$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json) Hash identifier: 2NbhhMReK0PdD9B3nllmKWHBQMHW7kZpJ5X0gq1nF/s= Subject key identifier: 24:C5:AE:43:E8:96:B3:A4:8F:0E:C0:98:96:2C:57:26:CE:1D:8F:3E Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft Manifest number: 01F3 Signing time: Wed 17 Sep 2025 03:21:50 +0000 Manifest this update: Wed 17 Sep 2025 03:21:49 +0000 Manifest next update: Wed 24 Sep 2025 03:21:49 +0000 Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: BHilDLJPojdheKJI2WbB3G8RcJWKQZB4XcZQuKdmsoY=) 2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: eoxxd4P4KClhW4Wea9IXc/kUQEJNH05SWlUtFLbdVvM=) 3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: bj5Hq62UMZISTbn6THoPgyqtMomjzdXyPKa22dPZDMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Validity Not Before: Sep 17 03:21:49 2025 GMT Not After : Sep 24 03:21:49 2025 GMT Subject: CN=68ca294d-04d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:b8:de:6b:8b:1d:50:e8:6b:bb:71:d5:1e: 15:69:93:4e:74:17:1e:10:6e:25:ff:51:f0:54:fe: 5c:ae:a8:cb:8e:46:20:77:d4:34:8d:ab:45:02:7c: f2:4c:3b:8c:f8:15:bd:ba:c8:71:0c:c6:bb:4a:e7: a2:37:9c:00:7d:9e:6e:92:53:b8:9d:19:63:12:05: 7e:dd:05:8e:08:e1:33:d5:7c:f5:f8:da:1b:58:d6: 29:0e:c1:cb:9b:22:b9:d1:2f:8d:f5:02:ad:59:d3: 0a:bb:f6:f3:26:77:3d:1f:a2:a8:82:be:79:71:1c: 8b:9b:ad:d2:44:30:74:d6:62:8f:7b:ee:a4:86:84: 85:39:38:93:92:87:26:3a:50:99:a7:79:c7:93:0c: 3f:3a:db:4a:28:07:23:66:87:99:12:84:d4:13:cf: 5a:e6:57:bc:a6:b6:ca:4c:0d:25:09:fd:7c:d1:1f: d3:01:61:32:99:f5:95:00:47:49:5f:2d:14:6d:f2: f3:d2:1a:4b:f3:68:46:e8:d0:1c:a2:b1:5f:40:cd: 40:79:85:d4:ba:d3:29:9f:3d:89:32:17:5d:c0:e3: e4:2a:e7:22:f4:07:d1:33:7b:36:13:04:8e:66:7f: b9:8b:2a:fe:46:4f:9f:0f:e9:cc:4f:b2:71:d2:60: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:AE:43:E8:96:B3:A4:8F:0E:C0:98:96:2C:57:26:CE:1D:8F:3E X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:74:5e:90:1a:09:6a:5d:69:cb:93:8e:2d:3d:c3:ed:eb:df: d3:3d:73:fe:d9:26:ca:89:11:e2:87:81:5c:74:b1:87:cc:ed: 2b:31:a2:51:87:61:67:fd:66:af:f5:38:75:b0:52:3a:83:94: 0c:bd:07:7f:55:09:01:32:19:ff:18:01:02:c6:93:c6:71:59: 01:4a:2f:0b:f3:65:92:29:23:06:86:af:4e:ad:cc:fc:00:43: ab:be:43:0b:98:e1:0b:fc:9c:4b:59:5f:70:18:80:09:9e:00: 40:94:de:b1:8a:81:76:71:28:18:8c:06:59:1e:c1:08:1c:d6: a2:e1:7b:72:db:83:8c:0c:41:a2:1c:0f:70:e2:50:84:6f:03: 6e:7a:a7:8c:e2:0a:7e:31:d3:77:fa:07:e4:04:bf:9d:07:d8: 19:3b:df:8a:9d:f4:20:8f:a9:55:2c:68:69:12:3e:02:0e:96: f6:da:05:51:fc:58:2b:23:95:16:7b:e4:92:99:3b:12:da:e3: fe:b2:91:0e:42:63:0d:90:e3:5d:9a:44:b4:32:cb:a0:a8:ba: d4:a3:8d:4a:c8:4a:91:10:a4:3f:ba:b2:54:97:e2:cc:ae:b7: 30:6e:ff:a5:a6:01:6c:a3:42:33:9e:2a:c2:17:e1:d0:cc:69: 9e:23:a1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUwOTE3MDMyMTQ5WhcNMjUwOTI0MDMyMTQ5WjAYMRYwFAYD VQQDEw02OGNhMjk0ZC0wNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36K43muLHVDoa7tx1R4VaZNOdBceEG4l/1HwVP5crqjLjkYgd9Q0jatFAnzy TDuM+BW9ushxDMa7SueiN5wAfZ5uklO4nRljEgV+3QWOCOEz1Xz1+NobWNYpDsHL myK50S+N9QKtWdMKu/bzJnc9H6Kogr55cRyLm63SRDB01mKPe+6khoSFOTiTkocm OlCZp3nHkww/OttKKAcjZoeZEoTUE89a5le8prbKTA0lCf180R/TAWEymfWVAEdJ Xy0UbfLz0hpL82hG6NAcorFfQM1AeYXUutMpnz2JMhddwOPkKuci9AfRM3s2EwSO Zn+5iyr+Rk+fD+nMT7Jx0mDj4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTFrkPo lrOkjw7AmJYsVybOHY8+MB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6 ekNNbEMxWl9JRmE0VUhGYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfdF6QGglqXWnLk44tPcPt69/TPXP+2SbKiRHih4FcdLGHzO0rMaJR h2Fn/Wav9Th1sFI6g5QMvQd/VQkBMhn/GAECxpPGcVkBSi8L82WSKSMGhq9Orcz8 AEOrvkMLmOEL/JxLWV9wGIAJngBAlN6xioF2cSgYjAZZHsEIHNai4Xty24OMDEGi HA9w4lCEbwNueqeM4gp+MdN3+gfkBL+dB9gZO9+KnfQgj6lVLGhpEj4CDpb22gVR /FgrI5UWe+SSmTsS2uP+spEOQmMNkONdmkS0MsugqLrUo41KyEqREKQ/urJUl+LM rrcwbv+lpgFso0IznirCF+HQzGmeI6Hn -----END CERTIFICATE-----Generated at Thu Sep 18 08:41:24 2025 by rpki-client