$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: ZEsZid2sZBLzVvNEWxEOGtR1N8Hx7jLoVx8IUelmaVw= Subject key identifier: C6:B5:3B:1D:3C:B9:16:71:0A:F9:3A:51:CD:96:8E:4B:DB:E0:9E:1B Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: B1 Signing time: Fri 05 Sep 2025 06:37:56 +0000 Manifest this update: Fri 05 Sep 2025 06:37:56 +0000 Manifest next update: Fri 12 Sep 2025 06:37:56 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: WDz42j91zqN8BDASEHq6NsdajpBRcaQuloLN4+72IeQ=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: Nw7bdEXIt94l0l1M2JoUcNpjGgfJnBtSbrpDec58/34=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: DTme312dtWhjs1JFg94y153qtB+lMbeMxpbcIu8vIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Sep 5 06:37:56 2025 GMT Not After : Sep 12 06:37:56 2025 GMT Subject: CN=68ba8544-d9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:e0:70:85:44:9c:5c:f2:b4:72:e7:ee:d2: 0a:4b:f8:b6:3d:f4:7d:50:17:5c:45:59:0b:20:09: 5d:1d:a8:da:4d:14:a8:cb:c0:b1:20:40:74:51:0e: 08:b1:5b:04:f2:23:a3:f8:d2:ca:2a:87:ac:f3:28: d2:74:21:fe:e6:a7:c6:57:18:97:ec:b5:1e:5f:c2: 04:c2:9d:cd:15:b7:b4:31:ed:a7:11:7e:ce:65:61: 77:25:48:7f:e7:2b:70:64:22:df:06:4f:e6:28:e6: 1e:3a:bc:0d:1b:8d:bb:45:73:88:9e:71:be:38:da: 10:d9:3d:fb:61:79:7b:7c:d9:b8:b1:ba:93:a3:fc: ef:fc:e8:49:69:7c:18:d5:df:41:0a:81:e1:68:50: e2:67:d9:c1:f1:09:34:bb:9d:22:d0:07:d8:86:fa: 65:71:9d:60:25:52:11:6a:8a:a3:f9:b0:45:91:53: dc:d9:34:4f:c9:9c:5b:11:7d:13:49:6d:56:d0:d8: d5:fa:32:c1:65:90:d6:bb:2a:3d:ce:38:ce:48:eb: 54:6b:b5:0a:ab:3c:16:c4:78:a8:7e:27:31:ea:9c: 70:1f:c7:7d:c7:6d:74:e4:eb:06:1b:91:1f:d6:81: 85:9d:4d:68:34:2b:fa:f9:25:c8:90:42:1e:7a:bf: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B5:3B:1D:3C:B9:16:71:0A:F9:3A:51:CD:96:8E:4B:DB:E0:9E:1B X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c3:ef:c9:96:b0:49:91:b8:42:c8:ab:0c:91:7f:79:ca:28: 4e:48:a3:b4:2f:9f:96:c6:20:20:4e:58:54:0f:87:0f:57:6f: e0:b2:49:bb:a4:63:79:a3:23:46:82:8d:89:85:c8:6e:b5:30: 13:1d:9b:3a:4b:94:c1:8d:18:25:d1:9d:93:49:c4:d2:3f:c2: b6:2d:f9:0f:82:e7:a0:d7:c1:e3:f5:8a:14:80:bf:ee:ed:7c: d4:64:12:8e:84:b9:ce:33:0b:a2:f6:01:82:40:ac:86:74:68: 9d:99:fc:cb:34:51:89:a0:a8:c2:8d:99:8f:f9:da:19:7c:0a: 63:26:8d:07:67:8a:1e:6e:c9:68:e7:3a:00:e8:7b:3d:da:d8: bf:21:56:55:12:f0:08:b1:12:01:58:13:ad:71:25:3b:b4:06: 8b:78:00:c3:3c:63:70:8f:12:ca:20:19:9a:1c:7e:96:fd:f0: c2:f8:74:66:ed:c8:51:ca:c4:13:06:3a:51:f7:17:f3:08:c5: 0c:ef:66:f6:cb:0b:e0:09:64:61:4f:17:2b:2a:4f:a3:e0:53: be:ac:a0:0f:ca:8e:c3:34:d4:30:4c:b6:5c:87:40:ed:9f:38: 1c:8a:85:d7:a7:0d:94:b2:57:a0:37:55:4b:01:b9:d1:39:0b: b9:48:69:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwOTA1MDYzNzU2WhcNMjUwOTEyMDYzNzU2WjAYMRYwFAYD VQQDEw02OGJhODU0NC1kOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l7gcIVEnFzytHLn7tIKS/i2PfR9UBdcRVkLIAldHajaTRSoy8CxIEB0UQ4I sVsE8iOj+NLKKoes8yjSdCH+5qfGVxiX7LUeX8IEwp3NFbe0Me2nEX7OZWF3JUh/ 5ytwZCLfBk/mKOYeOrwNG427RXOInnG+ONoQ2T37YXl7fNm4sbqTo/zv/OhJaXwY 1d9BCoHhaFDiZ9nB8Qk0u50i0AfYhvplcZ1gJVIRaoqj+bBFkVPc2TRPyZxbEX0T SW1W0NjV+jLBZZDWuyo9zjjOSOtUa7UKqzwWxHioficx6pxwH8d9x2105OsGG5Ef 1oGFnU1oNCv6+SXIkEIeer8jRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa1Ox08 uRZxCvk6Uc2Wjkvb4J4bMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuw+/JlrBJkbhCyKsMkX95yihOSKO0L5+WxiAgTlhUD4cPV2/gskm7 pGN5oyNGgo2JhchutTATHZs6S5TBjRgl0Z2TScTSP8K2LfkPgueg18Hj9YoUgL/u 7XzUZBKOhLnOMwui9gGCQKyGdGidmfzLNFGJoKjCjZmP+doZfApjJo0HZ4oebslo 5zoA6Hs92ti/IVZVEvAIsRIBWBOtcSU7tAaLeADDPGNwjxLKIBmaHH6W/fDC+HRm 7chRysQTBjpR9xfzCMUM72b2ywvgCWRhTxcrKk+j4FO+rKAPyo7DNNQwTLZch0Dt nzgcioXXpw2UslegN1VLAbnROQu5SGn2 -----END CERTIFICATE-----Generated at Sat Sep 6 05:01:20 2025 by rpki-client