$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: PuPwIYIyLMPndLsVHXCk2OJXCpRjOT3NMbxv6qp2PRM= Subject key identifier: 8E:44:E8:81:63:57:A5:27:9F:31:EB:48:41:DE:0D:73:49:A4:C8:9D Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 0C Signing time: Thu 21 Aug 2025 08:20:44 +0000 Manifest this update: Thu 21 Aug 2025 08:20:43 +0000 Manifest next update: Thu 28 Aug 2025 08:20:43 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: JbUIQeKEr8BcQr23wfS0N1J1cekTpQuAzVceMqBcJOM=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: FVLynhifvDV8KPyOIjr7ThKejT3Wh2GtJVJ/0rkPagg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Aug 21 08:20:43 2025 GMT Not After : Aug 28 08:20:43 2025 GMT Subject: CN=68a6d6dc-530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:81:f4:0f:e8:87:5c:b8:32:5d:96:f9:68: f1:6b:ef:ca:19:d0:55:f0:cf:75:41:9a:d2:a7:ec: 75:9e:04:74:8b:8a:2b:c5:f8:bf:da:e8:23:3d:85: 8b:62:fc:6f:3d:4e:a2:8e:ad:e2:bf:f6:1a:27:ad: dd:4f:61:8e:39:ce:3f:36:5c:2f:ea:94:6b:31:56: ca:b1:ef:ba:9c:2a:82:c0:d5:c2:45:9b:d5:63:3e: 03:48:90:cb:a8:e2:b2:50:84:ab:d5:80:dc:b5:3b: be:7f:a3:63:54:b0:d8:f6:4f:6f:6a:c9:f3:b9:db: 74:18:02:dc:24:fc:cc:7f:c1:0c:2d:cc:94:5c:07: ac:ad:a5:59:1d:02:a0:74:7d:a9:1c:16:91:e5:92: c9:1b:f9:71:ac:70:ac:00:52:40:0f:26:62:33:b4: f0:ce:c7:9b:54:ce:6f:ad:1b:cd:15:5d:ac:df:14: dd:61:39:67:e8:34:64:31:84:a9:cd:7c:2c:7e:a2: 6a:79:a9:50:2e:23:29:ee:2d:d2:af:e7:c3:a3:89: c6:1f:2e:8f:fe:52:88:7e:37:95:11:85:f5:31:97: 16:cc:20:c6:11:59:1b:cc:75:4c:f8:60:ab:d0:51: 87:27:c6:81:98:37:9a:90:1a:af:db:26:ef:20:6a: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:E8:81:63:57:A5:27:9F:31:EB:48:41:DE:0D:73:49:A4:C8:9D X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fa:df:d8:a0:bf:3f:b8:61:1a:1d:08:25:ca:c3:75:cf:af: d2:1c:93:59:77:67:8c:45:28:10:f8:ca:1e:c9:3a:1c:ab:c3: 3c:dd:a2:25:85:97:d5:72:49:41:02:54:92:4a:62:d2:e2:49: 20:1a:07:af:3b:7d:6f:f3:eb:bf:a9:09:26:10:18:0b:6e:39: bc:f3:cc:39:df:26:02:b8:b8:d7:07:8e:f0:55:92:ca:74:6c: 83:15:07:38:8a:ec:35:42:a4:46:58:32:e6:a5:47:08:b0:f2: 6e:7d:b6:79:df:27:71:13:2f:13:bd:8f:9d:a0:2f:77:25:64: db:64:74:6c:f7:19:7a:bf:aa:54:15:59:c0:27:de:48:ef:ad: 35:2c:52:55:87:64:54:e8:f8:e4:c3:07:98:77:59:38:54:11: c6:7d:2a:81:46:ce:cc:1a:0e:a1:66:ea:89:29:c7:db:3d:e8: 3d:f9:11:26:d8:d2:15:62:26:3e:14:72:11:c2:a3:1a:55:3a: e6:f2:37:58:3f:e3:d4:e5:a3:e1:d0:9c:2a:38:9b:fb:2b:fe: a6:2c:7e:d8:af:65:13:d9:ed:7f:8f:f5:de:d6:a7:94:ac:37: e9:9a:66:32:63:eb:ac:1f:93:c6:4d:db:e6:b4:7b:27:00:aa: 3a:f7:66:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI2RDExMC8GA1UEBRMoNEQ0RjNBQUNDNzM5NUExM0Q2NDIwMDdGOTkxMERGODgw NDBFNEJBQjAeFw0yNTA4MjEwODIwNDNaFw0yNTA4MjgwODIwNDNaMBgxFjAUBgNV BAMTDTY4YTZkNmRjLTUzMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5j4H0D+iHXLgyXZb5aPFr78oZ0FXwz3VBmtKn7HWeBHSLiivF+L/a6CM9hYti /G89TqKOreK/9honrd1PYY45zj82XC/qlGsxVsqx77qcKoLA1cJFm9VjPgNIkMuo 4rJQhKvVgNy1O75/o2NUsNj2T29qyfO523QYAtwk/Mx/wQwtzJRcB6ytpVkdAqB0 fakcFpHlkskb+XGscKwAUkAPJmIztPDOx5tUzm+tG80VXazfFN1hOWfoNGQxhKnN fCx+omp5qVAuIynuLdKv58OjicYfLo/+Uoh+N5URhfUxlxbMIMYRWRvMdUz4YKvQ UYcnxoGYN5qQGq/bJu8gamirAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjkTogWNX pSefMetIQd4Nc0mkyJ0wHwYDVR0jBBgwFoAUTU86rMc5WhPWQgB/mRDfiAQOS6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjZELzg2REY2QzdFNzEw NTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFU4NnJNYzVXaFBXUWdCX21SRGZpQVFPUzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy QjZELzg2REY2QzdFNzEwNTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQ V1FnQl9tUkRmaUFRT1M2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGP639igvz+4YRodCCXKw3XPr9Ick1l3Z4xFKBD4yh7JOhyrwzzdoiWF l9VySUECVJJKYtLiSSAaB687fW/z67+pCSYQGAtuObzzzDnfJgK4uNcHjvBVksp0 bIMVBziK7DVCpEZYMualRwiw8m59tnnfJ3ETLxO9j52gL3clZNtkdGz3GXq/qlQV WcAn3kjvrTUsUlWHZFTo+OTDB5h3WThUEcZ9KoFGzswaDqFm6okpx9s96D35ESbY 0hViJj4UchHCoxpVOubyN1g/49Tlo+HQnCo4m/sr/qYsftivZRPZ7X+P9d7Wp5Ss N+maZjJj66wfk8ZN2+a0eycAqjr3Znk= -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:51 2025 by rpki-client