$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: To7t4kNxZxNwisTre60pi6pGnAM2YQ63wx/9tA911Mw= Subject key identifier: 86:19:67:B5:15:DA:CE:74:36:E0:07:45:98:A9:6E:6A:23:64:5B:BC Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 01A5 Signing time: Sun 07 Sep 2025 03:35:31 +0000 Manifest this update: Sun 07 Sep 2025 03:35:30 +0000 Manifest next update: Sun 14 Sep 2025 03:35:30 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: 7S3dBAnGa6XjppFDxXIiyWjBUd5Wf4ptAUbCAA1v4hk=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Sep 7 03:35:30 2025 GMT Not After : Sep 14 03:35:30 2025 GMT Subject: CN=68bcfd82-f43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1e:d8:07:a8:1d:76:b8:90:d9:8c:6a:f4:75: a4:22:9b:8f:0c:fb:d0:8d:05:9e:de:41:1b:f6:dc: 14:eb:79:9f:23:a6:94:39:96:51:6e:ba:07:ec:60: 03:8c:7c:77:1d:28:2a:ef:b2:3b:c4:cc:d3:b0:4c: cf:d6:ca:d0:11:48:4c:a6:20:56:46:2c:5f:d7:4f: 75:b1:72:e9:d7:28:ce:2a:31:36:e9:20:d1:ca:5f: dd:22:14:a3:39:9f:7d:25:cc:f4:de:8f:e3:ec:c9: 50:c7:ca:a6:a7:ec:d6:e4:e4:26:83:6a:3f:be:4b: 4b:c0:39:41:8e:7f:17:41:ba:36:70:58:d9:95:69: f5:48:35:b6:3e:e3:74:44:2a:3b:ab:68:59:db:86: 77:cb:35:12:e9:09:6e:b5:48:e6:2f:74:31:65:21: b6:51:de:20:de:5f:12:79:8d:5a:5b:95:e4:1f:5a: 22:38:53:dd:7d:4e:9c:55:40:42:ab:32:d1:54:14: 24:1f:e2:40:ee:54:28:49:5c:ee:b1:de:4c:f8:17: 1a:01:42:83:ef:e3:a6:8e:cf:c2:66:f5:d2:b2:1e: b1:44:96:94:25:38:cb:e6:90:c7:6f:28:bd:b5:a4: 63:a0:12:d6:ce:d2:f3:35:42:f7:fd:0e:33:18:bf: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:67:B5:15:DA:CE:74:36:E0:07:45:98:A9:6E:6A:23:64:5B:BC X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e0:d0:c6:27:aa:a3:41:44:66:07:8a:d5:5b:3f:75:a4:f3: 1f:ac:40:e8:60:01:21:59:e9:4a:d5:1f:ce:4a:6f:aa:f6:80: c6:27:3d:55:9a:37:c6:e6:11:39:7b:cf:4d:a4:f0:b2:d6:1a: 20:39:f4:38:f2:b9:1c:17:31:f1:71:58:91:a1:67:1f:8a:25: 84:48:4c:24:40:19:8b:70:a4:18:dd:9d:ce:70:55:3c:c2:c1: 18:78:30:45:94:56:2f:fb:a3:a3:df:4d:74:3f:af:c7:6b:ef: 56:0b:70:c5:12:06:96:be:a8:d0:a9:e5:5d:51:bd:98:7b:d8: 4b:d8:00:7f:ac:c1:63:ea:ed:fa:14:1a:b7:71:50:41:12:35: 54:eb:55:88:8e:5e:ae:d3:f3:43:de:d1:e8:63:ff:68:15:09: 88:57:52:2e:71:06:10:9d:fa:ac:5c:23:44:88:07:32:3d:d6: 28:16:c6:a2:ef:11:43:aa:87:2b:2f:2e:3c:73:d1:a6:dc:50: ae:bd:4f:6c:0b:a3:56:db:f6:65:56:4e:34:7d:c9:d1:68:ad: ab:c1:b7:a5:03:d8:cb:33:32:29:07:6b:09:d5:1b:9c:ef:76: 5a:35:00:90:03:41:e3:85:82:7b:61:ba:a3:82:a2:71:6e:b9: 92:55:f2:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUwOTA3MDMzNTMwWhcNMjUwOTE0MDMzNTMwWjAYMRYwFAYD VQQDEw02OGJjZmQ4Mi1mNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R7YB6gddriQ2Yxq9HWkIpuPDPvQjQWe3kEb9twU63mfI6aUOZZRbroH7GAD jHx3HSgq77I7xMzTsEzP1srQEUhMpiBWRixf1091sXLp1yjOKjE26SDRyl/dIhSj OZ99Jcz03o/j7MlQx8qmp+zW5OQmg2o/vktLwDlBjn8XQbo2cFjZlWn1SDW2PuN0 RCo7q2hZ24Z3yzUS6QlutUjmL3QxZSG2Ud4g3l8SeY1aW5XkH1oiOFPdfU6cVUBC qzLRVBQkH+JA7lQoSVzusd5M+BcaAUKD7+Omjs/CZvXSsh6xRJaUJTjL5pDHbyi9 taRjoBLWztLzNUL3/Q4zGL/J7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYZZ7UV 2s50NuAHRZipbmojZFu8MB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt4NDGJ6qjQURmB4rVWz91pPMfrEDoYAEhWelK1R/OSm+q9oDGJz1V mjfG5hE5e89NpPCy1hogOfQ48rkcFzHxcViRoWcfiiWESEwkQBmLcKQY3Z3OcFU8 wsEYeDBFlFYv+6Oj3010P6/Ha+9WC3DFEgaWvqjQqeVdUb2Ye9hL2AB/rMFj6u36 FBq3cVBBEjVU61WIjl6u0/ND3tHoY/9oFQmIV1IucQYQnfqsXCNEiAcyPdYoFsai 7xFDqocrLy48c9Gm3FCuvU9sC6NW2/ZlVk40fcnRaK2rwbelA9jLMzIpB2sJ1Ruc 73ZaNQCQA0HjhYJ7YbqjgqJxbrmSVfI+ -----END CERTIFICATE-----Generated at Mon Sep 8 04:43:14 2025 by rpki-client