$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: 5Mm+vOqD2LggGN4RbP49Uu95XOKN+RQptK162heRFm8= Subject key identifier: 23:07:2D:BB:E2:1E:41:4E:EA:B3:54:12:78:67:20:5F:40:5C:FD:90 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 017B Signing time: Fri 19 Sep 2025 04:11:45 +0000 Manifest this update: Fri 19 Sep 2025 04:11:45 +0000 Manifest next update: Fri 26 Sep 2025 04:11:45 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: DQuy+PNg6Cx8PDSU+p8nz/zhDH/fwJfqLKrrrZBonyw=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: DsVxbJQBFvHguy7znDHJZ9CR2UmTMow8V9P9QuFVJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Sep 19 04:11:45 2025 GMT Not After : Sep 26 04:11:45 2025 GMT Subject: CN=68ccd801-5fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:5f:55:8d:79:0e:93:46:2f:cc:d9:70:06: b6:e5:5b:59:de:5e:8d:4d:00:3d:e5:1a:b8:30:3f: a1:b8:3c:46:c7:47:02:90:86:91:89:d7:9e:f4:61: 79:1c:c4:40:b5:53:bb:c2:c8:37:48:6b:7e:46:23: 16:67:57:9f:ba:45:82:58:ec:52:38:78:b3:5d:ed: bb:bf:51:60:e3:62:1a:1a:ec:dd:b8:ca:e9:22:2f: 10:f2:89:7f:7e:de:65:42:7b:7c:bd:75:30:68:ab: e6:5e:c2:99:6b:fc:ed:1c:4c:23:5e:73:37:89:c1: 8c:39:c4:88:0a:58:f1:05:fc:2b:b7:4f:be:f2:9f: 3a:c1:f3:9a:4d:fd:14:88:65:fd:a5:e5:08:44:0a: 82:d2:65:0b:f9:f6:70:01:a5:d5:e5:4e:18:33:54: 47:f1:f9:01:aa:89:74:83:ca:9d:65:d4:86:2b:2a: 8a:87:49:a3:4d:69:38:49:5f:f9:bf:bc:26:27:a0: 63:48:83:40:09:5a:2c:37:09:83:69:d6:9d:f4:0a: d2:d4:e3:77:f8:4b:02:3f:b5:67:0b:04:c9:d0:f3: b1:6f:7e:9a:da:bf:d6:45:af:ba:13:ee:53:c2:41: c4:98:b0:57:bc:a7:64:99:b0:e8:60:c9:d6:a5:cf: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:2D:BB:E2:1E:41:4E:EA:B3:54:12:78:67:20:5F:40:5C:FD:90 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c8:0f:b3:a4:8a:d3:1f:fd:9e:e1:a9:de:ed:2e:8e:4b:bb: be:03:b8:c3:28:5e:dc:5f:be:6b:42:82:76:55:17:66:33:b1: 2c:2a:65:db:95:0d:8a:38:7a:2e:d5:46:e8:37:3a:24:29:48: 32:ac:45:e8:b2:6d:35:1f:9e:d6:3d:26:7e:a8:27:02:cc:e6: f1:56:46:d0:c2:1b:8e:e7:27:dd:7d:cc:0c:36:4a:c1:ee:00: 0d:c8:d8:02:5f:fc:0b:1e:c3:7d:1d:6d:e4:a8:d4:cc:64:a4: 0c:86:24:46:34:85:80:8f:d8:f4:2c:3d:32:c4:b9:e8:b7:eb: b2:82:67:f9:93:f5:e7:6c:e7:9e:a6:3c:7f:65:cf:dc:82:46: 93:a0:12:60:02:f0:0a:81:f8:8c:4d:78:83:ad:14:03:1d:99: 4e:f4:c3:e0:33:e0:db:42:d4:6e:f7:af:a4:66:14:1f:84:ad: 4f:9f:6f:bf:40:78:b8:fa:32:36:49:41:76:6a:35:50:2f:15: 83:c4:e4:f0:80:59:f3:d3:d4:30:75:34:7d:46:af:54:25:65: 4f:23:fe:f7:b8:d6:05:bf:64:f5:4c:74:34:9a:0b:56:1d:fb: 7e:9d:a0:e6:9e:5f:04:87:1c:01:82:da:e5:06:f9:80:3b:6c: 61:f0:2e:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUwOTE5MDQxMTQ1WhcNMjUwOTI2MDQxMTQ1WjAYMRYwFAYD VQQDEw02OGNjZDgwMS01ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8BfVY15DpNGL8zZcAa25VtZ3l6NTQA95Rq4MD+huDxGx0cCkIaRidee9GF5 HMRAtVO7wsg3SGt+RiMWZ1efukWCWOxSOHizXe27v1Fg42IaGuzduMrpIi8Q8ol/ ft5lQnt8vXUwaKvmXsKZa/ztHEwjXnM3icGMOcSICljxBfwrt0++8p86wfOaTf0U iGX9peUIRAqC0mUL+fZwAaXV5U4YM1RH8fkBqol0g8qdZdSGKyqKh0mjTWk4SV/5 v7wmJ6BjSINACVosNwmDadad9ArS1ON3+EsCP7VnCwTJ0POxb36a2r/WRa+6E+5T wkHEmLBXvKdkmbDoYMnWpc8B1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMHLbvi HkFO6rNUEnhnIF9AXP2QMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeyA+zpIrTH/2e4ane7S6OS7u+A7jDKF7cX75rQoJ2VRdmM7EsKmXb lQ2KOHou1UboNzokKUgyrEXosm01H57WPSZ+qCcCzObxVkbQwhuO5yfdfcwMNkrB 7gANyNgCX/wLHsN9HW3kqNTMZKQMhiRGNIWAj9j0LD0yxLnot+uygmf5k/XnbOee pjx/Zc/cgkaToBJgAvAKgfiMTXiDrRQDHZlO9MPgM+DbQtRu96+kZhQfhK1Pn2+/ QHi4+jI2SUF2ajVQLxWDxOTwgFnz09QwdTR9Rq9UJWVPI/73uNYFv2T1THQ0mgtW Hft+naDmnl8EhxwBgtrlBvmAO2xh8C4b -----END CERTIFICATE-----Generated at Fri Sep 19 23:25:09 2025 by rpki-client