$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json) Hash identifier: MbI3E6k4ZWVcDE7tB2HZBaIrQu3h/t2J5l5y8WPF/ZY= Subject key identifier: 87:FB:70:1F:45:FD:2B:E1:7D:08:45:25:42:FC:86:83:03:08:BE:0E Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft Manifest number: 0490 Signing time: Sun 07 Sep 2025 00:22:50 +0000 Manifest this update: Sun 07 Sep 2025 00:22:49 +0000 Manifest next update: Sun 14 Sep 2025 00:22:49 +0000 Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: 31w5E5wuBUKkTMkAyqrmH/htlT6LskUReRcWm88kA70=) 2: C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (hash: 6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Validity Not Before: Sep 7 00:22:49 2025 GMT Not After : Sep 14 00:22:49 2025 GMT Subject: CN=68bcd059-85c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:24:1d:16:5c:0e:d4:d0:3f:dd:22:60:62: b2:ca:ae:bf:4d:02:12:7b:e3:0c:d0:f1:97:be:57: c0:bf:12:57:3a:45:91:33:70:0e:66:83:10:84:cc: 8a:52:4a:37:8d:e1:d2:ba:82:62:63:92:7d:96:80: aa:13:88:e6:1a:93:c0:29:33:21:20:0a:e0:5e:e6: 4e:d1:33:d0:0a:48:18:68:9d:4e:d7:03:e7:e0:52: 90:f0:dd:e4:8d:b1:92:2b:64:44:2a:2a:48:a1:eb: f6:48:d2:fa:46:e7:44:51:74:f4:57:a8:39:44:2d: 89:a5:3b:12:98:c0:5a:b3:68:57:1b:ee:92:3f:ae: 14:8e:4c:a4:2b:06:28:34:c6:84:17:6d:a8:8b:3c: 70:9c:7d:6c:46:2a:4b:22:a3:21:5c:2e:08:4c:0b: 45:c0:da:91:11:6a:31:31:a8:c6:57:4d:83:d6:2e: 44:60:7d:f6:a6:26:8b:71:88:9e:77:7e:67:bc:dd: 5b:9c:69:cf:d6:16:81:27:cf:cb:fb:34:63:f5:22: 3f:0c:64:c3:05:a1:70:31:13:88:f3:1a:36:95:ff: 7c:b9:e2:95:c7:86:a3:0a:3a:ee:34:aa:54:1f:cb: dd:23:c9:d0:30:7c:06:8d:dc:44:5c:b5:c4:52:60: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:70:1F:45:FD:2B:E1:7D:08:45:25:42:FC:86:83:03:08:BE:0E X509v3 Authority Key Identifier: keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:36:ad:4c:6a:cd:95:72:13:ad:7e:20:6b:19:7e:43:d6:a9: 87:eb:a3:e8:98:b5:68:d6:5f:e2:6f:f1:d9:33:1d:d0:0b:5a: 77:2e:47:93:fb:59:fb:64:11:24:90:0b:b4:4f:8c:95:0c:78: 9f:ca:6f:96:a4:1d:67:eb:66:82:8c:73:26:0f:6a:cd:b9:98: 4c:18:b6:f9:8f:d7:be:8c:7d:bf:c6:c8:a1:4d:f3:58:59:e1: fa:ba:c6:2a:09:cb:16:88:eb:8a:45:64:f6:4d:89:c6:fd:58: ea:ba:98:fa:98:ff:7e:94:49:5b:6b:2c:ca:44:44:a5:b2:62: ce:36:52:0d:a4:50:22:30:0b:53:da:c3:51:d7:d3:52:f6:86: 71:31:ca:9c:04:e6:9b:2b:b0:22:b5:3b:2e:d1:5d:5b:f4:11: 29:a4:23:ba:ea:e8:29:8c:cd:56:6e:8c:1c:f7:09:6c:64:10: a3:e2:ba:48:7f:9b:78:c0:7e:d6:0b:93:be:ee:cf:dc:7f:40: b0:28:07:a5:fd:c0:0e:e7:8a:91:98:84:d8:ea:9c:fb:05:d7: f4:e1:c0:b9:69:23:07:77:75:63:15:cc:11:90:67:15:16:82: 85:99:b2:97:9c:32:8a:16:4e:d0:4e:45:ad:59:00:36:2f:c0: b9:f3:77:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1 NTgwRUUwMzEwHhcNMjUwOTA3MDAyMjQ5WhcNMjUwOTE0MDAyMjQ5WjAYMRYwFAYD VQQDEw02OGJjZDA1OS04NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TMkHRZcDtTQP90iYGKyyq6/TQISe+MM0PGXvlfAvxJXOkWRM3AOZoMQhMyK Uko3jeHSuoJiY5J9loCqE4jmGpPAKTMhIArgXuZO0TPQCkgYaJ1O1wPn4FKQ8N3k jbGSK2REKipIoev2SNL6RudEUXT0V6g5RC2JpTsSmMBas2hXG+6SP64UjkykKwYo NMaEF22oizxwnH1sRipLIqMhXC4ITAtFwNqREWoxMajGV02D1i5EYH32piaLcYie d35nvN1bnGnP1haBJ8/L+zRj9SI/DGTDBaFwMROI8xo2lf98ueKVx4ajCjruNKpU H8vdI8nQMHwGjdxEXLXEUmCEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf7cB9F /SvhfQhFJUL8hoMDCL4OMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080 REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDlFNi9CNjE2Qzg2QTRGNzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2 NFJLLXhUV2NNY2xWZ080REUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDNq1Mas2VchOtfiBrGX5D1qmH66PomLVo1l/ib/HZMx3QC1p3LkeT +1n7ZBEkkAu0T4yVDHifym+WpB1n62aCjHMmD2rNuZhMGLb5j9e+jH2/xsihTfNY WeH6usYqCcsWiOuKRWT2TYnG/Vjqupj6mP9+lElbayzKRESlsmLONlINpFAiMAtT 2sNR19NS9oZxMcqcBOabK7AitTsu0V1b9BEppCO66ugpjM1Wbowc9wlsZBCj4rpI f5t4wH7WC5O+7s/cf0CwKAel/cAO54qRmITY6pz7Bdf04cC5aSMHd3VjFcwRkGcV FoKFmbKXnDKKFk7QTkWtWQA2L8C583ef -----END CERTIFICATE-----Generated at Mon Sep 8 14:35:24 2025 by rpki-client