$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: +NQtUDCLlvwHUvZvaE5G79Zps2rY6IPfdfr/8FnIyCE= Subject key identifier: F3:E3:98:5E:85:C8:8B:F3:33:6A:3D:73:FC:24:4A:EB:1C:6E:59:F7 Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0272 Signing time: Tue 09 Sep 2025 01:49:15 +0000 Manifest this update: Tue 09 Sep 2025 01:49:15 +0000 Manifest next update: Tue 16 Sep 2025 01:49:14 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: 9L49WmdBk98hQCxkvRlArc7YO/Rxp8vE3uJXyK8iWBs=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Sep 9 01:49:15 2025 GMT Not After : Sep 16 01:49:14 2025 GMT Subject: CN=68bf879b-a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:d0:df:83:11:a4:db:b6:f1:35:ab:f9:5b: dc:e2:41:20:43:1a:20:50:90:32:5a:5f:b5:b4:bc: 23:0d:78:48:18:98:b1:3f:42:33:fa:04:cd:ba:bb: 2c:8b:f2:fc:17:1a:e3:35:25:b4:f3:7f:c2:b5:0f: ea:44:01:d6:ad:a8:03:ce:e9:11:7d:8c:30:de:a1: 02:a6:4f:11:80:31:ad:f5:87:d0:54:e8:60:27:5a: a1:3e:35:ee:26:4a:bc:cf:fc:b1:b6:12:1e:78:f8: 7b:07:5f:07:00:af:f8:48:e5:c8:d9:b1:db:f3:02: 67:40:9b:ac:5b:6b:dc:cf:b3:f2:82:b9:66:aa:d0: 38:cb:b6:8b:c5:66:37:d3:3f:7f:bc:ca:25:7b:13: a3:73:cc:e3:ca:86:a7:10:c8:d0:85:d2:dc:74:92: 9f:a2:6a:14:5f:eb:64:3e:67:8d:0e:ab:f8:6d:c8: 6e:35:58:53:29:e6:b4:ad:d5:d6:4f:68:c3:ed:b9: 77:d9:a5:27:ae:98:b3:1b:3a:81:ca:0c:5e:ec:73: 18:29:65:ed:71:1f:2a:84:7a:d1:64:00:fd:49:3a: da:19:c2:f1:74:a6:e5:04:3a:57:71:46:43:7d:c3: 9e:4f:63:44:7d:d4:4f:e9:72:41:4d:e1:4e:ea:fb: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:98:5E:85:C8:8B:F3:33:6A:3D:73:FC:24:4A:EB:1C:6E:59:F7 X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2b:40:e4:0f:8a:7e:11:ae:ee:5c:f8:eb:9c:5c:bb:89:67: c0:bf:8e:81:44:4a:1f:e3:da:e2:86:e0:c3:8b:a6:d0:06:3b: b4:c3:9d:d1:4f:06:24:b3:66:6c:73:a0:95:58:d7:78:65:05: 47:e9:06:ba:dc:b1:b8:b5:ae:39:6b:4b:7c:9e:6c:db:3d:97: 13:ee:a8:d4:ba:8e:0f:9e:20:e9:3f:c5:df:92:07:c3:9f:71: 4f:02:5a:0b:a8:e6:0b:e0:17:a9:31:b9:bd:88:cf:df:65:c2: cd:e4:75:a4:b7:12:76:79:59:0b:4c:c2:4b:55:10:38:82:b7: 3d:11:30:13:48:b2:57:2d:34:b7:78:ba:06:31:3e:af:4c:04: 23:af:c1:62:cd:20:28:a2:2b:d1:e0:30:ce:29:61:c7:49:26: 48:d6:4c:1c:a1:45:71:59:e9:c1:c2:5e:5f:ca:46:04:36:0a: 45:c3:38:d8:bc:d5:c0:a9:10:b9:81:0a:85:19:41:25:4c:f7: 08:a3:18:d8:7d:fe:b1:76:73:99:57:cf:31:f5:eb:7a:b3:20: e5:fb:16:d2:1f:b1:aa:27:e7:c9:e7:b1:23:75:8f:a3:f5:e6: 94:19:c1:59:f1:43:c5:e4:87:90:c1:98:00:83:d6:ad:83:c7: 52:f0:57:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwOTA5MDE0OTE1WhcNMjUwOTE2MDE0OTE0WjAYMRYwFAYD VQQDEw02OGJmODc5Yi1hMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOLQ34MRpNu28TWr+Vvc4kEgQxogUJAyWl+1tLwjDXhIGJixP0Iz+gTNurss i/L8FxrjNSW083/CtQ/qRAHWragDzukRfYww3qECpk8RgDGt9YfQVOhgJ1qhPjXu Jkq8z/yxthIeePh7B18HAK/4SOXI2bHb8wJnQJusW2vcz7PygrlmqtA4y7aLxWY3 0z9/vMolexOjc8zjyoanEMjQhdLcdJKfomoUX+tkPmeNDqv4bchuNVhTKea0rdXW T2jD7bl32aUnrpizGzqBygxe7HMYKWXtcR8qhHrRZAD9STraGcLxdKblBDpXcUZD fcOeT2NEfdRP6XJBTeFO6vv1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPjmF6F yIvzM2o9c/wkSuscbln3MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrK0DkD4p+Ea7uXPjrnFy7iWfAv46BREof49rihuDDi6bQBju0w53R TwYks2Zsc6CVWNd4ZQVH6Qa63LG4ta45a0t8nmzbPZcT7qjUuo4PniDpP8XfkgfD n3FPAloLqOYL4BepMbm9iM/fZcLN5HWktxJ2eVkLTMJLVRA4grc9ETATSLJXLTS3 eLoGMT6vTAQjr8FizSAooivR4DDOKWHHSSZI1kwcoUVxWenBwl5fykYENgpFwzjY vNXAqRC5gQqFGUElTPcIoxjYff6xdnOZV88x9et6syDl+xbSH7GqJ+fJ57EjdY+j 9eaUGcFZ8UPF5IeQwZgAg9atg8dS8FcB -----END CERTIFICATE-----Generated at Tue Sep 9 13:08:43 2025 by rpki-client