$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: d+0tE/hdOWB61PTJKIqZV72m6F9UI2NRZy3Y+JL5nEE= Subject key identifier: B9:AB:13:3C:4B:C9:7C:E3:40:40:B5:26:E8:AA:C0:6D:69:93:C6:98 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0A8A Signing time: Sun 24 Aug 2025 20:38:33 +0000 Manifest this update: Sun 24 Aug 2025 20:38:32 +0000 Manifest next update: Sun 31 Aug 2025 20:38:32 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: FN69/Mbg6xH/xt3bwC3I4IRSZN4dDh9tXpvS7Hnvg9c=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 24 20:38:32 2025 GMT Not After : Aug 31 20:38:32 2025 GMT Subject: CN=68ab7848-ecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:9b:70:f2:5d:9a:fc:aa:b0:15:6e:d6:21: e3:69:a7:83:07:42:df:0b:65:57:ff:95:15:cc:8f: 41:d0:9a:0f:da:3a:39:2f:b1:e7:b8:60:3e:78:3f: 99:8a:c8:a0:f5:be:31:6a:4e:70:2f:67:59:a8:82: 31:b2:5b:57:28:49:d4:c7:2c:19:66:ef:8c:44:e7: 5a:d4:8a:9e:c5:3c:18:95:bf:5b:8a:ca:3c:e6:35: d2:11:a5:6f:0b:61:5f:fa:7f:6e:81:26:fd:2d:10: a0:59:21:4f:e8:85:6b:03:9d:89:4a:bb:1e:77:c6: 13:5f:15:e4:bb:66:75:ad:e6:38:fa:bd:82:1c:7c: f2:c6:60:fe:78:51:08:8a:b3:57:fa:e5:1a:82:e9: 7e:f2:f9:f6:8e:8f:de:ef:0c:f2:7d:62:7d:a4:b4: 32:6e:49:c5:c1:08:37:1c:46:9f:81:dc:de:a3:d6: a6:e1:e0:27:61:e7:b6:86:96:3f:5b:08:23:54:2d: 1b:b5:e8:d1:a9:a0:2c:41:59:95:68:e6:04:51:83: f9:2b:70:d8:ff:63:49:eb:48:dd:00:26:a6:36:15: bf:a2:85:21:7e:77:31:31:49:cd:8c:cb:f6:1e:bc: 35:25:88:34:35:e7:ef:33:4e:f2:09:cd:cb:3b:d3: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:13:3C:4B:C9:7C:E3:40:40:B5:26:E8:AA:C0:6D:69:93:C6:98 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:85:78:a6:d5:d5:1e:2f:86:5e:3e:b1:31:d2:71:9b:21:87: 15:11:61:ee:cc:4e:82:72:0c:ba:23:2c:7c:79:d7:fb:c3:3f: 7d:88:c5:2f:32:fd:ba:fa:ef:3d:da:39:ff:77:e1:90:6e:fb: 5e:4f:38:43:4d:0b:03:23:14:57:f5:dd:f9:c1:fb:51:6f:91: c1:f7:e1:5d:cc:1d:68:90:29:71:c0:b9:f4:05:7e:a9:06:61: 33:80:b9:cb:d6:4c:2a:25:30:2c:6a:40:27:af:8d:82:f6:9b: b1:93:fd:a9:69:52:18:96:67:34:31:37:b6:96:68:22:e0:89: 3b:65:b8:85:3b:f0:98:a2:e7:6c:0e:51:a8:0f:9d:7a:c4:58: 82:80:62:d6:fa:da:83:fa:4c:f1:8d:59:28:2c:05:f2:47:c8: 08:52:e7:b0:36:8b:98:dd:33:5e:b7:4c:6c:ab:2b:3a:32:12: bb:a6:92:70:f7:f5:a7:b1:4f:f4:49:a1:fa:d6:92:0c:71:44: cd:ab:dd:3b:41:f4:9d:99:19:a9:93:f1:58:6c:e1:e8:2d:77: 9a:36:9c:e8:a7:20:25:be:06:73:01:27:dd:c5:e1:44:74:a2: e6:4d:8f:a9:b2:0a:fb:34:58:34:62:c6:88:2e:b4:7f:ae:46: c7:cb:d7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwODI0MjAzODMyWhcNMjUwODMxMjAzODMyWjAYMRYwFAYD VQQDEw02OGFiNzg0OC1lY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nKbcPJdmvyqsBVu1iHjaaeDB0LfC2VX/5UVzI9B0JoP2jo5L7HnuGA+eD+Z isig9b4xak5wL2dZqIIxsltXKEnUxywZZu+MROda1IqexTwYlb9biso85jXSEaVv C2Ff+n9ugSb9LRCgWSFP6IVrA52JSrsed8YTXxXku2Z1reY4+r2CHHzyxmD+eFEI irNX+uUagul+8vn2jo/e7wzyfWJ9pLQybknFwQg3HEafgdzeo9am4eAnYee2hpY/ WwgjVC0btejRqaAsQVmVaOYEUYP5K3DY/2NJ60jdACamNhW/ooUhfncxMUnNjMv2 Hrw1JYg0NefvM07yCc3LO9MGEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmrEzxL yXzjQEC1JuiqwG1pk8aYMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhXim1dUeL4ZePrEx0nGbIYcVEWHuzE6Ccgy6Iyx8edf7wz99iMUv Mv26+u892jn/d+GQbvteTzhDTQsDIxRX9d35wftRb5HB9+FdzB1okClxwLn0BX6p BmEzgLnL1kwqJTAsakAnr42C9puxk/2paVIYlmc0MTe2lmgi4Ik7ZbiFO/CYouds DlGoD516xFiCgGLW+tqD+kzxjVkoLAXyR8gIUuewNouY3TNet0xsqys6MhK7ppJw 9/WnsU/0SaH61pIMcUTNq907QfSdmRmpk/FYbOHoLXeaNpzopyAlvgZzASfdxeFE dKLmTY+psgr7NFg0YsaILrR/rkbHy9ft -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:07 2025 by rpki-client