$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: e2aX2ysk9DB18umW1ft3tbvcqYXnolUdeE9Egfnwwxo= Subject key identifier: 9D:03:35:7B:F0:BE:EB:5B:D3:70:61:3E:B4:32:52:7A:7A:81:B7:19 Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 05CA Signing time: Fri 18 Jul 2025 23:24:43 +0000 Manifest this update: Fri 18 Jul 2025 23:24:43 +0000 Manifest next update: Fri 25 Jul 2025 23:24:43 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: +genOreKNHq7FlcqRaDBoWRgjhcke98JtohB/sAwG/E=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: FUPhJ7viy8W3pQYFN/dbDBBE9qpZwOpzgVenyvyXp+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Validity Not Before: Jul 18 23:24:43 2025 GMT Not After : Jul 25 23:24:43 2025 GMT Subject: CN=687ad7bb-4637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:16:86:bc:62:ac:a4:b5:17:d3:4b:c1:bd: 7a:82:75:d2:9a:28:f7:2c:51:75:a2:8a:fb:bf:7e: 8d:a5:7a:de:96:9b:cc:c3:b2:eb:8e:91:5f:e9:36: ec:8d:3c:65:71:77:71:9d:13:b4:3a:0e:51:00:b8: a8:fe:f1:6a:b3:4d:ba:93:05:04:ca:92:4f:bd:35: cc:8c:7d:31:20:af:25:62:3c:a2:88:7b:f9:47:41: 0b:f2:95:9b:02:71:26:f5:16:4d:09:6e:24:34:a4: 25:13:5a:7f:76:c4:25:1f:11:0d:df:06:60:80:76: a6:70:44:e2:55:04:19:7d:dd:3d:72:72:5d:2c:60: f1:ef:7f:0e:11:b2:4d:6e:24:50:8a:69:fe:ef:0c: 0f:5d:0b:68:86:71:5d:ae:4f:9e:40:4b:99:b9:ce: 24:e7:47:dc:71:a4:2e:04:73:3c:f1:8e:56:c4:62: 1b:b3:cf:5b:66:b1:0b:54:2d:a1:9d:a0:3b:9d:57: a9:66:2e:8d:5e:54:12:3a:2f:9a:f2:13:96:95:aa: 43:1e:b9:1e:50:48:ce:5a:55:51:14:4e:01:c2:fc: 02:03:27:fb:84:90:8f:7d:29:b4:f3:9a:17:93:97: 49:ec:0e:fe:9a:e2:62:dd:11:55:6e:5f:ed:98:be: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:35:7B:F0:BE:EB:5B:D3:70:61:3E:B4:32:52:7A:7A:81:B7:19 X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:8a:68:a9:af:44:1e:13:f5:94:58:88:32:83:38:d7:e4:50: b3:1a:0a:fc:a8:ef:eb:5e:b9:ea:5c:ff:30:e3:77:5f:df:cc: 77:bf:d3:eb:89:22:8d:5c:9f:d7:f9:fd:03:b7:a8:07:84:db: 2e:95:58:2e:27:61:c2:07:03:74:7c:75:53:de:d5:18:7b:11: 7b:43:20:75:4e:60:b1:c3:5b:da:c8:b2:50:1c:09:55:a8:69: 40:e2:91:c9:a5:98:ea:81:a6:47:7a:0c:32:5d:73:f3:60:91: 97:e0:e3:95:6b:44:c1:5b:cd:1f:e8:36:c5:c6:fb:83:35:5a: 47:ec:74:c8:22:9b:00:f9:15:6d:70:95:21:68:c6:44:4d:b7: 3d:95:20:e6:6e:9a:39:ab:96:75:90:ae:96:a3:ed:5f:74:dc: 66:2d:87:79:61:5d:98:2d:e2:79:0b:56:b2:85:47:f2:fe:56: 03:4a:86:d9:ca:f2:ec:aa:39:b1:84:8c:d6:bb:28:a5:51:9b: 73:0d:3f:13:ba:11:36:12:91:89:49:90:c1:8d:b0:9c:d9:f0: 15:92:cb:31:a2:fc:82:68:7a:6f:fa:06:b9:f9:ff:85:7f:74: 8a:ef:c6:64:75:a5:a5:6c:b4:21:d7:a6:f5:0f:6a:bb:26:a8: 93:92:7d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjUwNzE4MjMyNDQzWhcNMjUwNzI1MjMyNDQzWjAYMRYwFAYD VQQDEw02ODdhZDdiYi00NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyegWhrxirKS1F9NLwb16gnXSmij3LFF1oor7v36NpXrelpvMw7LrjpFf6Tbs jTxlcXdxnRO0Og5RALio/vFqs026kwUEypJPvTXMjH0xIK8lYjyiiHv5R0EL8pWb AnEm9RZNCW4kNKQlE1p/dsQlHxEN3wZggHamcETiVQQZfd09cnJdLGDx738OEbJN biRQimn+7wwPXQtohnFdrk+eQEuZuc4k50fccaQuBHM88Y5WxGIbs89bZrELVC2h naA7nVepZi6NXlQSOi+a8hOWlapDHrkeUEjOWlVRFE4BwvwCAyf7hJCPfSm085oX k5dJ7A7+muJi3RFVbl/tmL5L0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0DNXvw vutb03BhPrQyUnp6gbcZMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQimipr0QeE/WUWIgygzjX5FCzGgr8qO/rXrnqXP8w43df38x3v9Pr iSKNXJ/X+f0Dt6gHhNsulVguJ2HCBwN0fHVT3tUYexF7QyB1TmCxw1vayLJQHAlV qGlA4pHJpZjqgaZHegwyXXPzYJGX4OOVa0TBW80f6DbFxvuDNVpH7HTIIpsA+RVt cJUhaMZETbc9lSDmbpo5q5Z1kK6Wo+1fdNxmLYd5YV2YLeJ5C1ayhUfy/lYDSobZ yvLsqjmxhIzWuyilUZtzDT8TuhE2EpGJSZDBjbCc2fAVkssxovyCaHpv+ga5+f+F f3SK78ZkdaWlbLQh16b1D2q7JqiTkn36 -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:08 2025 by rpki-client