$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: VHLTdmZJ5FvhLKAybrauYm4Kin+rUG+7rkI+S2+6X5o= Subject key identifier: 0B:03:53:B3:87:84:36:96:0B:E7:8F:24:A1:25:D3:3F:E9:1A:1A:F7 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 10E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0EAC Signing time: Thu 04 Sep 2025 19:11:42 +0000 Manifest this update: Thu 04 Sep 2025 19:11:41 +0000 Manifest next update: Thu 11 Sep 2025 19:11:41 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: BVDhaA56rZ/TrDvgDdl2k1ZDzCUekgQ9oPAV1AMooM8=) 2: 8F1E3424322B11F0818ACD4FC4F9AE02.roa (hash: KIMlL4Qxoch1feP0ZYm6TqdiZeU9O/SCaYVwCbyyy8s=) 3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 5: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4325 (0x10e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Sep 4 19:11:41 2025 GMT Not After : Sep 11 19:11:41 2025 GMT Subject: CN=68b9e46d-f8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:de:62:22:51:f2:4b:3b:eb:55:b4:1a:1a: 9c:89:07:57:85:79:35:ca:68:15:07:20:3b:7b:78: 0f:bb:52:0a:1f:ee:0a:c3:cf:0b:ba:8a:3c:1d:7a: 03:17:0d:be:98:b0:8c:fe:f2:5d:2b:a9:87:a0:6e: fe:97:3f:51:e6:8f:a5:63:0a:2b:9b:89:9c:3b:c8: 0a:de:83:dc:93:e5:10:7a:f1:23:78:37:30:80:1b: 78:f5:9a:4f:2a:7b:46:20:1c:04:a5:64:fd:3d:a0: 87:2b:b2:86:1f:cc:d4:29:b3:17:55:76:27:2e:b2: c2:57:68:e5:8f:25:40:9f:31:c5:9d:68:e6:9f:36: 81:42:33:44:cb:98:96:00:82:15:a5:79:50:69:ec: 53:74:03:15:7c:d6:9c:c1:50:95:4b:6a:90:14:db: 31:56:36:13:83:e5:7e:1d:3f:6f:ed:48:8c:d9:e1: c8:95:d1:56:52:6f:6c:3c:70:36:04:41:89:fa:c9: 45:c3:35:80:cd:9d:a7:d9:83:64:57:80:91:26:3d: 1b:2d:00:90:b5:0f:4f:3c:72:bc:25:b6:cd:8f:d8: 55:74:e1:44:4a:87:8c:3c:51:b3:ff:5a:5b:55:d6: 32:41:cc:f8:16:cc:61:57:b6:de:aa:cf:7e:6c:f1: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:03:53:B3:87:84:36:96:0B:E7:8F:24:A1:25:D3:3F:E9:1A:1A:F7 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cb:db:e9:0d:65:6a:14:5b:f1:2c:f8:60:87:ea:f6:c4:02: ba:65:ac:84:e1:00:25:a0:fd:73:c7:da:29:f1:b0:dd:d4:57: ec:0b:27:97:07:58:0c:e3:7f:e7:8c:8f:90:7e:24:2c:c9:4c: 1c:0f:1b:a1:15:06:68:02:29:c8:5f:e5:98:ab:26:1e:8e:41: 26:e0:9d:b2:fb:57:41:e3:b7:48:37:87:21:c3:f6:5f:8d:c4: 64:cd:21:49:4d:79:d9:fe:de:26:dc:5f:a9:50:20:e8:80:ea: 08:0c:69:fc:ad:5f:4b:c5:ad:6e:29:2b:f2:4f:53:59:d6:74: 30:85:0c:52:2f:02:75:99:e0:60:9d:24:4f:d1:f9:26:e5:fe: dc:9a:2c:b4:c2:8e:a9:c9:c3:3e:99:60:f6:c8:fa:dd:00:43: 21:b1:3b:f3:36:a7:32:7b:bd:6f:90:6e:5b:9a:0a:63:26:fb: ee:b4:ee:a5:ab:ca:05:10:41:0e:d4:2f:a6:9d:ac:c8:1b:ab: 33:55:27:9c:a7:ae:21:34:12:89:15:ed:f6:b6:7a:38:f2:0a: 26:f0:2c:ea:79:73:d8:b6:0d:68:f5:8d:6e:38:ff:2b:a2:18: 40:77:9f:ca:d3:76:36:76:8c:b2:ee:c8:e6:49:27:15:c7:1f: c9:e1:1e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUwOTA0MTkxMTQxWhcNMjUwOTExMTkxMTQxWjAYMRYwFAYD VQQDEw02OGI5ZTQ2ZC1mOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn83eYiJR8ks761W0GhqciQdXhXk1ymgVByA7e3gPu1IKH+4Kw88Luoo8HXoD Fw2+mLCM/vJdK6mHoG7+lz9R5o+lYworm4mcO8gK3oPck+UQevEjeDcwgBt49ZpP KntGIBwEpWT9PaCHK7KGH8zUKbMXVXYnLrLCV2jljyVAnzHFnWjmnzaBQjNEy5iW AIIVpXlQaexTdAMVfNacwVCVS2qQFNsxVjYTg+V+HT9v7UiM2eHIldFWUm9sPHA2 BEGJ+slFwzWAzZ2n2YNkV4CRJj0bLQCQtQ9PPHK8JbbNj9hVdOFESoeMPFGz/1pb VdYyQcz4FsxhV7beqs9+bPEgMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsDU7OH hDaWC+ePJKEl0z/pGhr3MB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBly9vpDWVqFFvxLPhgh+r2xAK6ZayE4QAloP1zx9op8bDd1FfsCyeX B1gM43/njI+QfiQsyUwcDxuhFQZoAinIX+WYqyYejkEm4J2y+1dB47dIN4chw/Zf jcRkzSFJTXnZ/t4m3F+pUCDogOoIDGn8rV9Lxa1uKSvyT1NZ1nQwhQxSLwJ1meBg nSRP0fkm5f7cmiy0wo6pycM+mWD2yPrdAEMhsTvzNqcye71vkG5bmgpjJvvutO6l q8oFEEEO1C+mnazIG6szVSecp64hNBKJFe32tno48gom8CzqeXPYtg1o9Y1uOP8r ohhAd5/K03Y2doyy7sjmSScVxx/J4R5k -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:07 2025 by rpki-client