$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: NoJnJx38CLkjpLEWjs4Kgyc0MOng7QDaIDSJZ3HuVJM= Subject key identifier: 2E:95:B3:CD:0E:B4:D5:BD:F7:6C:84:A2:AB:7A:46:75:ED:DF:8C:42 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 06CE Signing time: Thu 04 Sep 2025 22:19:17 +0000 Manifest this update: Thu 04 Sep 2025 22:19:17 +0000 Manifest next update: Thu 11 Sep 2025 22:19:17 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: aYkgsxeSueaC3/ss5mb1Qxpzo6kAPewpzLr5UfFNR+Y=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: Sep 4 22:19:17 2025 GMT Not After : Sep 11 22:19:17 2025 GMT Subject: CN=68ba1065-ab45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:1a:c4:a8:e0:2f:a8:6e:4e:d8:9e:3d:87: b3:20:94:c9:20:43:30:49:47:dd:1f:d1:51:e6:cd: 76:2b:7e:96:a0:8e:03:25:b3:03:84:e5:a6:2e:7f: 0b:41:9f:0d:52:7a:55:cc:53:9d:d6:c3:04:3d:0e: eb:79:8a:c6:e2:25:ea:b7:db:f5:e7:43:77:8b:d8: f8:47:53:a0:6a:d4:cb:69:cb:42:7b:34:83:cb:10: f1:60:ba:82:70:d6:2c:9c:06:56:52:72:10:c1:de: c0:1c:ab:e7:a8:0b:42:9b:0e:43:c3:2f:8f:3c:ef: 2d:d7:da:86:20:ca:40:09:57:42:3b:02:12:6b:4c: d9:64:88:b8:2d:4c:f7:cc:fb:89:04:6f:ea:6e:24: 2a:07:8e:ca:69:de:93:20:d7:90:4d:ae:b0:eb:f0: 0d:2e:9f:85:e6:7b:27:1f:bf:5d:64:42:ba:99:21: 83:15:74:a5:8b:fd:b4:43:06:ad:32:13:23:f1:ec: bd:f0:e6:7c:cd:0c:c8:86:ae:e6:b3:49:ef:90:d3: 76:f7:c8:e0:d3:50:76:8f:53:a3:f5:30:03:d3:09: c4:e2:23:bd:cd:67:ea:02:44:14:ef:1f:94:2d:09: e4:eb:ed:49:1b:13:e9:f5:bc:eb:c8:53:a9:5e:de: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:B3:CD:0E:B4:D5:BD:F7:6C:84:A2:AB:7A:46:75:ED:DF:8C:42 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:17:bd:67:9b:d5:0a:d2:2a:d3:5b:53:65:10:7d:fe:0f:a7: 88:93:87:52:bb:bb:7d:3b:49:48:d1:ab:f5:7b:de:04:8d:a2: c3:61:8e:29:fb:cd:22:db:e2:75:5e:41:c2:53:d5:9b:72:c1: 40:7b:e3:ea:1a:0e:f4:af:fb:68:36:58:b1:0a:83:34:7c:4d: ff:54:2e:df:dd:a4:6b:46:4c:c8:f3:95:91:b0:20:c6:30:cc: a2:46:80:04:27:e5:35:0c:8b:68:be:88:02:28:6d:d6:52:dc: 1a:d2:c1:3a:6b:26:84:06:fe:1d:a6:da:71:72:03:be:8b:b5: 67:f2:65:89:a8:6b:83:d2:19:37:51:c6:48:b7:08:7b:e6:20: dd:cd:d2:15:cc:c7:08:00:8a:89:cb:68:46:4b:7d:a1:e4:77: 39:1b:65:3f:01:1a:ec:94:dc:34:91:05:27:c2:1b:c4:52:75: 74:cc:5d:2c:ea:66:d5:8f:ec:95:d5:70:1b:25:e0:b3:08:19: a1:bb:6b:8a:cb:5b:0d:a3:95:f0:7d:8d:79:8a:b1:29:62:22: a8:81:1c:fa:70:0f:97:3d:fc:e7:2d:be:13:6d:57:20:d0:5c: 23:5a:5d:a3:c6:ef:e2:3b:b5:fc:57:c7:a3:7d:bf:af:55:41: ed:fe:e6:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwOTA0MjIxOTE3WhcNMjUwOTExMjIxOTE3WjAYMRYwFAYD VQQDEw02OGJhMTA2NS1hYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IkaxKjgL6huTtiePYezIJTJIEMwSUfdH9FR5s12K36WoI4DJbMDhOWmLn8L QZ8NUnpVzFOd1sMEPQ7reYrG4iXqt9v150N3i9j4R1OgatTLactCezSDyxDxYLqC cNYsnAZWUnIQwd7AHKvnqAtCmw5Dwy+PPO8t19qGIMpACVdCOwISa0zZZIi4LUz3 zPuJBG/qbiQqB47Kad6TINeQTa6w6/ANLp+F5nsnH79dZEK6mSGDFXSli/20Qwat MhMj8ey98OZ8zQzIhq7ms0nvkNN298jg01B2j1Oj9TAD0wnE4iO9zWfqAkQU7x+U LQnk6+1JGxPp9bzryFOpXt6a1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6Vs80O tNW992yEoqt6RnXt34xCMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5F71nm9UK0irTW1NlEH3+D6eIk4dSu7t9O0lI0av1e94EjaLDYY4p +80i2+J1XkHCU9WbcsFAe+PqGg70r/toNlixCoM0fE3/VC7f3aRrRkzI85WRsCDG MMyiRoAEJ+U1DItovogCKG3WUtwa0sE6ayaEBv4dptpxcgO+i7Vn8mWJqGuD0hk3 UcZItwh75iDdzdIVzMcIAIqJy2hGS32h5Hc5G2U/ARrslNw0kQUnwhvEUnV0zF0s 6mbVj+yV1XAbJeCzCBmhu2uKy1sNo5XwfY15irEpYiKogRz6cA+XPfznLb4TbVcg 0FwjWl2jxu/iO7X8V8ejfb+vVUHt/uZp -----END CERTIFICATE-----Generated at Sat Sep 6 06:01:49 2025 by rpki-client