$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: Vstk+0cu+ushfeFk7rN3nZiSVu4OE5K0DsRD7EFpOQk= Subject key identifier: CC:F2:83:3E:C2:C9:68:05:6F:D7:FF:5B:07:9F:A5:11:6D:92:FA:C3 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: CA Signing time: Thu 23 Oct 2025 07:57:20 +0000 Manifest this update: Thu 23 Oct 2025 07:57:20 +0000 Manifest next update: Thu 30 Oct 2025 07:57:20 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 0wGToW1jxAK+dJebfpD9wEibacNMQTmuDG80MgnGvCU=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Oct 23 07:57:20 2025 GMT Not After : Oct 30 07:57:20 2025 GMT Subject: CN=68f9dfe0-9096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:0b:bc:86:18:96:97:be:5c:b4:9b:9d:bd: c1:be:27:a9:c8:92:75:6e:5b:0f:fb:90:48:ca:cf: 96:34:0b:67:97:3e:85:fd:7b:af:95:5d:2c:e5:2e: 83:07:5e:29:32:6d:8e:02:7c:35:bd:e9:32:d0:18: 46:dc:81:70:8e:7e:60:d0:64:f1:78:85:38:7e:1d: 17:32:f5:8f:48:a5:2d:21:87:a8:ea:84:0d:86:3a: 3a:b1:1c:f3:c4:83:14:43:aa:a0:8b:22:bd:e2:dd: 2d:c4:2b:85:50:44:ab:99:1b:a8:b1:d0:2a:20:6b: b0:60:36:a2:71:f7:24:4b:a5:ff:b4:40:78:b8:0a: 3a:7e:05:a4:85:4c:26:17:fa:5e:f4:a2:84:16:2e: 3c:81:a5:17:e2:13:05:5f:bc:f0:b3:0c:d4:76:25: d7:e2:4d:fc:20:33:f6:e4:ad:8b:7b:ed:f4:27:6b: 21:77:e5:74:fa:c1:f7:61:d0:98:99:59:9e:cd:97: 46:1b:df:29:4d:1d:ae:66:d5:6e:dd:f2:f9:98:81: 4f:dc:f2:6f:b8:d5:db:a3:62:73:ee:9b:7f:d4:ae: b2:20:fa:cd:1d:bb:d6:f8:32:da:12:28:7c:35:7f: 50:f3:31:d0:df:cd:31:79:0d:e0:16:43:b7:90:0f: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:83:3E:C2:C9:68:05:6F:D7:FF:5B:07:9F:A5:11:6D:92:FA:C3 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4c:e9:5b:3a:c4:ab:bc:95:3a:c5:c1:63:59:3b:57:4d:47: fb:55:24:a8:99:38:1a:cb:9e:ce:17:c7:45:2d:c1:b7:28:83: c5:84:2e:9a:4b:1b:16:62:57:f2:45:d1:f4:9c:0a:45:57:0c: 80:df:6b:9b:4a:d6:37:52:df:9f:39:50:83:35:c3:9e:69:f2: 2a:31:61:ea:06:63:83:62:f9:4f:e4:ec:f1:47:69:33:b3:cf: d8:a0:70:7b:71:b2:9c:0c:fe:97:70:31:11:16:a9:45:de:6a: 54:db:b3:25:ec:06:39:2a:cc:1f:04:dd:0a:d5:67:e2:aa:40: 8a:0f:d0:69:12:49:8b:74:fb:a2:0a:1a:74:80:9e:87:e7:43: 11:66:42:c5:db:a3:53:b0:d0:f6:6b:1e:a3:a7:6d:cc:e9:02: ea:43:aa:67:9e:e6:15:2e:a3:8b:47:37:ca:58:62:a6:39:73: e6:1b:7e:ca:e0:39:0d:af:c3:04:1a:67:9e:91:1c:70:c8:30: 93:bf:b1:dc:02:f9:45:9e:72:44:75:bc:4f:81:01:79:fe:46: 20:b7:47:68:8f:42:6c:05:62:4c:9b:f5:4d:13:6d:db:c3:ad: 33:17:d7:86:6c:aa:3f:a5:4c:06:5d:ce:75:d4:02:2c:17:6e: 6a:f2:52:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMDIzMDc1NzIwWhcNMjUxMDMwMDc1NzIwWjAYMRYwFAYD VQQDEw02OGY5ZGZlMC05MDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JgLvIYYlpe+XLSbnb3BviepyJJ1blsP+5BIys+WNAtnlz6F/XuvlV0s5S6D B14pMm2OAnw1veky0BhG3IFwjn5g0GTxeIU4fh0XMvWPSKUtIYeo6oQNhjo6sRzz xIMUQ6qgiyK94t0txCuFUESrmRuosdAqIGuwYDaicfckS6X/tEB4uAo6fgWkhUwm F/pe9KKEFi48gaUX4hMFX7zwswzUdiXX4k38IDP25K2Le+30J2shd+V0+sH3YdCY mVmezZdGG98pTR2uZtVu3fL5mIFP3PJvuNXbo2Jz7pt/1K6yIPrNHbvW+DLaEih8 NX9Q8zHQ380xeQ3gFkO3kA9HUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzygz7C yWgFb9f/WwefpRFtkvrDMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6TOlbOsSrvJU6xcFjWTtXTUf7VSSomTgay57OF8dFLcG3KIPFhC6a SxsWYlfyRdH0nApFVwyA32ubStY3Ut+fOVCDNcOeafIqMWHqBmODYvlP5OzxR2kz s8/YoHB7cbKcDP6XcDERFqlF3mpU27Ml7AY5KswfBN0K1WfiqkCKD9BpEkmLdPui Chp0gJ6H50MRZkLF26NTsND2ax6jp23M6QLqQ6pnnuYVLqOLRzfKWGKmOXPmG37K 4DkNr8MEGmeekRxwyDCTv7HcAvlFnnJEdbxPgQF5/kYgt0doj0JsBWJMm/VNE23b w60zF9eGbKo/pUwGXc511AIsF25q8lJR -----END CERTIFICATE-----Generated at Thu Oct 23 10:15:11 2025 by rpki-client