKNk5yE5k9zx4aYWAgVYWPbygBUQO+KK+bnT8Ke6hAlXvhPxT C52Pwv/HIM95W4xf1M3Zu1TQoQilLqTWnFAujpy01+zzraNjsYB52tjy1xDbfaJm 2VWhkcNdKAI+MGvQcJS19Ar7eP+0Pq30jIrSqJrmhpy0fq64sHtpR0UyckGDpG1d elOp1h7Ivpmyj2uIOrt7SU2qPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlP0OvY YLn95NP3Q0L9AE2vgis3MB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArj6+Zcs7zk9kz18RQq/z5uMHXrsZEB/RdNEE3Ft7TzM9GTh2cYFeM UC6NfQq2i5a/S3tgxyOZNCt8BgU27KyPs6dEM6zfxWqkJGvALhxMLyasQM2N6SBe 2p5T41qIFYRC9qlxHtSTQlUxYa3hbYgFP15nAnJd6rJ5PUh/TR3B0OTJTKyeS3z9 I2oF6gJw6JxzUs6lhOypHvwnJKEWQfk5x3umDwATLuG5J3GpSiTWARASP0j7/e6a 9qWaK3ejYIqgaFU5xOxwR60kvzgBvFZCdrnqruN9OgiAtJYvbHdH/Q8gUMW9XUxh 49w8O6HElpjCRQbSJMmY+SDlTo8BCtAJ -----END CERTIFICATE-----Generated at Fri Sep 19 09:09:57 2025 by rpki-client