$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: MgzVEogyRxcLUh6mFlcpShWQQBK6oXbpVXbl0ck0VZo= Subject key identifier: BF:E8:0F:FA:70:15:D7:F4:64:98:DD:B2:66:A6:C8:8F:DA:18:57:83 Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: EE Signing time: Fri 05 Sep 2025 05:42:32 +0000 Manifest this update: Fri 05 Sep 2025 05:42:31 +0000 Manifest next update: Fri 12 Sep 2025 05:42:31 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: cX1vaIBiRE4PfMjO1B++ESBOYQ4rNg6f1zKfgX1KvuY=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Sep 5 05:42:31 2025 GMT Not After : Sep 12 05:42:31 2025 GMT Subject: CN=68ba7847-ab20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:e1:43:7d:c1:67:80:2a:0d:3d:e2:32:67: 5c:6d:bd:54:0b:bf:a1:a2:92:64:5e:ac:8b:ac:8a: d1:cb:cd:5d:b1:bd:53:04:50:cd:e6:28:65:76:d8: 04:11:ce:f3:a6:9c:f3:6d:e7:51:9c:9f:e4:68:ae: c8:0a:8e:df:97:0d:ab:06:df:9e:ef:60:4d:70:8d: b2:a3:f2:0d:23:7c:91:9e:ad:bd:00:48:c5:9f:a3: db:67:f4:88:3d:d2:fb:aa:b7:72:65:6b:ea:af:ff: a4:22:3a:f6:01:95:78:3d:ea:6b:57:1a:48:a9:a3: 6e:92:26:d8:ca:44:f6:bc:15:38:5e:63:c1:1c:ca: 07:63:c0:f9:4c:34:e1:55:69:84:36:bc:7b:4a:22: ee:ef:0b:5d:d6:9a:13:57:fe:ed:7c:05:27:b4:d8: b6:71:b8:21:06:32:dc:83:ff:36:8b:a3:b4:53:ed: 10:4f:3c:d7:0d:67:a1:8d:24:7b:9b:0f:75:07:2b: 2f:c6:a7:c3:4f:bd:5b:d9:46:1c:88:a6:d2:25:a0: 13:5d:23:48:19:aa:da:6c:d2:44:ff:1b:3a:8b:ec: 2f:39:8f:a2:50:ff:f1:f2:79:cf:50:ed:f0:50:23: e5:2b:ae:36:ef:e4:84:05:58:ef:88:1b:58:48:e2: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:0F:FA:70:15:D7:F4:64:98:DD:B2:66:A6:C8:8F:DA:18:57:83 X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:de:33:ca:18:ea:64:cd:2a:92:76:d5:b4:b9:5f:5d:9e:d2: 28:06:3f:cd:f7:8a:52:38:8d:22:df:a2:41:62:29:5f:0a:a2: 46:ba:5a:e4:b7:f7:41:5f:70:a9:c8:b6:19:fd:33:37:b6:67: ad:48:fa:d2:48:57:e0:6e:1d:a1:0c:c7:e8:45:b1:03:40:0e: 29:a5:24:8d:27:a1:b7:e9:ad:2b:ac:7c:f1:f9:d9:5b:67:30: 28:9d:98:bc:ba:41:80:22:26:da:d9:89:6a:37:d7:0a:c0:97: 2b:2c:7f:5c:06:a4:e3:07:07:e3:9a:05:8b:66:ae:e9:ab:e8: bb:9c:1c:bf:c1:69:94:ef:40:89:44:1e:52:30:0d:22:3c:6e: 65:0a:ea:51:0f:94:68:52:7b:9c:90:62:b3:af:8b:f9:d7:eb: 74:2c:8f:4d:42:8f:8d:4d:8a:4a:17:83:87:a8:9f:8b:8d:1a: 77:4a:b3:94:f4:fb:87:94:50:4a:5c:3f:de:11:61:94:d2:77: 81:ef:c5:52:e6:ff:ed:28:54:05:ab:50:20:f8:20:5e:22:d1: ac:01:aa:2c:f5:71:2f:7e:48:1e:14:47:8f:e4:66:28:0e:01: 8a:09:0b:09:f4:dc:f9:fb:c8:2e:f1:e4:e6:ae:94:74:dd:6c: 9e:e6:c5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUwOTA1MDU0MjMxWhcNMjUwOTEyMDU0MjMxWjAYMRYwFAYD VQQDEw02OGJhNzg0Ny1hYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHPhQ33BZ4AqDT3iMmdcbb1UC7+hopJkXqyLrIrRy81dsb1TBFDN5ihldtgE Ec7zppzzbedRnJ/kaK7ICo7flw2rBt+e72BNcI2yo/INI3yRnq29AEjFn6PbZ/SI PdL7qrdyZWvqr/+kIjr2AZV4PeprVxpIqaNukibYykT2vBU4XmPBHMoHY8D5TDTh VWmENrx7SiLu7wtd1poTV/7tfAUntNi2cbghBjLcg/82i6O0U+0QTzzXDWehjSR7 mw91BysvxqfDT71b2UYciKbSJaATXSNIGarabNJE/xs6i+wvOY+iUP/x8nnPUO3w UCPlK6427+SEBVjviBtYSOKRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/oD/pw Fdf0ZJjdsmamyI/aGFeDMB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3jPKGOpkzSqSdtW0uV9dntIoBj/N94pSOI0i36JBYilfCqJGulrk t/dBX3CpyLYZ/TM3tmetSPrSSFfgbh2hDMfoRbEDQA4ppSSNJ6G36a0rrHzx+dlb ZzAonZi8ukGAIiba2YlqN9cKwJcrLH9cBqTjBwfjmgWLZq7pq+i7nBy/wWmU70CJ RB5SMA0iPG5lCupRD5RoUnuckGKzr4v51+t0LI9NQo+NTYpKF4OHqJ+LjRp3SrOU 9PuHlFBKXD/eEWGU0neB78VS5v/tKFQFq1Ag+CBeItGsAaos9XEvfkgeFEeP5GYo DgGKCQsJ9Nz5+8gu8eTmrpR03Wye5sUT -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:27 2025 by rpki-client