$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: S2zrX9VPsAMPXUx0MzUh0TxQ/c5cnFugivCNqspvjAw= Subject key identifier: 73:22:39:72:DF:88:95:4C:54:35:9B:A0:7B:32:2A:AD:EA:EA:F7:B4 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 58 Signing time: Tue 09 Sep 2025 07:23:11 +0000 Manifest this update: Tue 09 Sep 2025 07:23:10 +0000 Manifest next update: Tue 16 Sep 2025 07:23:10 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: vw8U2GnOBX0OjQSndOYvxpCW1LYuPKEEccwJFb+aoQU=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Sep 9 07:23:10 2025 GMT Not After : Sep 16 07:23:10 2025 GMT Subject: CN=68bfd5df-ea06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:1b:f1:c1:a0:ad:11:b1:8c:55:b4:8a:8a: 6e:bc:4e:df:f3:6e:f8:af:7f:39:ac:36:ca:ac:d1: 52:8a:b3:2a:55:e3:36:74:d5:3a:d0:b4:40:2a:f7: bd:f0:df:32:a4:37:02:89:50:84:ce:4e:ba:1b:b7: d4:08:d7:80:99:a3:89:b2:61:93:8c:ac:dd:6c:73: eb:24:35:6c:d5:9a:b6:ba:22:3a:07:ef:d9:0b:94: a7:1d:fd:c9:cd:c3:b6:7d:2e:a4:53:d2:a1:71:9c: d4:33:50:4e:ba:16:02:cf:41:e2:7c:f3:7f:15:c4: de:98:89:86:a6:7b:44:31:80:5d:0d:d2:58:ff:a3: e5:fb:e4:64:7f:b3:7d:26:7e:a7:fc:1f:f7:9a:27: 9b:f3:99:ce:32:fd:a3:1e:6d:a0:8c:10:b9:77:ba: c7:fb:bc:f6:60:2a:28:76:a6:69:a0:73:96:23:29: 05:9f:a9:c8:71:03:17:af:1f:54:bb:13:b6:ab:c0: 82:7e:15:cb:62:77:a8:b6:46:fa:16:be:c2:28:56: f4:36:bc:de:f1:cd:21:7e:d6:95:7d:bf:61:b4:21: 65:bc:dd:1d:dc:fb:e6:2e:0d:c7:fd:cf:36:43:e4: 25:01:b5:0d:13:f2:78:fc:22:20:9a:d2:02:e7:bc: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:22:39:72:DF:88:95:4C:54:35:9B:A0:7B:32:2A:AD:EA:EA:F7:B4 X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a2:0f:94:1f:9e:ef:cd:95:14:98:20:73:08:93:c1:48:00: cc:28:38:9f:85:44:65:77:ae:60:96:ee:49:c2:c3:c4:1d:29: bc:4f:8f:2d:cf:9c:05:b8:25:8c:60:d4:7e:01:2d:3f:2b:ac: 02:0f:04:a5:30:8a:cb:dc:0e:48:d1:48:75:55:cc:3b:c1:6b: 97:dd:d5:12:20:cb:17:f9:1a:0c:f5:ef:5e:4d:19:ae:d2:66: 15:30:fa:a9:3e:56:5e:2c:aa:0d:52:73:5b:e6:b5:6c:d1:e8: 56:88:c5:a6:7b:fc:66:5c:a7:62:fe:45:05:c2:80:de:f2:96: 36:fd:81:c0:7b:d1:af:a1:35:62:40:23:32:89:c3:39:9e:5d: 54:85:c9:3b:f3:23:66:2c:6a:bd:e8:6a:3c:c1:10:ed:4b:f5: 45:06:fc:fb:0e:88:b4:0e:0b:3b:dd:16:f5:5e:90:c9:a1:41: da:68:d8:22:e4:70:cc:fd:10:ad:39:4b:93:ff:fe:d4:5c:a8: d2:2c:39:4c:ca:a5:1a:a4:aa:fe:e3:50:22:71:51:3d:95:b8: c8:32:47:58:b1:76:7a:60:37:ca:e5:7b:25:b5:b5:70:37:b7: f7:dd:74:64:57:f9:0a:12:d0:89:00:d8:bf:f4:c6:9b:91:4d: 85:3e:d4:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA5MDkwNzIzMTBaFw0yNTA5MTYwNzIzMTBaMBgxFjAUBgNV BAMTDTY4YmZkNWRmLWVhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnNhvxwaCtEbGMVbSKim68Tt/zbvivfzmsNsqs0VKKsypV4zZ01TrQtEAq973w 3zKkNwKJUITOTrobt9QI14CZo4myYZOMrN1sc+skNWzVmra6IjoH79kLlKcd/cnN w7Z9LqRT0qFxnNQzUE66FgLPQeJ8838VxN6YiYame0QxgF0N0lj/o+X75GR/s30m fqf8H/eaJ5vzmc4y/aMebaCMELl3usf7vPZgKih2pmmgc5YjKQWfqchxAxevH1S7 E7arwIJ+Fctid6i2RvoWvsIoVvQ2vN7xzSF+1pV9v2G0IWW83R3c++YuDcf9zzZD 5CUBtQ0T8nj8IiCa0gLnvHJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcyI5ct+I lUxUNZugezIqrerq97QwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKiD5Qfnu/NlRSYIHMIk8FIAMwoOJ+FRGV3rmCW7knCw8QdKbxPjy3P nAW4JYxg1H4BLT8rrAIPBKUwisvcDkjRSHVVzDvBa5fd1RIgyxf5Ggz1715NGa7S ZhUw+qk+Vl4sqg1Sc1vmtWzR6FaIxaZ7/GZcp2L+RQXCgN7yljb9gcB70a+hNWJA IzKJwzmeXVSFyTvzI2Ysar3oajzBEO1L9UUG/PsOiLQOCzvdFvVekMmhQdpo2CLk cMz9EK05S5P//tRcqNIsOUzKpRqkqv7jUCJxUT2VuMgyR1ixdnpgN8rleyW1tXA3 t/fddGRX+QoS0IkA2L/0xpuRTYU+1Lc= -----END CERTIFICATE-----Generated at Tue Sep 9 10:12:49 2025 by rpki-client