$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: aGPLMMmgtXISfTyS01LXd0o9g976WXnJT9oAZvlIJUA= Subject key identifier: 00:14:D9:18:C6:8E:33:CA:40:8A:F8:FD:09:39:4B:EF:63:44:51:A2 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 0197 Signing time: Tue 09 Sep 2025 03:32:45 +0000 Manifest this update: Tue 09 Sep 2025 03:32:45 +0000 Manifest next update: Tue 16 Sep 2025 03:32:45 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: UeEFC7URHAdoKXSxj8SqjtPlLahqH/EuzavPkFhjGLM=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Sep 9 03:32:45 2025 GMT Not After : Sep 16 03:32:45 2025 GMT Subject: CN=68bf9fdd-9eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:02:91:0b:f9:75:ac:80:55:9a:01:24:4b: 19:da:3a:c3:aa:28:94:53:2d:25:f1:c7:8a:e1:a0: f1:6f:49:60:6b:f9:76:f1:4f:7d:ca:cf:8e:45:0c: c1:74:64:00:0a:a2:53:9c:29:dd:d0:73:91:b5:cf: 95:09:64:f8:08:3b:ac:28:c3:85:c8:df:d4:c9:dd: 4d:d3:39:97:d5:bc:79:ee:54:10:81:5b:42:53:ac: ad:9b:67:11:92:f5:10:b0:0c:af:9f:84:ae:77:61: 33:19:e9:af:9f:23:7d:87:fb:83:b6:4f:73:f2:50: e8:0c:c2:56:13:01:01:56:61:bd:ba:2c:bd:57:09: cb:06:c3:72:76:54:cd:ac:d0:94:e8:39:ea:3a:ae: 0e:f1:8f:66:6e:87:62:e7:09:35:8c:46:3d:c7:29: f3:e2:8b:89:87:ef:89:80:9a:ae:90:04:f6:7d:e5: 98:da:82:b1:db:6e:46:79:ca:3d:a8:a5:44:ed:c2: c4:5d:49:44:5a:2d:3f:13:95:a2:17:60:66:dd:da: b0:d4:2b:f5:be:53:dc:55:f6:15:b7:1e:89:63:b3: 10:dd:5f:1e:fa:da:6f:a3:13:de:a2:52:f5:00:8d: f4:d2:5b:83:c9:cd:80:1f:e3:36:25:3b:d2:57:1d: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:14:D9:18:C6:8E:33:CA:40:8A:F8:FD:09:39:4B:EF:63:44:51:A2 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:f9:68:c9:bd:d7:1f:59:4a:28:1b:30:38:b6:e7:26:23: b5:19:bb:71:7d:02:63:c5:97:75:98:fe:02:a8:07:ac:43:c7: c9:38:db:d8:1b:e0:63:5c:cc:2d:bd:05:8d:2f:8d:e5:48:25: 4f:5e:8e:bd:22:9f:85:30:87:19:11:d9:e9:34:9e:d1:23:e8: 9a:dc:c1:a5:2a:66:ce:d0:cb:0e:06:3d:b6:1d:95:36:90:89: c2:15:b2:07:1b:a3:eb:10:2b:bf:dd:59:43:46:7d:6e:43:e1: f4:d5:82:ed:5a:38:1d:85:0f:fa:57:ec:20:5a:e6:94:8c:0f: 51:74:08:b4:28:b1:a2:bd:a8:ac:7a:f5:3b:75:92:37:da:ef: 82:f0:58:2b:6d:af:9b:43:25:3b:e2:9d:57:5d:12:75:0a:67: 10:55:4f:e8:c4:d2:05:59:60:d3:4b:9a:84:65:b6:4f:97:00: 7a:11:d2:e8:a6:40:53:6f:cc:0b:93:fc:fb:3b:d5:33:b2:b7: ba:3c:ec:c6:79:90:3f:2a:2f:0e:63:47:f3:ef:66:f2:e8:e7: cb:2d:b5:fa:69:56:36:19:b0:f9:2e:6a:95:97:00:e6:0a:c6: ca:ec:78:97:5a:54:b0:df:96:be:ca:90:bb:86:2f:71:ae:c7: 32:f1:02:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwOTA5MDMzMjQ1WhcNMjUwOTE2MDMzMjQ1WjAYMRYwFAYD VQQDEw02OGJmOWZkZC05ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg8CkQv5dayAVZoBJEsZ2jrDqiiUUy0l8ceK4aDxb0lga/l28U99ys+ORQzB dGQACqJTnCnd0HORtc+VCWT4CDusKMOFyN/Uyd1N0zmX1bx57lQQgVtCU6ytm2cR kvUQsAyvn4Sud2EzGemvnyN9h/uDtk9z8lDoDMJWEwEBVmG9uiy9VwnLBsNydlTN rNCU6DnqOq4O8Y9mbodi5wk1jEY9xynz4ouJh++JgJqukAT2feWY2oKx225Geco9 qKVE7cLEXUlEWi0/E5WiF2Bm3dqw1Cv1vlPcVfYVtx6JY7MQ3V8e+tpvoxPeolL1 AI300luDyc2AH+M2JTvSVx0/YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAU2RjG jjPKQIr4/Qk5S+9jRFGiMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWPvloyb3XH1lKKBswOLbnJiO1GbtxfQJjxZd1mP4CqAesQ8fJONvY G+BjXMwtvQWNL43lSCVPXo69Ip+FMIcZEdnpNJ7RI+ia3MGlKmbO0MsOBj22HZU2 kInCFbIHG6PrECu/3VlDRn1uQ+H01YLtWjgdhQ/6V+wgWuaUjA9RdAi0KLGivais evU7dZI32u+C8Fgrba+bQyU74p1XXRJ1CmcQVU/oxNIFWWDTS5qEZbZPlwB6EdLo pkBTb8wLk/z7O9Uzsre6POzGeZA/Ki8OY0fz72by6OfLLbX6aVY2GbD5LmqVlwDm CsbK7HiXWlSw35a+ypC7hi9xrscy8QJC -----END CERTIFICATE-----Generated at Tue Sep 9 07:35:32 2025 by rpki-client