$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: S7Dtsnm82HNoPzaVzkkOUy5sP2LtZD2C4ih5cUp3DcU= Subject key identifier: E0:50:D6:A8:1B:FF:05:30:CB:4B:AD:AB:D6:3D:31:D3:07:52:9A:36 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 0595 Signing time: Wed 20 Aug 2025 23:21:14 +0000 Manifest this update: Wed 20 Aug 2025 23:21:13 +0000 Manifest next update: Wed 27 Aug 2025 23:21:13 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: JSacL28TEmu6ppH6B9S0bMAs5qSG14Cj1qgbfLqmdB4=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Aug 20 23:21:13 2025 GMT Not After : Aug 27 23:21:13 2025 GMT Subject: CN=68a65869-14d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:91:c1:1b:46:c9:a4:83:cc:f5:d6:07:9d: 4e:5f:e6:60:a8:50:ee:67:87:b0:90:31:09:e2:5a: 28:45:8c:40:b3:22:e0:80:11:54:27:82:bd:2a:73: 3d:50:a9:bb:71:71:f6:24:ae:d2:3b:0e:16:60:9c: 83:b4:36:4c:6a:17:b6:9f:11:59:46:40:81:f6:c8: 97:dc:04:f2:6f:48:2c:8e:dc:13:67:e0:01:a3:01: 22:3c:f8:5d:01:5d:2f:d7:32:c7:ae:27:63:22:34: eb:d4:87:be:6d:a7:ae:42:da:05:a2:24:4b:8d:a4: 22:8d:77:3d:b7:72:5c:85:1a:14:2f:91:39:13:9a: 33:f5:5c:a4:c7:6a:97:ba:33:bf:ab:37:05:0f:ce: 19:bc:74:93:7c:26:ec:d1:01:17:90:36:46:09:26: 45:87:23:53:fc:da:ef:2b:01:85:e1:86:24:46:16: 77:70:af:64:53:53:2c:0c:35:db:52:79:7e:25:27: 47:19:98:e5:e1:34:20:ff:87:3c:27:74:e0:60:b3: 85:3e:ed:79:40:3d:b8:23:a9:73:42:67:4e:5d:60: cd:9d:db:80:ee:65:6b:10:a3:e8:ed:80:44:2f:af: 29:d7:0b:47:55:67:40:c7:af:9f:ce:0e:cf:28:b4: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:50:D6:A8:1B:FF:05:30:CB:4B:AD:AB:D6:3D:31:D3:07:52:9A:36 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e4:fd:22:a2:98:a3:ab:10:d5:86:61:ff:49:f8:62:21:3d: 21:4a:51:c2:98:34:54:5a:5b:41:50:5a:78:60:ac:bb:96:75: 2a:ce:d4:0b:85:67:1b:34:86:16:d3:a3:58:ca:c0:0e:a1:35: 38:b9:07:66:38:4b:86:e8:f0:eb:83:bc:89:ee:19:72:c9:c2: 09:91:81:95:73:48:6a:66:1b:8f:f1:0a:85:f7:bc:d7:95:38: d5:ee:e9:33:29:d3:fe:82:95:68:df:fc:cf:82:8c:75:41:ac: 93:70:3d:11:a4:07:45:ff:82:16:3b:a4:c1:1a:dd:ef:3a:93: 75:66:ce:18:88:90:9b:80:42:39:84:0b:07:fd:be:c1:6c:0f: 28:e8:f9:10:0c:bb:46:09:67:46:95:58:09:a5:d7:d3:ca:68: 2e:e6:ba:a3:89:a5:0d:48:23:ba:f2:b5:93:63:ce:82:78:cc: e4:1c:e5:c8:a0:f0:90:cf:7b:c6:5c:16:6d:fa:86:08:c1:24: 35:ef:25:f9:39:28:f6:c8:52:20:a0:a9:0f:23:95:2c:8e:88: de:b9:06:81:fb:e5:80:1a:5d:93:79:d0:b7:43:ad:c3:ea:9c: 3f:cd:f6:6e:ed:28:f5:20:ec:4a:55:22:8b:ad:7a:23:7b:5d: 97:cb:e3:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwODIwMjMyMTEzWhcNMjUwODI3MjMyMTEzWjAYMRYwFAYD VQQDEw02OGE2NTg2OS0xNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzeRwRtGyaSDzPXWB51OX+ZgqFDuZ4ewkDEJ4looRYxAsyLggBFUJ4K9KnM9 UKm7cXH2JK7SOw4WYJyDtDZMahe2nxFZRkCB9siX3ATyb0gsjtwTZ+ABowEiPPhd AV0v1zLHridjIjTr1Ie+baeuQtoFoiRLjaQijXc9t3JchRoUL5E5E5oz9Vykx2qX ujO/qzcFD84ZvHSTfCbs0QEXkDZGCSZFhyNT/NrvKwGF4YYkRhZ3cK9kU1MsDDXb Unl+JSdHGZjl4TQg/4c8J3TgYLOFPu15QD24I6lzQmdOXWDNnduA7mVrEKPo7YBE L68p1wtHVWdAx6+fzg7PKLTEkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBQ1qgb /wUwy0utq9Y9MdMHUpo2MB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB05P0iopijqxDVhmH/SfhiIT0hSlHCmDRUWltBUFp4YKy7lnUqztQL hWcbNIYW06NYysAOoTU4uQdmOEuG6PDrg7yJ7hlyycIJkYGVc0hqZhuP8QqF97zX lTjV7ukzKdP+gpVo3/zPgox1QayTcD0RpAdF/4IWO6TBGt3vOpN1Zs4YiJCbgEI5 hAsH/b7BbA8o6PkQDLtGCWdGlVgJpdfTymgu5rqjiaUNSCO68rWTY86CeMzkHOXI oPCQz3vGXBZt+oYIwSQ17yX5OSj2yFIgoKkPI5UsjojeuQaB++WAGl2TedC3Q63D 6pw/zfZu7Sj1IOxKVSKLrXoje12Xy+P8 -----END CERTIFICATE-----Generated at Fri Aug 22 16:22:28 2025 by rpki-client