$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: Etjl6HJU3reZT4z3vw/fyficUzpwdrmqX31crwvTdmg= Subject key identifier: 4D:72:DA:43:A9:58:27:36:94:40:54:F2:5B:E1:8C:BF:CA:D1:96:13 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 3A Signing time: Tue 09 Sep 2025 07:41:51 +0000 Manifest this update: Tue 09 Sep 2025 07:41:51 +0000 Manifest next update: Tue 16 Sep 2025 07:41:51 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: n7JZpTMj8C/1hsqesJiU/KX5sc3KScEsMeCS3OOdxpE=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Sep 9 07:41:51 2025 GMT Not After : Sep 16 07:41:51 2025 GMT Subject: CN=68bfda3f-3603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:3f:4f:1a:89:6d:95:84:af:42:f5:5c:23: 64:b1:2f:6d:fc:2d:6c:95:50:00:82:7a:45:32:66: 4b:89:64:f3:04:f9:b6:ab:99:4e:84:03:3a:9e:f0: b4:f1:ed:b6:d9:b0:ca:f2:5f:1f:5e:42:3d:e2:24: 1a:3e:e7:88:e9:80:69:f2:42:03:53:28:6b:f8:77: 9c:23:f8:4e:f5:fe:78:35:ee:6e:e8:14:78:e3:81: 9e:c3:bb:cf:e2:84:65:c9:05:25:e6:60:e9:b3:2d: af:00:81:ec:6b:07:cd:8c:9c:4e:ef:79:1f:d4:2b: fe:e6:13:c0:57:4c:1c:ab:a5:61:8b:23:3c:68:7c: 74:4f:3d:04:59:f6:39:71:30:08:21:eb:ab:ce:25: 0e:d9:73:27:f2:3d:89:c5:b8:fa:a6:82:15:87:be: d9:10:d7:a0:29:a3:c3:20:91:4d:f4:31:4e:3d:8a: 82:08:02:45:f3:5d:5c:11:b9:77:ba:53:ec:8b:f3: 9b:6d:e6:61:a7:03:b9:af:45:ac:2b:86:e7:93:3e: 8a:72:b9:0c:b8:f7:d3:ec:6b:63:00:35:6b:c6:3c: 37:d3:05:33:57:6e:32:14:a5:ac:cf:0f:b7:1c:5d: 67:a4:c0:3c:4a:6c:d4:30:a6:00:ae:55:5e:95:2e: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:DA:43:A9:58:27:36:94:40:54:F2:5B:E1:8C:BF:CA:D1:96:13 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d3:7e:31:aa:4b:b4:c0:a3:57:8d:36:de:46:52:5d:c7:bc: 77:f8:09:ce:f5:50:b5:df:6b:30:eb:3b:ca:7d:e7:2a:c1:4e: 19:59:88:0a:f2:ac:d4:6c:25:6c:42:27:79:69:55:69:81:bc: 85:1a:6d:f1:8a:17:6a:92:d3:31:d7:d0:f4:d6:a2:df:eb:bf: e5:7d:f3:81:38:8f:9b:8f:ac:c0:79:ae:c7:d8:23:51:40:ed: 58:a7:a5:61:8b:89:a3:9a:0b:0b:31:1b:de:8f:61:23:47:c9: 2e:f3:58:db:e3:0f:42:cf:72:0f:63:86:76:a0:09:a5:c0:4d: 1e:65:ff:d1:66:88:88:36:49:f8:17:ee:71:39:8b:56:36:52: db:ff:7c:6f:3f:ff:94:36:2e:e7:61:ff:8e:fd:7b:14:7d:5d: 7d:bb:c1:ef:04:c4:9a:49:91:d1:0d:d1:ae:f9:15:7f:d4:df: e8:01:d2:78:00:12:30:94:cb:11:ff:cf:6c:72:21:d0:9c:72: ea:73:75:6b:76:bd:db:5c:2a:bc:be:84:a5:7c:84:17:42:8e: d9:23:50:b1:20:fa:52:84:48:8a:16:29:e4:45:7c:84:bb:c2: 4d:2e:b7:d9:d7:9c:04:a5:3a:cb:a1:ba:81:03:d7:da:ab:c1: 95:a1:4a:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTA5MDkwNzQxNTFaFw0yNTA5MTYwNzQxNTFaMBgxFjAUBgNV BAMTDTY4YmZkYTNmLTM2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTCT9PGoltlYSvQvVcI2SxL238LWyVUACCekUyZkuJZPME+barmU6EAzqe8LTx 7bbZsMryXx9eQj3iJBo+54jpgGnyQgNTKGv4d5wj+E71/ng17m7oFHjjgZ7Du8/i hGXJBSXmYOmzLa8AgexrB82MnE7veR/UK/7mE8BXTByrpWGLIzxofHRPPQRZ9jlx MAgh66vOJQ7ZcyfyPYnFuPqmghWHvtkQ16Apo8MgkU30MU49ioIIAkXzXVwRuXe6 U+yL85tt5mGnA7mvRawrhueTPopyuQy499Psa2MANWvGPDfTBTNXbjIUpazPD7cc XWekwDxKbNQwpgCuVV6VLvGVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTXLaQ6lY JzaUQFTyW+GMv8rRlhMwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPTfjGqS7TAo1eNNt5GUl3HvHf4Cc71ULXfazDrO8p95yrBThlZiAry rNRsJWxCJ3lpVWmBvIUabfGKF2qS0zHX0PTWot/rv+V984E4j5uPrMB5rsfYI1FA 7VinpWGLiaOaCwsxG96PYSNHyS7zWNvjD0LPcg9jhnagCaXATR5l/9FmiIg2SfgX 7nE5i1Y2Utv/fG8//5Q2Ludh/479exR9XX27we8ExJpJkdEN0a75FX/U3+gB0ngA EjCUyxH/z2xyIdCccupzdWt2vdtcKry+hKV8hBdCjtkjULEg+lKESIoWKeRFfIS7 wk0ut9nXnASlOsuhuoED19qrwZWhSkI= -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:49 2025 by rpki-client