$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: Igq0+72z+qyz1jZwNJFviHvBFpNSJ2xGoOUEW7u5gOM= Subject key identifier: 5D:C0:AA:BC:EF:77:0E:67:1E:04:55:3B:AA:0C:F5:C9:55:94:DE:F2 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 027E Signing time: Wed 17 Sep 2025 02:11:10 +0000 Manifest this update: Wed 17 Sep 2025 02:11:09 +0000 Manifest next update: Wed 24 Sep 2025 02:11:09 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: Ry+Ubo28HSo58zeoSVZGNKH8JclI/X3ebJ1Kl0II8kE=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Sep 17 02:11:09 2025 GMT Not After : Sep 24 02:11:09 2025 GMT Subject: CN=68ca18bd-6b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:d1:d1:28:d0:c9:9f:9e:09:a5:b5:a6:e7: ee:11:fe:62:00:e4:f4:a7:dd:b6:b2:54:24:a8:c3: 10:e8:1f:fa:4b:b3:7d:e3:d1:1a:79:6d:3d:44:90: 27:69:bc:9d:b1:ae:c9:68:75:06:5f:e9:77:b4:38: 90:a7:f5:80:c7:ae:02:23:fa:1d:8a:67:00:8b:30: d2:f5:12:56:72:a1:65:84:08:10:e6:d5:0f:d6:0e: 97:71:ad:4d:67:cf:78:b2:3c:70:bf:8d:b8:df:db: 94:19:77:90:1e:30:bb:ab:e7:5b:b1:9e:78:0d:02: 71:69:a6:d5:db:86:3a:f7:1b:6d:2f:7e:58:3e:c9: 1e:46:33:f9:62:18:ae:a1:b9:85:ff:5e:13:b9:2f: 01:f5:16:6b:4c:9f:bf:bd:37:47:e6:03:65:ee:5b: 46:1a:13:58:50:19:2e:e9:63:4a:40:bc:4b:aa:9f: cb:b6:04:3e:39:b9:60:52:70:c9:2a:21:9d:5b:fa: c4:b0:58:67:2f:50:92:61:f2:88:70:61:d9:2a:09: 63:61:b9:28:c2:8e:75:8e:77:8f:a6:f6:5a:b8:fa: 21:c9:20:82:f4:0c:79:59:ed:de:14:44:97:9f:21: 01:01:98:65:98:d9:86:4f:d5:3c:c6:76:e7:9f:e3: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C0:AA:BC:EF:77:0E:67:1E:04:55:3B:AA:0C:F5:C9:55:94:DE:F2 X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:34:d9:a7:92:88:5c:75:e1:05:98:18:e5:44:d1:65:75: 09:94:61:48:53:b7:91:9e:af:76:dd:e9:c9:a4:86:0d:bf:2b: 97:b6:4b:77:11:31:c8:3f:23:cc:97:e7:de:76:14:84:82:10: 10:4f:ab:e1:74:b1:8c:3a:a5:9a:a4:60:69:c7:df:81:fd:55: 22:07:cc:58:cf:df:35:2c:3d:92:c9:82:a0:08:4d:2d:06:16: a9:46:3e:c3:df:12:76:ac:cc:22:3b:29:92:cc:59:40:25:cd: 70:8e:84:0e:a8:23:36:11:cd:09:d3:7a:3e:88:47:13:1e:dd: bb:3b:c7:84:7b:a3:db:23:6e:d0:28:be:ac:ea:f6:0c:54:d9: 46:01:05:dd:1d:46:01:73:7b:aa:1d:a2:fc:12:53:79:55:ce: 5b:04:be:2d:0c:51:99:6c:00:c4:d4:39:fe:32:4e:06:38:a2: 0c:9d:76:7b:31:fc:3e:71:3f:2a:e1:f8:ba:c7:27:21:e2:dd: 17:59:ca:ec:22:19:24:d6:78:3f:89:01:a6:5b:c3:13:e3:5c: 56:91:f2:04:c2:2c:cf:2b:44:f6:ee:66:2d:96:8e:b5:5a:7b: 45:81:c6:24:c0:27:88:a1:c2:6e:52:c9:bb:aa:3a:e3:e7:d2: a2:bf:3c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUwOTE3MDIxMTA5WhcNMjUwOTI0MDIxMTA5WjAYMRYwFAYD VQQDEw02OGNhMThiZC02YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXPR0SjQyZ+eCaW1pufuEf5iAOT0p922slQkqMMQ6B/6S7N949EaeW09RJAn abydsa7JaHUGX+l3tDiQp/WAx64CI/odimcAizDS9RJWcqFlhAgQ5tUP1g6Xca1N Z894sjxwv42439uUGXeQHjC7q+dbsZ54DQJxaabV24Y69xttL35YPskeRjP5Yhiu obmF/14TuS8B9RZrTJ+/vTdH5gNl7ltGGhNYUBku6WNKQLxLqp/LtgQ+OblgUnDJ KiGdW/rEsFhnL1CSYfKIcGHZKgljYbkowo51jnePpvZauPohySCC9Ax5We3eFESX nyEBAZhlmNmGT9U8xnbnn+PQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3Aqrzv dw5nHgRVO6oM9clVlN7yMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWTTZp5KIXHXhBZgY5UTRZXUJlGFIU7eRnq923enJpIYNvyuXtkt3 ETHIPyPMl+fedhSEghAQT6vhdLGMOqWapGBpx9+B/VUiB8xYz981LD2SyYKgCE0t BhapRj7D3xJ2rMwiOymSzFlAJc1wjoQOqCM2Ec0J03o+iEcTHt27O8eEe6PbI27Q KL6s6vYMVNlGAQXdHUYBc3uqHaL8ElN5Vc5bBL4tDFGZbADE1Dn+Mk4GOKIMnXZ7 Mfw+cT8q4fi6xych4t0XWcrsIhkk1ng/iQGmW8MT41xWkfIEwizPK0T27mYtlo61 WntFgcYkwCeIocJuUsm7qjrj59KivzwX -----END CERTIFICATE-----Generated at Thu Sep 18 08:02:30 2025 by rpki-client