$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: cXNKGkuw8T1gtpV2oEVT5cHuIj/23PXOcdNu4Th02n0= Subject key identifier: 83:08:14:8D:A4:13:BD:BD:B3:CA:80:BC:1E:27:E9:CF:E8:9D:7B:68 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34D9 Signing time: Sat 06 Sep 2025 14:29:55 +0000 Manifest this update: Sat 06 Sep 2025 14:29:54 +0000 Manifest next update: Sat 13 Sep 2025 14:29:54 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: biSgWDHwdWSXjOtvDPPiJO4kBNXWRDECO5XNX7Y11VA=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13566 (0x34fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Sep 6 14:29:54 2025 GMT Not After : Sep 13 14:29:54 2025 GMT Subject: CN=68bc4562-3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:22:93:0d:ae:9f:67:ec:1b:94:66:15:3a: 58:f5:6c:73:8d:e7:ee:21:49:72:0f:e7:65:38:fa: 80:36:60:95:37:62:ec:df:95:18:b3:f5:d9:67:f8: d9:07:2f:fd:91:bf:c2:a6:63:00:33:0d:3d:dc:67: 62:a6:2e:18:db:31:28:50:75:c3:56:5f:16:fa:85: 28:66:57:1a:c5:8e:6a:6f:9e:3b:a6:59:3f:7b:7a: aa:3a:4d:da:23:ff:90:02:d2:6c:9f:c0:a5:8f:6e: 8f:b9:b5:fb:7c:7b:72:90:0c:43:6f:2f:c6:64:1d: a9:98:9d:c0:09:60:35:91:e4:35:b4:26:42:ee:1c: 28:25:c7:04:8a:7d:5f:25:82:14:8c:34:88:a4:28: de:3f:f7:91:6c:0e:7f:6f:23:b6:ac:9f:ed:e0:87: 0e:f0:9f:3d:b5:0c:74:67:87:e0:29:8a:10:17:06: 5f:4e:c5:e0:75:25:47:53:9f:0e:91:27:9d:8a:b4: 41:8e:29:39:5d:d1:41:1a:62:60:4e:cb:21:ea:ac: 5a:2c:73:d7:eb:30:e8:f8:44:07:a2:0b:79:a6:d2: 7c:e5:b0:b1:ae:4d:db:d7:43:64:b6:6e:d3:aa:5f: e2:2a:4e:0f:3f:47:2e:35:28:8c:9d:54:ed:07:59: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:08:14:8D:A4:13:BD:BD:B3:CA:80:BC:1E:27:E9:CF:E8:9D:7B:68 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:95:e8:d9:d8:7d:6d:bc:69:82:a6:7b:dd:b0:35:a9:06:41: 11:cb:7c:57:81:76:da:53:c3:a6:22:6c:08:8c:9d:27:ed:d6: 76:40:2b:51:46:d1:6b:4c:be:41:2f:83:19:39:4f:0f:fb:c9: 88:bd:be:db:00:a5:b0:bd:11:e9:93:04:80:c5:f9:7a:db:77: 66:9d:02:f2:75:b1:5e:e7:b8:8a:34:78:60:b0:e8:59:de:51: ec:6d:c1:02:6a:2a:4b:f3:d6:0e:2a:19:3c:2d:15:b0:33:a8: 70:90:0c:04:b4:96:8e:2d:fe:b7:11:68:20:7c:93:44:6f:1a: df:a1:8b:af:9c:e4:e9:2a:ff:75:4d:49:c1:d0:b9:34:65:93: 52:7c:06:c0:13:84:4a:7e:0b:85:82:ae:d5:b9:4f:e5:7b:18: 7a:06:59:37:88:7b:75:d1:85:d6:64:1a:55:bd:c8:ae:e7:4f: db:d8:d7:3c:07:53:d8:a5:fd:88:1d:06:48:99:8e:3e:b9:97: c3:cb:54:40:7b:c7:72:c5:d0:91:9d:a2:44:7f:47:23:d4:fc: e1:e6:e2:b6:85:61:42:96:a3:cd:90:03:34:24:e7:92:ed:6f: 60:9e:4b:fc:2b:2b:52:43:96:80:f4:d7:e3:9c:97:63:03:7c: 01:66:47:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwOTA2MTQyOTU0WhcNMjUwOTEzMTQyOTU0WjAYMRYwFAYD VQQDEw02OGJjNDU2Mi0zMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1Yikw2un2fsG5RmFTpY9WxzjefuIUlyD+dlOPqANmCVN2Ls35UYs/XZZ/jZ By/9kb/CpmMAMw093Gdipi4Y2zEoUHXDVl8W+oUoZlcaxY5qb547plk/e3qqOk3a I/+QAtJsn8Clj26PubX7fHtykAxDby/GZB2pmJ3ACWA1keQ1tCZC7hwoJccEin1f JYIUjDSIpCjeP/eRbA5/byO2rJ/t4IcO8J89tQx0Z4fgKYoQFwZfTsXgdSVHU58O kSedirRBjik5XdFBGmJgTssh6qxaLHPX6zDo+EQHogt5ptJ85bCxrk3b10Nktm7T ql/iKk4PP0cuNSiMnVTtB1mvNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMIFI2k E729s8qAvB4n6c/onXtoMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCElejZ2H1tvGmCpnvdsDWpBkERy3xXgXbaU8OmImwIjJ0n7dZ2QCtR RtFrTL5BL4MZOU8P+8mIvb7bAKWwvRHpkwSAxfl623dmnQLydbFe57iKNHhgsOhZ 3lHsbcECaipL89YOKhk8LRWwM6hwkAwEtJaOLf63EWggfJNEbxrfoYuvnOTpKv91 TUnB0Lk0ZZNSfAbAE4RKfguFgq7VuU/lexh6Blk3iHt10YXWZBpVvciu50/b2Nc8 B1PYpf2IHQZImY4+uZfDy1RAe8dyxdCRnaJEf0cj1Pzh5uK2hWFClqPNkAM0JOeS 7W9gnkv8KytSQ5aA9NfjnJdjA3wBZkfg -----END CERTIFICATE-----Generated at Mon Sep 8 14:36:09 2025 by rpki-client