$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: olgHT861gjDQB2nC1tSM2y04vBHKkysRvoaAYUbXcxQ= Subject key identifier: 2C:4D:E6:55:1A:D0:E8:4C:1B:B6:59:49:72:ED:6D:BA:3C:C6:4D:43 Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 2991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 297C Signing time: Thu 18 Sep 2025 15:40:58 +0000 Manifest this update: Thu 18 Sep 2025 15:40:58 +0000 Manifest next update: Thu 25 Sep 2025 15:40:58 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: 2tHgcrSDFF2FQnmTmrHPnX0UeM6kLz2TV3WNe4JCO7Y=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: XWmzI2yeMf3apt5DHsKgv60jONcTAI6E+TZgl5OMpW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10641 (0x2991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Sep 18 15:40:58 2025 GMT Not After : Sep 25 15:40:58 2025 GMT Subject: CN=68cc280a-d732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:cf:d2:8a:c6:e8:7c:88:a3:e8:6d:8a:05: d2:9b:dd:a6:5f:58:73:6e:89:14:a2:b3:d7:6f:50: 14:b2:3d:33:67:aa:fb:50:9d:b3:1a:f8:e7:49:8d: 47:b5:aa:2c:4a:72:aa:84:f8:a4:df:9c:13:88:47: b7:15:6a:26:45:fd:a5:97:aa:27:ac:19:0b:55:da: bf:48:73:6b:8b:16:95:07:31:e6:34:a2:af:c5:03: c5:96:ef:ec:c8:b0:0f:12:50:27:d3:8a:89:53:8f: 5c:90:d3:e8:b8:cc:05:64:ec:d1:98:74:c0:eb:ca: 0f:da:86:ae:3b:d8:98:1e:ae:a1:f1:fd:f5:f2:83: 8b:80:dd:68:18:2c:8d:55:88:27:8f:33:95:d5:22: 3a:61:7b:dc:0b:b0:47:d9:2a:94:b8:2f:7d:9c:8b: 1c:8e:7c:7f:f9:3b:62:0d:93:66:47:cd:69:47:be: b4:27:0d:e8:cd:e1:6b:11:34:53:12:b0:8e:0c:15: 73:ee:0a:ce:3a:9a:f1:19:2f:9f:a1:fe:32:c2:ef: c7:de:57:6b:68:b2:fa:e5:f7:f3:5a:af:b6:e6:a0: 94:04:bd:cc:b8:80:9a:a4:cb:f0:37:24:77:1e:6f: 23:c4:ea:17:89:85:ac:b8:82:d4:a6:2b:72:84:88: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:E6:55:1A:D0:E8:4C:1B:B6:59:49:72:ED:6D:BA:3C:C6:4D:43 X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c8:03:30:1e:bf:91:5f:fc:ab:b2:23:6b:c5:b1:a7:f8:77: 9a:66:d9:13:ab:07:95:7c:ee:ee:10:5e:b0:1f:be:df:47:f1: cb:3e:d6:a9:48:0f:ef:87:70:c3:76:1d:cd:be:f8:63:12:7b: 0b:06:3e:69:f7:ed:42:f8:df:4e:fe:12:62:e5:8b:8a:43:47: a1:90:35:f6:5c:dd:86:5f:c9:76:57:2f:af:e7:34:23:8d:94: 9b:7a:0a:94:32:81:46:8c:41:63:b3:cd:56:43:43:7b:b3:e6: 8e:f3:75:ca:c3:34:ba:6c:3b:20:9a:82:6c:36:30:4e:1a:7f: 56:59:cf:42:dd:b8:8c:5e:3d:52:95:ab:dc:8d:7d:f1:62:15: 14:12:83:4f:24:cb:30:c7:1d:47:88:24:25:79:fe:c5:c3:0a: eb:42:d7:30:cc:54:71:ba:c6:d9:f4:fe:75:08:f9:36:d2:6c: b2:58:f2:d7:00:cc:d4:08:b7:6d:70:0b:a8:95:ec:d8:d1:68: 17:02:b1:73:bd:54:85:65:d7:5d:64:87:3a:a4:b1:00:44:a4: 1f:2a:39:b2:89:4e:cb:a8:0f:5c:a1:c1:b5:e0:cd:9b:90:2c: 4d:7a:70:76:b7:23:81:61:55:12:c7:3d:f8:18:e4:0a:0d:3a: 9f:b1:56:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjUwOTE4MTU0MDU4WhcNMjUwOTI1MTU0MDU4WjAYMRYwFAYD VQQDEw02OGNjMjgwYS1kNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0/P0orG6HyIo+htigXSm92mX1hzbokUorPXb1AUsj0zZ6r7UJ2zGvjnSY1H taosSnKqhPik35wTiEe3FWomRf2ll6onrBkLVdq/SHNrixaVBzHmNKKvxQPFlu/s yLAPElAn04qJU49ckNPouMwFZOzRmHTA68oP2oauO9iYHq6h8f318oOLgN1oGCyN VYgnjzOV1SI6YXvcC7BH2SqUuC99nIscjnx/+TtiDZNmR81pR760Jw3ozeFrETRT ErCODBVz7grOOprxGS+fof4ywu/H3ldraLL65ffzWq+25qCUBL3MuICapMvwNyR3 Hm8jxOoXiYWsuILUpityhIgaCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxN5lUa 0OhMG7ZZSXLtbbo8xk1DMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBryAMwHr+RX/yrsiNrxbGn+HeaZtkTqweVfO7uEF6wH77fR/HLPtap SA/vh3DDdh3NvvhjEnsLBj5p9+1C+N9O/hJi5YuKQ0ehkDX2XN2GX8l2Vy+v5zQj jZSbegqUMoFGjEFjs81WQ0N7s+aO83XKwzS6bDsgmoJsNjBOGn9WWc9C3biMXj1S lavcjX3xYhUUEoNPJMswxx1HiCQlef7FwwrrQtcwzFRxusbZ9P51CPk20myyWPLX AMzUCLdtcAuolezY0WgXArFzvVSFZdddZIc6pLEARKQfKjmyiU7LqA9cocG14M2b kCxNenB2tyOBYVUSxz34GOQKDTqfsVae -----END CERTIFICATE-----Generated at Fri Sep 19 10:20:50 2025 by rpki-client