$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: LCnCzwPbwXCmzVVYIva6jnTYO/XUOLWWow7h3q6nbjI= Subject key identifier: 47:85:06:87:F3:B5:E1:A8:46:41:E3:79:1E:31:BD:E2:D1:C2:63:FF Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 3E Signing time: Fri 05 Sep 2025 07:59:13 +0000 Manifest this update: Fri 05 Sep 2025 07:59:12 +0000 Manifest next update: Fri 12 Sep 2025 07:59:12 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: 1+jVQZoig6uQXPFWD4yEQU4oPrA5X4a8VvSKp9qs6Uk=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Sep 5 07:59:12 2025 GMT Not After : Sep 12 07:59:12 2025 GMT Subject: CN=68ba9850-805f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:b4:5c:ff:56:b3:56:2a:11:b9:48:99:2b: 37:33:99:15:f2:03:97:1e:be:fa:af:a5:e9:9a:75: e5:b8:80:69:d7:f4:e3:21:c8:41:da:ca:20:bc:a3: 39:48:f6:32:b5:8e:a9:6f:b4:be:df:20:86:bc:4c: c8:f3:0d:00:9f:f8:b0:e7:69:21:9e:e0:58:58:5e: d0:91:cd:fd:d7:21:d3:5b:7c:e7:e2:06:65:c3:89: bc:ac:e0:2f:7d:c7:d7:82:63:15:30:86:71:97:68: 90:40:fc:19:c9:e0:7e:61:80:53:e0:1e:6c:29:a5: c3:a4:4b:51:59:17:81:7d:fc:58:a9:4d:24:71:01: 6c:24:f2:89:2e:2b:0c:95:60:50:15:8d:b1:44:88: e2:e5:96:dc:17:b9:0b:44:da:2c:e3:22:34:17:e4: 13:6a:d3:b7:99:a0:cd:67:d4:da:c4:64:f6:40:9b: cd:b7:50:a7:f5:e3:b0:96:42:4e:7c:7d:8e:46:37: 48:c3:7e:25:a7:fb:67:93:1d:69:b7:76:4b:74:05: 2b:e4:63:8d:1e:ae:17:c0:83:a7:2d:42:2a:ec:06: 28:da:73:50:90:c7:d0:ec:be:47:60:b6:94:02:b1: 80:f2:3e:c2:fd:21:db:dc:6c:6b:12:c8:d8:d6:7f: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:85:06:87:F3:B5:E1:A8:46:41:E3:79:1E:31:BD:E2:D1:C2:63:FF X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7f:d1:6d:10:4e:96:d0:ca:f4:6e:78:c4:72:b1:db:66:8d: ab:95:f6:cd:9b:5e:4a:10:d7:52:10:6b:b5:f6:98:69:b0:f3: 6e:d1:23:a2:a3:3d:99:34:52:d9:88:b3:51:6b:b5:4e:75:36: 96:3e:dc:c9:c6:8f:96:92:02:a6:3c:f2:2f:08:dc:9e:87:9a: 83:6d:b2:94:b8:ed:c7:8a:5d:13:bc:4b:79:a2:b7:66:9f:32: 32:99:3f:54:d5:bb:d1:de:bc:29:e7:9f:74:85:52:fb:c2:21: a6:3c:4d:7a:d6:f3:4b:32:f2:a2:a2:6b:ba:6b:ea:7c:a4:df: 38:e9:58:54:15:30:a5:f8:36:27:d4:62:40:99:27:b6:2a:5f: 11:aa:2b:91:27:2d:6b:fc:47:ec:f8:e9:03:c1:2a:8f:d9:9f: 96:8a:45:05:48:a9:e2:4f:d4:06:30:17:36:c2:6d:16:8f:ff: 10:e7:8a:56:30:83:7c:37:3e:0e:fc:b5:1f:e9:be:d2:d0:9a: 2d:02:5a:cd:9a:e6:cc:be:51:32:cc:1a:a7:87:ad:ca:e3:1a: e9:b2:ae:ab:01:f3:b6:ff:1b:74:31:aa:ce:00:94:f2:fd:61: 4c:61:a7:b4:cd:3c:93:eb:ff:d4:28:28:ea:78:18:d3:ad:9d: 28:61:d8:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA5MDUwNzU5MTJaFw0yNTA5MTIwNzU5MTJaMBgxFjAUBgNV BAMTDTY4YmE5ODUwLTgwNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHc7Rc/1azVioRuUiZKzczmRXyA5cevvqvpemadeW4gGnX9OMhyEHayiC8ozlI 9jK1jqlvtL7fIIa8TMjzDQCf+LDnaSGe4FhYXtCRzf3XIdNbfOfiBmXDibys4C99 x9eCYxUwhnGXaJBA/BnJ4H5hgFPgHmwppcOkS1FZF4F9/FipTSRxAWwk8okuKwyV YFAVjbFEiOLlltwXuQtE2izjIjQX5BNq07eZoM1n1NrEZPZAm823UKf147CWQk58 fY5GN0jDfiWn+2eTHWm3dkt0BSvkY40erhfAg6ctQirsBijac1CQx9DsvkdgtpQC sYDyPsL9IdvcbGsSyNjWfwCFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR4UGh/O1 4ahGQeN5HjG94tHCY/8wHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACV/0W0QTpbQyvRueMRysdtmjauV9s2bXkoQ11IQa7X2mGmw827RI6Kj PZk0UtmIs1FrtU51NpY+3MnGj5aSAqY88i8I3J6HmoNtspS47ceKXRO8S3mit2af MjKZP1TVu9HevCnnn3SFUvvCIaY8TXrW80sy8qKia7pr6nyk3zjpWFQVMKX4NifU YkCZJ7YqXxGqK5EnLWv8R+z46QPBKo/Zn5aKRQVIqeJP1AYwFzbCbRaP/xDnilYw g3w3Pg78tR/pvtLQmi0CWs2a5sy+UTLMGqeHrcrjGumyrqsB87b/G3Qxqs4AlPL9 YUxhp7TNPJPr/9QoKOp4GNOtnShh2LQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:31 2025 by rpki-client