$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: LzTiCJOquh4uE9KH4HBaUekc4cMDng2auCv6Mw3m9uQ= Subject key identifier: 37:9F:9F:29:61:EC:84:D7:24:76:7E:6B:64:DE:11:EB:83:81:AA:14 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01FC Signing time: Thu 04 Sep 2025 16:28:41 +0000 Manifest this update: Thu 04 Sep 2025 16:28:41 +0000 Manifest next update: Thu 11 Sep 2025 16:28:41 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: /MgMINvst4T6vE1BN4RwFvbLeCXQk7487Wa7jLbK9TU=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Sep 4 16:28:41 2025 GMT Not After : Sep 11 16:28:41 2025 GMT Subject: CN=68b9be39-c7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:8e:8a:f7:c9:45:c5:74:69:d8:82:32:d0: cc:05:de:6b:27:53:d4:69:d1:28:e6:15:d5:02:28: 53:05:bc:9d:05:56:cf:92:11:25:89:5a:41:b8:4e: 9c:8f:66:b9:a3:a6:af:91:23:79:69:80:da:42:2a: aa:ff:e2:17:ba:c0:9e:4b:06:96:1d:7a:12:0e:3d: b9:a9:42:3c:c3:2b:2f:af:44:0b:cf:98:55:a6:11: f7:5a:6a:0f:05:c3:23:ab:2d:e8:c4:7a:64:f6:e3: 1f:b7:d2:52:96:11:c2:0f:fb:ac:14:35:ba:dc:04: 4e:5c:84:3b:8f:fc:e6:92:30:2b:dd:47:b2:1e:ed: c8:be:22:74:51:a3:75:9f:cd:35:90:5c:e2:be:cc: 04:2a:57:0b:b4:de:72:c6:f2:80:2d:2f:f4:1a:34: fd:2c:25:49:f5:f6:8f:66:9c:10:44:70:81:39:e8: cc:bb:a5:3c:9d:06:93:ae:d7:50:7b:57:db:c4:58: db:02:06:82:e7:07:a4:f0:fb:63:8f:e6:58:96:20: 7f:b2:bc:20:b2:d8:53:d8:b9:73:19:90:43:20:42: 9a:57:98:8c:5e:ae:97:33:1c:4f:9c:7c:f2:0a:2a: ed:88:bf:c0:2b:4d:05:74:e0:23:99:ca:1c:ca:12: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:9F:29:61:EC:84:D7:24:76:7E:6B:64:DE:11:EB:83:81:AA:14 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:d7:d4:cf:ca:ce:12:b1:25:22:44:e8:88:95:e8:5d:3b: 89:47:3b:f4:1b:e5:3a:1c:2b:31:a2:6e:1f:90:29:69:9e:98: e0:a9:14:c3:09:23:e6:41:70:71:dc:60:9c:57:e5:f4:7a:79: e9:e9:07:75:e3:49:71:11:dd:9a:b4:5a:1b:4b:25:e3:b7:a2: f2:cf:c9:b9:fb:c2:d0:df:86:2a:b4:e5:e5:4b:04:69:e7:70: d9:54:15:1e:75:84:85:bb:b6:a2:d1:c8:a9:cd:6f:a7:85:41: 9f:a6:5c:af:14:8f:4e:ef:83:91:0a:3a:bd:32:0c:70:e8:45: 15:8b:f7:4d:57:88:93:8d:42:3d:92:8a:ed:74:e5:27:b4:68: 99:e3:e4:c1:ad:57:02:38:ee:f9:21:f7:c3:f8:1c:66:22:52: 04:81:d2:b7:76:8e:5e:54:9e:62:8d:ff:3b:cc:c5:8e:ea:3e: c3:41:4a:ed:f8:e0:ce:a9:e3:34:36:28:ab:d4:0d:7d:8b:5b: 55:7f:6c:17:92:75:17:93:98:46:7d:cf:62:aa:df:9a:77:de: d3:7d:fc:83:f7:fe:a6:36:aa:72:e0:2a:75:98:82:2c:c3:74: d6:52:ea:50:89:e8:fb:c0:1a:0c:48:d8:75:76:31:e8:65:ce: 2a:fd:de:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwOTA0MTYyODQxWhcNMjUwOTExMTYyODQxWjAYMRYwFAYD VQQDEw02OGI5YmUzOS1jN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+aOivfJRcV0adiCMtDMBd5rJ1PUadEo5hXVAihTBbydBVbPkhEliVpBuE6c j2a5o6avkSN5aYDaQiqq/+IXusCeSwaWHXoSDj25qUI8wysvr0QLz5hVphH3WmoP BcMjqy3oxHpk9uMft9JSlhHCD/usFDW63AROXIQ7j/zmkjAr3UeyHu3IviJ0UaN1 n801kFzivswEKlcLtN5yxvKALS/0GjT9LCVJ9faPZpwQRHCBOejMu6U8nQaTrtdQ e1fbxFjbAgaC5wek8Ptjj+ZYliB/srwgsthT2LlzGZBDIEKaV5iMXq6XMxxPnHzy CirtiL/AK00FdOAjmcocyhKPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDefnylh 7ITXJHZ+a2TeEeuDgaoUMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPJdfUz8rOErElIkToiJXoXTuJRzv0G+U6HCsxom4fkClpnpjgqRTD CSPmQXBx3GCcV+X0ennp6Qd140lxEd2atFobSyXjt6Lyz8m5+8LQ34YqtOXlSwRp 53DZVBUedYSFu7ai0cipzW+nhUGfplyvFI9O74ORCjq9Mgxw6EUVi/dNV4iTjUI9 kortdOUntGiZ4+TBrVcCOO75IffD+BxmIlIEgdK3do5eVJ5ijf87zMWO6j7DQUrt +ODOqeM0Niir1A19i1tVf2wXknUXk5hGfc9iqt+ad97TffyD9/6mNqpy4Cp1mIIs w3TWUupQiej7wBoMSNh1djHoZc4q/d45 -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client