$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: SWXKR48ppPYOZof3ERlL8ucmcgF5htXTM/FhKTfUl/0= Subject key identifier: 9C:07:EF:5C:49:43:F9:3A:96:60:B4:29:9A:D5:B3:EF:26:0E:31:7B Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 1248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 121D Signing time: Sun 20 Jul 2025 17:11:10 +0000 Manifest this update: Sun 20 Jul 2025 17:11:10 +0000 Manifest next update: Sun 27 Jul 2025 17:11:10 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: ikL4bvtiIswJ+EhCXk2jGs3dF3k+8nJVt+n39mno/So=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Jul 20 17:11:10 2025 GMT Not After : Jul 27 17:11:10 2025 GMT Subject: CN=687d232e-d2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:af:2a:da:0e:75:28:a5:4d:b2:bf:39:8e: ad:b8:86:87:9d:40:3e:33:71:30:14:e3:5c:f3:96: 9e:a8:c3:4c:dc:72:0c:1b:dd:bb:1a:fc:ef:3b:7b: f3:7a:59:30:42:8d:d5:78:e3:04:62:64:1e:c8:7a: 8b:ca:9f:d9:aa:c3:64:cc:bb:3a:97:4a:ff:82:76: 46:35:4b:e0:8c:02:b6:32:d9:7b:be:9e:e7:43:e4: 43:dd:b1:d1:c8:96:67:23:88:28:a0:9b:38:bb:29: 51:de:b4:39:42:c8:f9:2c:a6:2c:f9:fc:7f:74:eb: 50:57:68:5a:38:98:89:12:fa:c8:d7:ae:b4:db:e1: d0:8c:8f:94:1f:6b:8b:46:12:29:07:ee:d7:09:88: 6e:a8:5a:fa:a4:6b:5d:07:48:62:d1:76:3e:24:c7: 13:b0:85:e6:8a:3c:42:45:b8:29:0f:2a:7c:6c:c2: e7:af:00:be:39:31:83:92:39:0f:ae:23:50:cf:e3: 92:45:21:d1:e6:2a:94:2b:62:29:3d:0e:13:49:2c: 5e:63:43:25:01:8e:ce:de:3b:e6:69:79:8f:83:08: af:d4:d3:14:1e:4d:1d:c2:bf:e6:3c:5f:30:98:22: 73:7a:a8:2f:a0:b6:86:24:32:e2:64:b5:03:db:1b: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:07:EF:5C:49:43:F9:3A:96:60:B4:29:9A:D5:B3:EF:26:0E:31:7B X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ee:e3:80:76:0e:a2:91:12:a3:02:22:d4:3d:79:2f:fa:c6: 86:10:c7:59:60:28:fb:17:39:74:2f:bb:d2:65:bb:c7:e4:81: 25:9d:5e:6d:0a:73:23:c0:d9:eb:1e:7b:1a:86:9b:c5:98:f2: ee:c4:dd:f6:09:aa:67:83:af:49:7d:2a:1e:92:e7:3b:9c:ff: 2c:9a:0b:d0:10:01:65:48:bb:58:be:0b:c7:02:7c:5c:34:a9: 1a:73:0c:77:cc:b9:cd:fd:14:95:b5:ae:84:69:18:4d:e1:60: c0:a6:10:af:64:b9:ee:e9:0e:71:03:58:70:a8:84:21:0d:09: 45:d1:6b:17:42:aa:24:41:cf:01:1a:95:b8:2a:a5:7e:76:fb: 9e:6f:b3:65:04:8c:b7:78:b9:58:7a:94:99:34:d1:61:d5:4f: 3b:4a:f9:5e:af:bb:a4:39:b1:a9:b2:0d:e4:98:ac:52:70:41: 87:03:ed:6e:f6:00:63:c6:b6:fd:87:70:78:0a:cd:c1:61:7f: 5b:55:49:60:60:f3:38:66:9d:76:90:98:e1:bb:8b:db:6b:0b: b4:19:9f:71:45:25:85:fa:0e:32:bd:ef:c1:2f:03:b4:19:c1: 3b:94:1f:ae:52:34:05:9a:09:e0:0c:b6:e2:41:06:32:06:43: b1:46:b9:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUwNzIwMTcxMTEwWhcNMjUwNzI3MTcxMTEwWjAYMRYwFAYD VQQDEw02ODdkMjMyZS1kMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzWvKtoOdSilTbK/OY6tuIaHnUA+M3EwFONc85aeqMNM3HIMG927GvzvO3vz elkwQo3VeOMEYmQeyHqLyp/ZqsNkzLs6l0r/gnZGNUvgjAK2Mtl7vp7nQ+RD3bHR yJZnI4gooJs4uylR3rQ5Qsj5LKYs+fx/dOtQV2haOJiJEvrI16602+HQjI+UH2uL RhIpB+7XCYhuqFr6pGtdB0hi0XY+JMcTsIXmijxCRbgpDyp8bMLnrwC+OTGDkjkP riNQz+OSRSHR5iqUK2IpPQ4TSSxeY0MlAY7O3jvmaXmPgwiv1NMUHk0dwr/mPF8w mCJzeqgvoLaGJDLiZLUD2xvuiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwH71xJ Q/k6lmC0KZrVs+8mDjF7MB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt7uOAdg6ikRKjAiLUPXkv+saGEMdZYCj7Fzl0L7vSZbvH5IElnV5t CnMjwNnrHnsahpvFmPLuxN32Capng69JfSoekuc7nP8smgvQEAFlSLtYvgvHAnxc NKkacwx3zLnN/RSVta6EaRhN4WDAphCvZLnu6Q5xA1hwqIQhDQlF0WsXQqokQc8B GpW4KqV+dvueb7NlBIy3eLlYepSZNNFh1U87Svler7ukObGpsg3kmKxScEGHA+1u 9gBjxrb9h3B4Cs3BYX9bVUlgYPM4Zp12kJjhu4vbawu0GZ9xRSWF+g4yve/BLwO0 GcE7lB+uUjQFmgngDLbiQQYyBkOxRrnu -----END CERTIFICATE-----Generated at Mon Jul 21 18:24:53 2025 by rpki-client