$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: WQJxFCFoRBzPsxiAgCOECXNvUMZ9dmh1iuNrBLWzcs8= Subject key identifier: E0:CF:02:64:FA:D1:F6:23:EB:05:A4:94:BA:98:CE:D6:91:B1:14:CD Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 0106 Signing time: Mon 21 Jul 2025 05:37:46 +0000 Manifest this update: Mon 21 Jul 2025 05:37:46 +0000 Manifest next update: Mon 28 Jul 2025 05:37:45 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: smjdh/UPUBzNqm0QQORxAx1EU+4gwNIlIZNCPYY/Czo=) 2: 59E4E2A415BA11F084EFBB7CC4F9AE02.roa (hash: HZDyu1joYX+dxKnFptiA5xky7OHNJkIOKQTmsVfZf5A=) 3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Jul 21 05:37:46 2025 GMT Not After : Jul 28 05:37:45 2025 GMT Subject: CN=687dd22a-a82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:57:b4:c4:c7:36:21:18:10:a6:ce:49:65: 00:fe:a0:f6:05:30:66:80:94:f7:c8:4f:ab:85:43: d0:d4:aa:c1:6b:cd:64:64:5e:e4:5c:4f:d0:38:95: b2:1b:e7:5c:bb:eb:9a:b4:9e:90:4d:07:44:e8:b6: 04:d7:64:98:1f:96:b3:73:65:1a:34:00:03:eb:2a: f4:f5:93:19:62:f5:38:46:4f:33:81:6f:10:fb:66: f3:c1:56:b9:54:36:5c:d1:0c:1a:51:66:e9:5c:08: b4:58:82:45:a0:c7:a0:19:17:4f:0f:78:58:00:35: 3e:4e:a6:96:10:48:47:db:c4:67:6c:73:d3:df:73: 61:9d:62:3e:a5:d3:e1:06:7e:d1:33:a2:dc:c1:00: 33:69:a5:5f:92:8e:6a:a9:1c:64:bc:0d:ec:96:9b: f1:76:3d:73:53:5e:bc:ca:0d:c8:6a:dd:de:14:87: f5:d4:cb:84:33:a0:59:e4:d9:be:39:5c:60:a6:d4: ce:14:f0:52:76:fc:1e:e6:b5:9a:ec:56:7e:8e:d7: 93:ba:df:e2:d0:99:1f:ff:19:68:ab:79:d9:5e:7e: 24:0d:77:72:04:b6:1c:a4:c8:98:c4:96:20:46:6f: 76:d7:65:e1:b5:8b:e1:63:33:44:39:47:94:bf:1b: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CF:02:64:FA:D1:F6:23:EB:05:A4:94:BA:98:CE:D6:91:B1:14:CD X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:b3:92:9a:7f:e0:93:4f:d1:49:c1:f3:27:d2:27:62:e0:b9: 58:93:03:38:d6:3f:58:7d:52:e4:5d:1a:7f:85:61:8e:f0:c7: 40:bf:08:4f:5e:6e:5f:a8:2f:d8:19:57:ed:71:d1:f0:35:1b: 68:af:30:88:19:c6:f9:4f:e9:e5:6d:dc:b7:6b:e6:9c:f8:d1: d6:5c:1b:73:14:06:05:31:03:79:24:ed:fb:17:ec:59:a7:7d: 13:7b:f4:fe:6b:28:dd:8f:0f:d3:e7:69:ec:b4:1a:78:5a:38: ba:62:da:fb:b5:d7:bc:3b:77:d0:56:db:0f:88:83:dc:d6:31: 20:9b:42:a8:29:8e:75:99:ec:33:8b:ef:5a:06:bb:c5:59:f7: e3:d1:fb:87:d3:a4:e3:a2:4a:bc:f4:74:d0:ec:20:5e:75:7e: 0e:5e:55:5d:2e:d9:71:21:f8:33:0e:b0:88:5a:8c:32:1e:6f: cf:f2:48:63:ae:00:4b:3d:79:a0:a9:61:ac:22:75:18:77:44: 65:13:10:0c:e4:1f:7d:16:88:31:23:70:23:c5:17:d8:36:ab: 80:f0:f2:ad:54:87:06:8f:db:1b:40:ea:76:c6:c5:e3:42:cb: 24:15:3e:91:65:47:a4:a8:3f:24:1b:8b:bc:a9:f3:62:cf:0d: 3f:c4:91:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUwNzIxMDUzNzQ2WhcNMjUwNzI4MDUzNzQ1WjAYMRYwFAYD VQQDEw02ODdkZDIyYS1hODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUtXtMTHNiEYEKbOSWUA/qD2BTBmgJT3yE+rhUPQ1KrBa81kZF7kXE/QOJWy G+dcu+uatJ6QTQdE6LYE12SYH5azc2UaNAAD6yr09ZMZYvU4Rk8zgW8Q+2bzwVa5 VDZc0QwaUWbpXAi0WIJFoMegGRdPD3hYADU+TqaWEEhH28RnbHPT33NhnWI+pdPh Bn7RM6LcwQAzaaVfko5qqRxkvA3slpvxdj1zU168yg3Iat3eFIf11MuEM6BZ5Nm+ OVxgptTOFPBSdvwe5rWa7FZ+jteTut/i0Jkf/xloq3nZXn4kDXdyBLYcpMiYxJYg Rm9212XhtYvhYzNEOUeUvxvlswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODPAmT6 0fYj6wWklLqYztaRsRTNMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRs5Kaf+CTT9FJwfMn0idi4LlYkwM41j9YfVLkXRp/hWGO8MdAvwhP Xm5fqC/YGVftcdHwNRtorzCIGcb5T+nlbdy3a+ac+NHWXBtzFAYFMQN5JO37F+xZ p30Te/T+ayjdjw/T52nstBp4Wji6Ytr7tde8O3fQVtsPiIPc1jEgm0KoKY51mewz i+9aBrvFWffj0fuH06Tjokq89HTQ7CBedX4OXlVdLtlxIfgzDrCIWowyHm/P8khj rgBLPXmgqWGsInUYd0RlExAM5B99FogxI3AjxRfYNquA8PKtVIcGj9sbQOp2xsXj QsskFT6RZUekqD8kG4u8qfNizw0/xJFK -----END CERTIFICATE-----Generated at Mon Jul 21 07:53:06 2025 by rpki-client