$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft File: TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json) Hash identifier: fky84PoxxCAhKVqBJacYqOxadFtf4VeJMxwl+KDMHb8= Subject key identifier: A4:63:40:03:3B:12:1D:4F:12:6F:6B:2F:F3:58:AD:FE:8D:02:90:40 Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft Manifest number: 9E Signing time: Sun 07 Sep 2025 06:52:34 +0000 Manifest this update: Sun 07 Sep 2025 06:52:33 +0000 Manifest next update: Sun 14 Sep 2025 06:52:33 +0000 Files and hashes: 1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: pMJQc+WNsWQLGsUDQXc8pP8ydGRZ7ygW7YPAESn3Iu0=) 2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C Validity Not Before: Sep 7 06:52:33 2025 GMT Not After : Sep 14 06:52:33 2025 GMT Subject: CN=68bd2bb2-dc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:9b:40:b0:34:a8:ce:17:3f:ea:82:1f:8b: 67:17:31:0f:de:0f:b0:d0:dd:84:3b:5f:35:1f:dd: 8a:b2:97:a1:d5:9e:9f:f1:6f:6e:22:c5:09:56:0d: 2c:3f:dc:e4:9d:6f:eb:ba:fc:fa:7e:0e:9a:a3:c5: 92:2e:37:92:1a:bb:b8:21:bf:0a:34:95:8b:68:30: 03:2e:75:61:9d:91:f0:1f:6a:9e:b5:54:82:6d:97: 63:56:99:bf:ed:0a:16:59:c8:c8:29:57:32:11:b0: 45:6c:04:2a:53:78:0c:ac:c8:9c:5d:1a:c9:3f:49: 14:26:62:82:fa:d3:c6:8c:26:5f:0b:7e:cc:03:ee: d7:f1:8b:58:23:fe:19:f3:24:e4:d4:ab:c7:bc:75: 9a:58:e5:70:02:2d:18:0f:00:b3:2c:53:fe:9c:79: a6:01:b0:f4:5b:c2:f2:db:36:fc:ef:8f:61:13:ac: 79:e4:52:a3:17:7e:bf:e1:09:a9:10:af:08:f4:cd: ab:3e:02:74:7b:a9:f8:e9:ea:a2:59:5b:c0:7a:60: b8:b6:b8:a5:27:be:c2:35:91:97:b4:af:66:21:2d: dc:30:3f:16:c4:95:6c:4e:f5:90:51:9c:ab:85:3d: d0:f0:b0:05:d0:46:4e:61:2e:91:e9:93:5a:bc:39: 78:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:63:40:03:3B:12:1D:4F:12:6F:6B:2F:F3:58:AD:FE:8D:02:90:40 X509v3 Authority Key Identifier: keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d8:8f:dd:48:32:37:8d:aa:77:17:33:bf:e3:57:2c:9b:9b: 9e:f4:60:65:66:14:9a:65:f3:91:e4:32:b5:42:ca:ed:71:5f: 11:cc:66:75:5a:ef:3d:14:20:d4:23:51:fc:cc:1a:e5:3f:f4: 9a:fc:1f:47:26:a3:32:8e:7f:f7:54:45:61:d7:56:92:81:85: 8c:00:ce:2c:99:8a:7d:a7:7e:da:61:66:29:e8:e9:69:f2:5b: 85:1a:0b:8f:9d:b1:78:de:da:be:c2:53:b1:3a:1a:7f:39:76: fe:d4:f8:cd:eb:a5:2c:8e:a9:48:0d:39:39:c3:e6:f9:ab:5e: 37:d5:8b:df:71:75:3d:d2:de:e7:78:68:a5:0d:e3:81:d0:30: 4a:62:85:4c:40:ca:da:33:09:3f:1a:e3:b9:84:dc:ba:e2:6e: 0f:fc:ca:b5:27:ad:d4:f3:eb:c1:7c:15:da:a0:92:62:0a:c2: d1:aa:0d:40:61:de:ec:73:48:f8:f7:96:84:be:f7:ae:93:df: d7:51:04:97:71:84:b4:a9:c1:9c:d2:85:1e:0b:ed:92:67:83: b1:f7:d7:e6:32:48:f1:79:d1:f9:ad:a8:94:d1:f2:8a:1c:15: 19:e5:d4:9b:dd:c2:bc:7f:eb:ab:b2:cd:6e:79:77:85:cf:bd: ff:a9:b0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyNUQxMTAvBgNVBAUTKDRDQTAyRUMxMTE4NzRBRTBFN0QwNTU1QTI1RkYzMzAy RjkxMkVCOEMwHhcNMjUwOTA3MDY1MjMzWhcNMjUwOTE0MDY1MjMzWjAYMRYwFAYD VQQDEw02OGJkMmJiMi1kYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXGbQLA0qM4XP+qCH4tnFzEP3g+w0N2EO181H92Kspeh1Z6f8W9uIsUJVg0s P9zknW/ruvz6fg6ao8WSLjeSGru4Ib8KNJWLaDADLnVhnZHwH2qetVSCbZdjVpm/ 7QoWWcjIKVcyEbBFbAQqU3gMrMicXRrJP0kUJmKC+tPGjCZfC37MA+7X8YtYI/4Z 8yTk1KvHvHWaWOVwAi0YDwCzLFP+nHmmAbD0W8Ly2zb8749hE6x55FKjF36/4Qmp EK8I9M2rPgJ0e6n46eqiWVvAemC4trilJ77CNZGXtK9mIS3cMD8WxJVsTvWQUZyr hT3Q8LAF0EZOYS6R6ZNavDl4KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRjQAM7 Eh1PEm9rL/NYrf6NApBAMB8GA1UdIwQYMBaAFEygLsERh0rg59BVWiX/MwL5EuuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9ERDcxRDU2OEE0 NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1RG4wRlZhSmY4ekF2a1M2 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RLQXV3UkdIU3VEbjBGVmFKZjh6QXZrUzY0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODI1RC9ERDcxRDU2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1 RG4wRlZhSmY4ekF2a1M2NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq2I/dSDI3jap3FzO/41csm5ue9GBlZhSaZfOR5DK1QsrtcV8RzGZ1 Wu89FCDUI1H8zBrlP/Sa/B9HJqMyjn/3VEVh11aSgYWMAM4smYp9p37aYWYp6Olp 8luFGguPnbF43tq+wlOxOhp/OXb+1PjN66UsjqlIDTk5w+b5q1431YvfcXU90t7n eGilDeOB0DBKYoVMQMraMwk/GuO5hNy64m4P/Mq1J63U8+vBfBXaoJJiCsLRqg1A Yd7sc0j495aEvveuk9/XUQSXcYS0qcGc0oUeC+2SZ4Ox99fmMkjxedH5raiU0fKK HBUZ5dSb3cK8f+urss1ueXeFz73/qbD+ -----END CERTIFICATE-----Generated at Tue Sep 9 05:26:21 2025 by rpki-client