$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json) Hash identifier: 20rl1bqu0aSwF6kAVUaunuPWa5V3Gt/5xar/8KsTvGA= Subject key identifier: F2:83:EE:D5:29:6C:81:02:DB:96:08:E0:DF:E5:B7:89:C8:33:DC:24 Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft Manifest number: 0D Signing time: Wed 17 Sep 2025 08:50:31 +0000 Manifest this update: Wed 17 Sep 2025 08:50:30 +0000 Manifest next update: Wed 24 Sep 2025 08:50:30 +0000 Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: vx65R5CHP+TDM1o772qQK8CdAO5gI93mC1PiH6zsI08=) 2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: eoWky/ushFlFPOAMp9hbU/1xEcSwmCQfGQqBxUKHPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Sep 17 08:50:30 2025 GMT Not After : Sep 24 08:50:30 2025 GMT Subject: CN=68ca7657-f5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:27:1c:28:25:0f:c6:ee:bc:cb:ac:65:3b: d3:0e:51:5b:dd:14:5c:3a:95:08:e0:28:f4:d3:4f: d8:3b:66:74:bf:ef:85:2f:51:d9:40:d8:17:fa:4e: 87:e5:b8:72:eb:67:ca:3d:f3:5a:ff:df:71:10:ee: 13:7a:1d:4d:3d:cf:ee:7e:6b:d8:6d:93:d4:a4:cb: b8:48:42:b7:93:f8:a7:fc:74:6f:42:79:bd:50:5b: 61:55:df:fd:4d:af:c8:77:8a:9d:bd:e7:7d:5c:b7: 6b:82:e1:72:6c:39:f3:d5:a2:06:6e:0f:bc:c8:fe: b1:78:f3:08:f7:f0:49:5b:07:15:a4:12:eb:7c:59: 22:78:ad:24:f3:0c:b0:35:2f:4b:5a:8e:cf:a8:29: 84:06:49:7f:ca:30:72:4a:b7:93:a8:99:c1:d9:d2: 1b:0c:7b:a1:b0:c8:b1:87:28:91:2f:ca:ec:97:47: 9b:bd:66:a4:39:ec:49:3b:9f:b0:52:07:7d:02:b0: 0a:d2:2c:49:0e:79:9c:31:cd:5f:50:5f:40:30:da: 30:b7:6e:00:c2:66:c0:f1:81:bb:eb:d3:f0:2d:5b: 74:73:2b:04:43:3a:23:6c:ac:d8:8e:e4:20:9a:b9: 0a:05:e3:c3:8f:26:74:5b:7b:06:3f:a6:3a:1b:ab: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:83:EE:D5:29:6C:81:02:DB:96:08:E0:DF:E5:B7:89:C8:33:DC:24 X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9d:65:e5:09:26:64:79:43:e5:99:44:a1:00:00:e6:82:7e: 7e:ca:0c:dc:e0:a9:a6:b1:05:6f:61:1e:21:3c:ff:a7:7d:7e: 58:99:89:0a:fc:28:e3:2b:51:76:ab:9b:40:15:40:6d:ab:e2: 43:be:60:c3:02:79:74:3d:9a:81:3d:e3:1d:b8:30:17:99:a2: ad:b3:57:4d:8c:4e:05:b1:ef:e2:e1:98:fb:1d:f1:aa:52:0a: a0:ec:bb:6d:1c:10:91:3c:ef:48:c9:8a:e9:fc:f1:0c:97:c7: 2f:95:35:99:82:35:37:27:50:df:11:dc:83:64:49:f8:8c:c2: 46:6d:11:c8:ec:92:c9:77:2d:9c:a0:ad:1e:83:4e:38:79:a5: 47:ff:71:e4:32:e5:f1:22:8c:1c:72:f2:eb:3a:49:47:bd:5c: ad:72:06:6d:7b:31:da:14:37:58:ac:33:89:36:01:f4:aa:21: 67:92:fe:91:7e:dc:fe:9b:48:33:e7:b9:53:c0:11:71:4c:32: 5e:9f:70:7a:35:7e:1b:c1:b1:98:a6:73:83:a7:7c:d9:46:75: 62:d7:e7:97:ca:d9:57:1a:a2:72:a8:c3:d8:7a:23:54:bf:e6: 8c:fd:20:37:88:e3:d2:2a:52:f3:bb:bc:00:9a:0c:09:8b:ef: 86:42:0c:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDZGRTExMC8GA1UEBRMoNEVEMDg4N0JEMzA0RTA0Qzk4RkJBNTNCOUI5QjAyQkRF NDM4OTcwMzAeFw0yNTA5MTcwODUwMzBaFw0yNTA5MjQwODUwMzBaMBgxFjAUBgNV BAMTDTY4Y2E3NjU3LWY1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCulSccKCUPxu68y6xlO9MOUVvdFFw6lQjgKPTTT9g7ZnS/74UvUdlA2Bf6Tofl uHLrZ8o981r/33EQ7hN6HU09z+5+a9htk9Sky7hIQreT+Kf8dG9Ceb1QW2FV3/1N r8h3ip29531ct2uC4XJsOfPVogZuD7zI/rF48wj38ElbBxWkEut8WSJ4rSTzDLA1 L0tajs+oKYQGSX/KMHJKt5OomcHZ0hsMe6GwyLGHKJEvyuyXR5u9ZqQ57Ek7n7BS B30CsArSLEkOeZwxzV9QX0Aw2jC3bgDCZsDxgbvr0/AtW3RzKwRDOiNsrNiO5CCa uQoF48OPJnRbewY/pjobqzDXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8oPu1Sls gQLblgjg3+W3icgz3CQwHwYDVR0jBBgwFoAUTtCIe9ME4EyY+6U7m5sCveQ4lwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NkZFLzlCNjU2RjhFODNF NTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHRDSWU5TUU0RXlZLTZVN201c0N2ZVE0bHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NkZFLzlCNjU2RjhFODNFNTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5 WS02VTdtNXNDdmVRNGx3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImdZeUJJmR5Q+WZRKEAAOaCfn7KDNzgqaaxBW9hHiE8/6d9fliZiQr8 KOMrUXarm0AVQG2r4kO+YMMCeXQ9moE94x24MBeZoq2zV02MTgWx7+LhmPsd8apS CqDsu20cEJE870jJiun88QyXxy+VNZmCNTcnUN8R3INkSfiMwkZtEcjsksl3LZyg rR6DTjh5pUf/ceQy5fEijBxy8us6SUe9XK1yBm17MdoUN1isM4k2AfSqIWeS/pF+ 3P6bSDPnuVPAEXFMMl6fcHo1fhvBsZimc4OnfNlGdWLX55fK2VcaonKow9h6I1S/ 5oz9IDeI49IqUvO7vACaDAmL74ZCDNk= -----END CERTIFICATE-----Generated at Thu Sep 18 20:35:38 2025 by rpki-client