$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: e5M+UiT1ydnptbsUaSelxxOWCWRfe+1xzI3nQG3Knps= Subject key identifier: 10:68:2E:2E:D6:28:12:DF:6B:89:D2:04:B1:15:80:41:70:85:0C:7A Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0BDC Signing time: Thu 04 Sep 2025 19:19:09 +0000 Manifest this update: Thu 04 Sep 2025 19:19:09 +0000 Manifest next update: Thu 11 Sep 2025 19:19:09 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: Hir0kOJ6+7confmBkuwaRWW0FVS4s+2onhThE2W8VjE=) 2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=) 3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: BAnbwoxPeN/akyQ4VZTfLI7vBW7dc5W2AtRL8aSNk8w=) 4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=) 5: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: 763sVU9n15vfyDlANU4yPhpp0twzMm0fTC0WbKuxyJM=) 6: 52636904771911F083181320C4F9AE02.roa (hash: 1KusZBNNW/qOCnR0kl7JmRQp5eJkrJEh2HYRqvBUy6w=) 7: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=) 8: B43088B457F311F099129754C4F9AE02.roa (hash: cn/Vi2Rebv8wBXfKN3evI7K1WrsszUiyN5vcIbUfZyM=) 9: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: jUTYcTyZ2+OJcqc4G97NloEn+TUwA0PZIcNSbqqjJjk=) 10: 266FDBAE7CA811F099F0EC6BC4F9AE02.roa (hash: bzHe5eQXvAgJqQB53X3rSQRyXfwO/6bU3D4zIt0omyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 4 19:19:09 2025 GMT Not After : Sep 11 19:19:09 2025 GMT Subject: CN=68b9e62d-05fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:d2:fd:dd:c2:08:59:2b:7b:5f:df:ef:88: 60:d5:36:b6:fb:cb:9b:0e:3c:fb:49:e4:32:b9:46: 1c:f9:a9:95:1e:e3:be:f6:9a:5f:73:0e:4a:e9:e8: cb:87:f6:96:94:41:65:10:7a:4b:02:35:c2:e3:09: e1:b4:fb:cb:64:59:49:e2:ab:cc:ab:6a:68:11:53: f9:9a:01:22:45:48:5d:be:51:f1:3e:df:c3:ce:d5: 18:e4:29:c5:c6:51:ca:b3:43:f0:e4:97:7f:7d:25: 84:fc:d2:5b:38:4b:7c:ef:67:45:db:f1:8e:11:bb: f2:98:9c:f5:80:dd:c3:cd:f2:47:18:cf:b3:96:56: a6:51:e0:18:83:c2:af:2d:a0:53:b2:fc:79:ed:51: 8c:7c:4d:73:3a:d3:a2:0f:55:fc:27:42:f8:d0:fd: b1:a9:a2:f4:07:48:6f:27:4c:62:7a:89:9d:55:06: 98:8e:35:ad:ac:a7:94:84:5a:fb:68:50:9e:f8:35: 07:a2:c6:49:b6:6e:9a:95:ca:e2:94:b4:a2:f3:7a: 44:39:23:3f:13:5f:fa:d8:6c:2a:77:2e:45:d4:2c: dc:4c:77:3a:12:2a:ea:8f:7a:0e:79:fe:1d:e6:f3: 15:9b:6e:70:4f:f6:c8:09:9f:20:3a:7b:9c:93:c1: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:2E:2E:D6:28:12:DF:6B:89:D2:04:B1:15:80:41:70:85:0C:7A X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:37:a6:68:2f:fd:2a:8e:4a:e7:ad:15:6a:36:b5:5b:ea:87: 12:30:11:78:f0:71:89:b3:c8:0f:25:b2:75:6b:e0:17:b7:0f: 5a:2b:bd:97:9b:6d:15:c6:b5:db:f8:ac:8f:c0:71:86:6a:db: 36:52:a9:b4:9c:2d:21:00:86:21:c7:6e:b1:ff:84:df:25:ef: 75:9d:46:fe:b1:e6:58:96:c3:16:2d:99:1b:85:f7:cc:16:47: a7:c1:fa:53:cc:aa:88:43:cd:98:49:e4:68:31:4f:27:2d:c7: 9a:e9:19:97:4e:8e:2d:b6:56:7d:d3:f7:bc:8f:1a:c5:78:5b: a9:0b:6d:62:82:b3:8d:58:21:23:c0:0e:ec:d8:d9:21:52:1d: 21:49:a6:b0:c0:93:66:83:5e:8c:a1:9c:a7:0d:aa:83:6d:2c: e4:df:f6:3e:88:46:b5:f7:23:15:27:14:cf:36:95:dc:d7:6b: 84:a1:5b:e6:71:ce:05:87:70:2b:d6:94:f4:60:21:4c:ce:ee: 4f:5c:9d:23:c8:74:05:df:ad:98:b0:89:73:c1:66:3b:98:56: a7:bc:f3:e6:ec:48:26:77:6f:8c:88:df:0c:54:2f:2b:56:5e: fb:ab:bd:a2:0f:da:2c:64:c4:5a:bc:a9:58:9c:47:60:08:02: b6:48:e9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwOTA0MTkxOTA5WhcNMjUwOTExMTkxOTA5WjAYMRYwFAYD VQQDEw02OGI5ZTYyZC0wNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4/S/d3CCFkre1/f74hg1Ta2+8ubDjz7SeQyuUYc+amVHuO+9ppfcw5K6ejL h/aWlEFlEHpLAjXC4wnhtPvLZFlJ4qvMq2poEVP5mgEiRUhdvlHxPt/DztUY5CnF xlHKs0Pw5Jd/fSWE/NJbOEt872dF2/GOEbvymJz1gN3DzfJHGM+zllamUeAYg8Kv LaBTsvx57VGMfE1zOtOiD1X8J0L40P2xqaL0B0hvJ0xieomdVQaYjjWtrKeUhFr7 aFCe+DUHosZJtm6alcrilLSi83pEOSM/E1/62Gwqdy5F1CzcTHc6Eirqj3oOef4d 5vMVm25wT/bICZ8gOnuck8HmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBoLi7W KBLfa4nSBLEVgEFwhQx6MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbN6ZoL/0qjkrnrRVqNrVb6ocSMBF48HGJs8gPJbJ1a+AXtw9aK72X m20VxrXb+KyPwHGGats2Uqm0nC0hAIYhx26x/4TfJe91nUb+seZYlsMWLZkbhffM FkenwfpTzKqIQ82YSeRoMU8nLcea6RmXTo4ttlZ90/e8jxrFeFupC21igrONWCEj wA7s2NkhUh0hSaawwJNmg16MoZynDaqDbSzk3/Y+iEa19yMVJxTPNpXc12uEoVvm cc4Fh3Ar1pT0YCFMzu5PXJ0jyHQF362YsIlzwWY7mFanvPPm7Egmd2+MiN8MVC8r Vl77q72iD9osZMRavKlYnEdgCAK2SOlM -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:48 2025 by rpki-client