$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: DOhHj6EqNDhGhIW0kLtEc65YLixgOD0t5F/LnHej3gQ= Subject key identifier: 21:E1:12:15:C9:43:7B:52:6B:00:03:A0:43:9A:86:FE:5F:47:D3:CF Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 0433 Signing time: Tue 09 Sep 2025 00:22:22 +0000 Manifest this update: Tue 09 Sep 2025 00:22:22 +0000 Manifest next update: Tue 16 Sep 2025 00:22:22 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: sXtBVBUkucp1g+Y2UsMU7nSqsyLisHh81FARXKzbL3M=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: vU7fQooVaJk/8bmjfMJwzmIcKpCJVNxNvX0SFPwtzeQ=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: GmAluyp1SMa2XHtQwLg3qsZiugrvAjRv/8qqPdWoOr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Sep 9 00:22:22 2025 GMT Not After : Sep 16 00:22:22 2025 GMT Subject: CN=68bf733e-17e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:14:fe:cf:5a:17:6f:3d:3a:d6:87:e8:03: bd:4d:48:a7:cd:d7:16:87:a5:14:b0:eb:18:52:87: 88:b8:70:c1:d5:5a:bb:a4:20:cc:aa:75:c5:2a:5b: 1f:93:e1:48:7a:a4:3d:16:8f:da:47:bf:c3:c1:0c: ed:65:e5:a2:3d:b3:5b:0c:52:bb:28:6a:37:8c:82: 10:e5:56:a8:7e:f4:1f:08:b6:90:25:76:4a:12:19: 91:13:1a:c0:a2:c3:67:83:77:5d:c7:2c:ad:88:f8: 5b:e3:11:71:7a:b6:01:c2:76:e0:8c:23:ad:a6:0d: e0:65:43:6d:90:62:c4:32:5a:52:85:e9:0e:24:4b: 9e:b5:47:4d:4e:2e:50:3b:ce:03:38:9c:fe:c1:be: 97:62:6a:ad:70:1a:d9:36:c4:a4:f9:51:5a:40:fb: 5e:07:c3:0e:58:6c:55:d5:a0:52:0e:b1:57:e6:49: fc:6f:d1:09:aa:72:aa:c1:93:e1:38:eb:c4:de:2c: 13:60:28:05:ac:41:b6:b7:bc:0d:f7:a2:28:4f:fe: a1:cd:ec:2c:38:ad:97:55:5b:66:81:b3:51:54:fd: 0e:a7:2c:f3:3b:48:7d:8b:43:4f:f8:e4:18:f4:56: 66:99:74:39:00:9c:51:e9:02:7a:cb:dd:0e:17:73: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E1:12:15:C9:43:7B:52:6B:00:03:A0:43:9A:86:FE:5F:47:D3:CF X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:14:37:fd:0f:b2:3a:30:85:79:05:36:b4:9e:70:75:1a:56: 47:ec:56:fe:88:1a:05:cd:e2:e0:91:a1:61:51:82:4e:64:de: da:95:02:9b:fd:de:bf:7e:5f:96:12:b1:9f:dc:16:bf:ce:4b: 2e:b9:d2:0d:29:df:59:f9:c1:60:e2:a3:a7:00:91:56:e9:06: ba:d1:7a:4a:85:94:65:43:ec:df:26:48:a4:47:e5:01:2b:67: 6a:0b:08:75:88:1c:4e:48:c2:06:ce:55:c7:c7:17:fb:8a:95: 9f:22:fb:65:c8:7c:d7:57:26:77:d8:7e:48:51:10:b5:6b:f0: 16:33:1a:c3:2f:86:4b:a7:6a:20:d5:ce:fe:82:67:2f:b1:7f: 7f:93:46:14:79:ff:af:f3:71:3a:bf:d8:9e:f3:54:4c:92:c5: 26:53:0b:f8:2f:ca:03:d7:84:6f:3a:2f:0a:d1:aa:8e:cf:41: da:77:67:fd:a4:28:c1:78:b2:e9:96:e7:ab:ec:ef:70:dc:8b: e3:94:05:4a:1a:58:36:f2:33:33:11:50:25:a4:2f:a8:97:b7: 62:c4:b0:bc:d3:a8:c7:1f:9a:e2:ba:f5:af:70:1a:6a:bb:80: 86:fd:1b:69:65:94:ff:cf:90:3c:e8:61:69:b0:b5:af:e5:a2: c9:90:59:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUwOTA5MDAyMjIyWhcNMjUwOTE2MDAyMjIyWjAYMRYwFAYD VQQDEw02OGJmNzMzZS0xN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kcU/s9aF289OtaH6AO9TUinzdcWh6UUsOsYUoeIuHDB1Vq7pCDMqnXFKlsf k+FIeqQ9Fo/aR7/DwQztZeWiPbNbDFK7KGo3jIIQ5VaofvQfCLaQJXZKEhmRExrA osNng3ddxyytiPhb4xFxerYBwnbgjCOtpg3gZUNtkGLEMlpShekOJEuetUdNTi5Q O84DOJz+wb6XYmqtcBrZNsSk+VFaQPteB8MOWGxV1aBSDrFX5kn8b9EJqnKqwZPh OOvE3iwTYCgFrEG2t7wN96IoT/6hzewsOK2XVVtmgbNRVP0OpyzzO0h9i0NP+OQY 9FZmmXQ5AJxR6QJ6y90OF3OuSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHhEhXJ Q3tSawADoEOahv5fR9PPMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFDf9D7I6MIV5BTa0nnB1GlZH7Fb+iBoFzeLgkaFhUYJOZN7alQKb /d6/fl+WErGf3Ba/zksuudINKd9Z+cFg4qOnAJFW6Qa60XpKhZRlQ+zfJkikR+UB K2dqCwh1iBxOSMIGzlXHxxf7ipWfIvtlyHzXVyZ32H5IURC1a/AWMxrDL4ZLp2og 1c7+gmcvsX9/k0YUef+v83E6v9ie81RMksUmUwv4L8oD14RvOi8K0aqOz0Had2f9 pCjBeLLpluer7O9w3IvjlAVKGlg28jMzEVAlpC+ol7dixLC806jHH5riuvWvcBpq u4CG/RtpZZT/z5A86GFpsLWv5aLJkFk+ -----END CERTIFICATE-----Generated at Tue Sep 9 18:29:30 2025 by rpki-client