$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: XRakPtB8mhrmcQ2RXiBLTAR5UeOyIEJEXQS62MJO6Po= Subject key identifier: 89:4B:85:76:0E:05:7E:CF:21:5C:E5:15:2A:83:F7:0B:E1:C3:46:AC Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 60 Signing time: Fri 19 Sep 2025 07:52:16 +0000 Manifest this update: Fri 19 Sep 2025 07:52:15 +0000 Manifest next update: Fri 26 Sep 2025 07:52:15 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: 47VmuLEkjM/CXfjPRX4CMkbdqo+xv2CKulX69UuYliw=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Sep 19 07:52:15 2025 GMT Not After : Sep 26 07:52:15 2025 GMT Subject: CN=68cd0baf-e5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:42:c6:ed:18:db:a6:ed:60:03:2b:a7:4c: 50:74:32:2d:7e:33:6d:93:01:42:3d:a2:03:8a:68: b5:6c:c8:44:d7:7f:79:10:d6:50:b0:28:1a:83:28: 21:5c:2a:bf:4d:df:e6:cb:8f:2b:24:50:b1:61:53: db:6f:f6:9c:d7:27:a8:65:d7:fc:b2:6c:47:ce:aa: 9b:7b:37:ac:05:a4:a0:78:66:b9:49:f1:8d:1f:b2: d6:d4:ed:9a:de:37:9a:4b:54:be:e4:1d:86:08:4c: 7d:52:ac:9a:42:27:5b:dc:28:2f:81:00:be:5e:da: 0e:7f:72:ef:ca:51:c5:84:0a:f3:a4:d3:e9:12:61: ed:5a:fe:1e:a6:00:31:0a:c0:d3:29:df:4c:a2:44: e9:0e:74:bd:f1:05:b3:a7:02:f5:ae:38:d6:ea:4b: b3:08:3c:a1:13:cc:d4:bb:99:b1:6d:b1:47:de:e9: 9d:c2:f3:80:b0:9c:2e:7a:c4:c1:aa:2d:41:05:22: 7e:d5:09:b3:4a:6e:71:8a:92:2f:0d:89:e6:51:c1: fa:ed:c8:87:af:5a:3c:38:f2:90:58:31:cc:60:93: c1:53:9d:c4:bc:2e:01:c1:16:51:37:9b:2e:a7:70: e6:43:05:3f:6c:9e:03:d9:d8:14:54:dd:75:fc:79: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:85:76:0E:05:7E:CF:21:5C:E5:15:2A:83:F7:0B:E1:C3:46:AC X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:c4:e5:1e:5e:21:3d:22:2b:8f:92:9f:dc:e7:a1:e7:41: 18:c8:43:a6:c4:ed:dd:50:e3:e4:14:b3:d3:3b:e3:da:29:8e: ce:98:57:e0:d9:84:be:02:18:72:90:55:38:da:7c:b1:2b:fd: 58:5c:85:8e:04:94:57:32:aa:3a:9b:00:54:cf:49:f8:50:f7: 22:0d:65:66:f4:40:8a:b3:6d:c3:5e:7d:b8:6a:f7:6a:54:b3: 53:1b:da:2a:eb:24:52:a0:fe:ff:1e:4b:1b:80:43:dd:45:67: 1d:7d:28:d8:7d:e5:14:e8:b7:4e:47:ea:3c:65:79:a3:93:9b: 3d:3a:55:c9:ac:86:c8:47:83:f1:2b:c4:71:70:0c:96:04:8b: 26:bb:cc:89:7a:c4:0c:a3:9c:32:36:7a:3f:1f:43:17:af:e0: a4:39:6f:54:85:03:09:9f:33:4d:95:3b:5a:a8:4b:1c:b7:c0: 11:87:40:11:0d:71:31:00:e6:3f:db:58:3e:62:ec:c2:eb:79: f2:44:28:a9:29:6a:d5:ce:86:86:65:cc:42:0f:97:50:8f:9f: 7c:89:23:bf:19:2c:07:02:54:92:4f:3d:ff:c8:7b:94:dd:57: 98:ad:88:95:88:aa:8a:7c:ab:c3:1f:cc:7c:ed:c3:64:5f:c1: b0:55:40:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA5MTkwNzUyMTVaFw0yNTA5MjYwNzUyMTVaMBgxFjAUBgNV BAMTDTY4Y2QwYmFmLWU1Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9tkLG7Rjbpu1gAyunTFB0Mi1+M22TAUI9ogOKaLVsyETXf3kQ1lCwKBqDKCFc Kr9N3+bLjyskULFhU9tv9pzXJ6hl1/yybEfOqpt7N6wFpKB4ZrlJ8Y0fstbU7Zre N5pLVL7kHYYITH1SrJpCJ1vcKC+BAL5e2g5/cu/KUcWECvOk0+kSYe1a/h6mADEK wNMp30yiROkOdL3xBbOnAvWuONbqS7MIPKETzNS7mbFtsUfe6Z3C84CwnC56xMGq LUEFIn7VCbNKbnGKki8NieZRwfrtyIevWjw48pBYMcxgk8FTncS8LgHBFlE3my6n cOZDBT9sngPZ2BRU3XX8ecD1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiUuFdg4F fs8hXOUVKoP3C+HDRqwwHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAh+xOUeXiE9IiuPkp/c56HnQRjIQ6bE7d1Q4+QUs9M749opjs6YV+DZ hL4CGHKQVTjafLEr/VhchY4ElFcyqjqbAFTPSfhQ9yINZWb0QIqzbcNefbhq92pU s1Mb2irrJFKg/v8eSxuAQ91FZx19KNh95RTot05H6jxleaOTmz06VcmshshHg/Er xHFwDJYEiya7zIl6xAyjnDI2ej8fQxev4KQ5b1SFAwmfM02VO1qoSxy3wBGHQBEN cTEA5j/bWD5i7MLrefJEKKkpatXOhoZlzEIPl1CPn3yJI78ZLAcCVJJPPf/Ie5Td V5itiJWIqop8q8MfzHztw2RfwbBVQKY= -----END CERTIFICATE-----Generated at Fri Sep 19 12:22:22 2025 by rpki-client