$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: pDYoH5T2gn6FP2RVoS3GZVo1pMQ/oOGn2md9Lc9GQE8= Subject key identifier: 8C:BD:F2:6C:B5:B8:F1:C7:DB:0D:85:57:65:E6:11:9B:C9:54:5E:46 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C17 Signing time: Thu 18 Sep 2025 18:58:53 +0000 Manifest this update: Thu 18 Sep 2025 18:58:52 +0000 Manifest next update: Thu 25 Sep 2025 18:58:52 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: uv8Pwdd2+HXXA+Fyp50yZozQsEscWgAEAd1Ay2iAuUU=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Sep 18 18:58:52 2025 GMT Not After : Sep 25 18:58:52 2025 GMT Subject: CN=68cc566d-efc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:25:57:41:d7:14:2c:8d:81:0a:c9:01:c5: e7:1f:69:41:67:f7:04:83:7e:fc:1a:a3:c7:e0:3b: 1c:b0:30:b4:0c:30:d6:c2:c9:20:1f:80:28:2e:6d: b7:81:44:9b:81:d8:09:0a:a1:bf:23:f9:4a:c4:c4: 01:09:55:94:44:dd:cb:05:b7:fb:1f:2a:c6:f3:da: fb:c4:a3:df:20:f6:1f:1d:6c:fc:6b:df:1b:48:97: c4:b8:5d:08:8b:51:b2:d5:c3:29:8b:d6:1a:62:38: 3e:8b:7b:73:a8:a6:09:1d:73:7d:6c:2f:f2:08:00: fa:47:74:d6:24:a6:8c:db:bf:f8:92:29:a8:7f:d1: be:4b:ac:64:7f:ca:70:d1:0e:ce:28:91:f5:e1:8c: 14:9d:8a:77:05:bc:7b:45:ca:b4:d2:f6:1d:31:be: 8f:cd:00:9a:ac:ac:69:eb:c4:b7:57:d8:3a:f0:4f: 19:d4:ab:ed:00:53:c9:7c:43:b2:9c:4b:ae:49:36: 11:99:94:4e:27:ef:c0:94:a9:07:9a:dc:fa:11:12: 34:6f:ac:35:5c:86:57:cf:e9:1f:40:e7:42:52:11: 78:c5:cb:cd:e4:e2:66:96:57:27:bd:07:1c:bc:58: 12:00:be:36:0e:de:07:64:85:9f:52:b3:02:1c:54: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BD:F2:6C:B5:B8:F1:C7:DB:0D:85:57:65:E6:11:9B:C9:54:5E:46 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5e:86:20:80:48:88:92:79:26:99:1e:61:dd:b4:1e:99:74: 84:f5:fe:96:63:a7:97:e8:45:ca:d0:56:da:c4:6d:ba:74:c2: 9a:cf:c5:ae:25:3c:b7:82:4c:ec:0f:6b:a5:13:f4:df:a0:4f: b3:3e:37:dc:7f:63:c6:0d:49:26:b8:07:4b:7d:db:3a:69:4f: 8c:16:05:63:4f:63:67:b0:7a:47:5a:c8:ab:00:02:eb:05:df: 8b:b9:a8:83:6a:43:fe:f0:81:fa:a6:05:07:6c:46:ee:32:83: b6:70:d1:45:cf:df:c7:37:dd:a8:c9:d2:7d:69:f9:8d:b4:58: 70:9c:19:cc:a1:c5:69:93:93:cc:9c:1e:32:fd:a3:fe:09:c8: 5c:db:c9:90:e3:ef:19:2e:8c:ce:ff:65:71:fe:45:65:67:43: 47:2f:da:fe:5f:8b:1b:24:1d:15:84:56:63:21:84:da:b2:c9: d5:ab:0f:66:bc:ee:6d:cb:76:ad:8e:0d:9b:0b:23:f9:f5:87: cb:16:34:a9:c1:52:8e:02:0a:05:96:7d:f3:fe:bf:9e:01:1a: 37:7e:a0:10:1f:16:d2:b4:6f:ae:ad:13:9a:13:bb:c2:af:c6: 05:de:2e:e9:7a:b1:4d:ce:1c:63:d5:1c:5f:9e:cc:b4:8e:8e: db:12:cc:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUwOTE4MTg1ODUyWhcNMjUwOTI1MTg1ODUyWjAYMRYwFAYD VQQDEw02OGNjNTY2ZC1lZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAElV0HXFCyNgQrJAcXnH2lBZ/cEg378GqPH4DscsDC0DDDWwskgH4AoLm23 gUSbgdgJCqG/I/lKxMQBCVWURN3LBbf7HyrG89r7xKPfIPYfHWz8a98bSJfEuF0I i1Gy1cMpi9YaYjg+i3tzqKYJHXN9bC/yCAD6R3TWJKaM27/4kimof9G+S6xkf8pw 0Q7OKJH14YwUnYp3Bbx7Rcq00vYdMb6PzQCarKxp68S3V9g68E8Z1KvtAFPJfEOy nEuuSTYRmZROJ+/AlKkHmtz6ERI0b6w1XIZXz+kfQOdCUhF4xcvN5OJmllcnvQcc vFgSAL42Dt4HZIWfUrMCHFS4GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy98my1 uPHH2w2FV2XmEZvJVF5GMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIXoYggEiIknkmmR5h3bQemXSE9f6WY6eX6EXK0FbaxG26dMKaz8Wu JTy3gkzsD2ulE/TfoE+zPjfcf2PGDUkmuAdLfds6aU+MFgVjT2NnsHpHWsirAALr Bd+LuaiDakP+8IH6pgUHbEbuMoO2cNFFz9/HN92oydJ9afmNtFhwnBnMocVpk5PM nB4y/aP+Cchc28mQ4+8ZLozO/2Vx/kVlZ0NHL9r+X4sbJB0VhFZjIYTassnVqw9m vO5ty3atjg2bCyP59YfLFjSpwVKOAgoFln3z/r+eARo3fqAQHxbStG+urROaE7vC r8YF3i7perFNzhxj1Rxfnsy0jo7bEsxv -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:11 2025 by rpki-client