$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft File: rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json) Hash identifier: lrPUplOzkz8B9UdH07bnc2r/KYfrhh7HcJHd7tSJkzY= Subject key identifier: DF:1F:45:33:A4:8D:2E:CA:16:AE:93:11:55:E1:8F:32:14:35:D4:83 Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft Manifest number: AC Signing time: Fri 05 Sep 2025 06:34:00 +0000 Manifest this update: Fri 05 Sep 2025 06:34:00 +0000 Manifest next update: Fri 12 Sep 2025 06:34:00 +0000 Files and hashes: 1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: VRi6exPHVxxeOJRTLgCR6zuMqpeYNoBSsWU45vDO64E=) 2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: /KjXSfmE2q+fXSG5F8CKP1wpSYcVa/XLVf1LpFs9wvg=) 3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: G+4s3zAMADjSVZmHk5FULbhH5AjFBhHH97tW10llI8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Validity Not Before: Sep 5 06:34:00 2025 GMT Not After : Sep 12 06:34:00 2025 GMT Subject: CN=68ba8458-7550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:94:13:db:d8:ee:83:fc:96:ba:44:72:ec: 45:4c:6b:d0:2b:8e:4f:51:f7:6f:fd:92:d6:cc:e3: 0a:0c:24:e0:c1:e0:1a:61:7f:ca:60:01:7a:a7:54: c3:a0:95:38:7a:93:f7:f7:d7:da:1f:97:c1:93:46: f1:1d:19:54:a4:dc:1c:be:ef:c4:76:2e:a2:30:ad: 31:00:df:1e:2f:b5:47:23:d9:3b:ee:02:76:a7:3f: 1c:73:eb:90:81:21:4e:6c:41:45:3f:3c:0a:b9:d3: da:a3:0f:b0:ae:8b:d0:7b:64:cc:92:c4:72:8f:75: e6:f7:6c:63:7c:92:2e:58:5b:13:b7:ca:52:dc:07: 0b:37:c4:bc:f7:20:77:34:88:3d:0e:90:7d:1e:f8: 7c:6f:75:c1:cb:55:89:2d:1a:3c:d4:9d:ff:b2:5e: a4:1c:f5:ba:fe:ad:85:a9:24:93:1a:11:23:63:dc: 89:14:5a:70:7b:7e:cd:18:0f:1d:c5:00:79:a6:5c: e6:18:ab:16:ee:93:42:ec:9e:7d:43:67:c2:4a:8c: f4:c2:8f:2f:e4:b3:47:f0:a7:cd:29:15:9a:6d:9b: 74:65:4f:8a:ab:e5:1d:0d:f3:8b:12:9e:9f:e9:3c: 3b:7a:b6:67:dd:33:96:69:25:00:b4:fa:37:3f:43: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:45:33:A4:8D:2E:CA:16:AE:93:11:55:E1:8F:32:14:35:D4:83 X509v3 Authority Key Identifier: keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:64:e8:63:db:26:1d:33:08:76:54:cc:66:1e:f1:cb:fa:c2: 74:e2:03:78:67:af:94:f3:cf:4a:c7:9b:0f:14:72:c4:4f:c6: ce:90:bd:72:15:2c:b3:fa:cd:b7:4f:94:0a:94:be:b5:31:64: 01:9b:30:36:52:47:0e:74:ad:ef:13:2d:5f:d2:3d:4f:bb:47: 12:58:3c:db:f4:f8:ed:4f:b3:8b:5b:93:88:4d:db:73:53:8a: 43:91:52:03:01:e6:19:33:ad:30:9d:ac:81:07:67:16:07:10: 60:c6:d5:2d:d4:6b:dc:04:10:eb:51:32:b0:b7:3a:d7:2d:6e: 63:26:72:f4:e4:6b:99:78:db:93:6e:61:a6:e7:e2:ff:f8:45: 8c:34:dd:7e:d8:d1:9e:a3:26:ef:20:bc:30:29:b9:9a:a1:9b: 11:8a:29:1a:c4:55:7d:a7:a0:3b:49:2f:63:7c:87:fa:62:45: 04:70:e0:d8:cd:60:ee:50:11:44:1a:49:9b:2b:8b:22:e4:be: 65:5d:f2:88:0d:b0:aa:97:09:7a:88:97:b9:81:14:ef:dd:c2: 6d:58:15:05:d0:4a:d3:ef:5e:c7:bb:1d:ab:0d:bd:15:b8:ce: f9:32:88:8e:f8:fb:55:b5:07:ba:d3:70:48:16:35:81:2e:5c: 60:a3:b8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKEFFRDgwMTBERTREMjNGRjREMEY5MDA1QkFDOTI1QkRC N0YzREYzMEEwHhcNMjUwOTA1MDYzNDAwWhcNMjUwOTEyMDYzNDAwWjAYMRYwFAYD VQQDEw02OGJhODQ1OC03NTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vCUE9vY7oP8lrpEcuxFTGvQK45PUfdv/ZLWzOMKDCTgweAaYX/KYAF6p1TD oJU4epP399faH5fBk0bxHRlUpNwcvu/Edi6iMK0xAN8eL7VHI9k77gJ2pz8cc+uQ gSFObEFFPzwKudPaow+wrovQe2TMksRyj3Xm92xjfJIuWFsTt8pS3AcLN8S89yB3 NIg9DpB9Hvh8b3XBy1WJLRo81J3/sl6kHPW6/q2FqSSTGhEjY9yJFFpwe37NGA8d xQB5plzmGKsW7pNC7J59Q2fCSoz0wo8v5LNH8KfNKRWabZt0ZU+Kq+UdDfOLEp6f 6Tw7erZn3TOWaSUAtPo3P0OjaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8fRTOk jS7KFq6TEVXhjzIUNdSDMB8GA1UdIwQYMBaAFK7YAQ3k0j/00PkAW6ySW9t/PfMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8yNzQ5QzdCRTg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1BfVFEtUUJickpKYjIzODk4 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J0Z0JEZVRTUF9UUS1RQmJySkpiMjM4OTh3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8yNzQ5QzdCRTg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1Bf VFEtUUJickpKYjIzODk4d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlZOhj2yYdMwh2VMxmHvHL+sJ04gN4Z6+U889Kx5sPFHLET8bOkL1y FSyz+s23T5QKlL61MWQBmzA2UkcOdK3vEy1f0j1Pu0cSWDzb9PjtT7OLW5OITdtz U4pDkVIDAeYZM60wnayBB2cWBxBgxtUt1GvcBBDrUTKwtzrXLW5jJnL05GuZeNuT bmGm5+L/+EWMNN1+2NGeoybvILwwKbmaoZsRiikaxFV9p6A7SS9jfIf6YkUEcODY zWDuUBFEGkmbK4si5L5lXfKIDbCqlwl6iJe5gRTv3cJtWBUF0ErT717Hux2rDb0V uM75MoiO+PtVtQe603BIFjWBLlxgo7hn -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:13 2025 by rpki-client