$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json) Hash identifier: c0f5e1JgQ6pWWycEnVyfu1NRTRd+pkLIiu/UMUE0DJY= Subject key identifier: 7C:EF:57:AA:71:03:BE:17:9C:DF:6C:D4:18:42:68:96:32:F1:52:83 Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft Manifest number: 4D Signing time: Mon 21 Jul 2025 07:31:07 +0000 Manifest this update: Mon 21 Jul 2025 07:31:07 +0000 Manifest next update: Mon 28 Jul 2025 07:31:07 +0000 Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: AWg6+uevFe8xVNEWmYjthU8g6mBzrqQuxaje6O6kGzs=) 2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: cI8Rp+uDdJ361Bt2iDuipm5XRt6w/fm/O6/Pc4tHNDU=) 3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: 3nFC6DxZ1z06WdOVtPg4zktaeI0skS0q4Fh4gKmZjzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Validity Not Before: Jul 21 07:31:07 2025 GMT Not After : Jul 28 07:31:07 2025 GMT Subject: CN=687decbb-4bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:83:aa:63:57:7d:73:aa:23:e3:7a:2c:18: 70:a4:70:95:f8:5f:02:06:76:e1:b6:6f:2b:81:41: e3:bc:ce:a8:4f:25:d8:71:a5:20:ec:62:a0:21:c9: d5:68:a3:d0:37:4c:71:21:99:73:7a:c4:2e:28:77: 69:33:f5:d5:59:12:74:2d:b6:72:b1:95:43:e4:91: f7:51:ea:ff:09:19:80:9a:09:0e:31:28:5e:8c:24: 31:56:cb:6d:5a:2e:35:ff:b9:a4:ea:6a:f1:70:77: 74:2c:47:3e:79:95:93:8b:fd:ea:59:56:d2:6e:e2: 7b:f3:d3:d8:6d:80:f4:79:e5:cc:48:b5:be:76:9f: bd:53:2a:6b:85:6e:e1:6c:c7:be:0d:81:5c:b4:42: 9f:d4:85:4d:30:61:0b:e9:ae:51:29:48:73:f8:2e: 0d:89:bf:92:61:5b:f8:ad:ad:6e:2b:0f:a0:af:09: 76:c5:41:6e:14:fe:d4:ce:9e:87:ce:ed:b7:be:9e: 64:04:4c:2a:c2:a8:16:90:c5:b1:f3:82:da:af:6a: a9:c4:21:e7:a3:1d:a5:04:ea:2b:f9:56:f0:c2:1c: b0:0a:2d:03:5e:b8:a8:95:30:1d:dc:25:e2:35:d1: c1:3c:a7:0b:d7:ed:b9:1c:ce:a3:1b:52:68:21:61: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EF:57:AA:71:03:BE:17:9C:DF:6C:D4:18:42:68:96:32:F1:52:83 X509v3 Authority Key Identifier: keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:f8:b0:ec:96:8c:e1:a5:99:58:bb:db:28:26:97:cc:96: 53:cf:9e:15:72:48:c8:62:54:9d:13:6b:61:90:51:64:42:c1: 47:1f:62:2d:3d:34:9a:7c:c4:44:8a:e9:11:1f:48:6c:6f:b6: 83:db:72:3e:8a:a9:c6:ac:6e:a6:8d:3c:a1:a8:20:00:f0:4a: fa:eb:94:f0:c5:6f:8b:27:4a:b8:8c:84:79:66:af:fe:7b:98: 5b:bc:28:12:56:8e:01:9d:d8:c8:e1:cc:9d:eb:cb:d3:92:d2: e7:f0:06:77:b1:63:d9:6c:4c:5d:4d:9a:82:2b:c2:76:fd:94: 57:19:9a:7b:48:22:4c:86:b3:58:1d:f8:7c:3d:8e:da:7e:75: 2a:4a:53:68:33:d0:2b:29:22:eb:54:22:12:17:e9:90:4d:bd: 20:75:33:94:de:51:4a:2b:f6:7e:b2:8f:d4:eb:3f:68:39:17: 24:e8:1c:46:57:02:90:e8:46:24:77:5e:4b:59:5d:67:2c:10: 2a:24:03:84:1b:64:2a:3f:a7:a3:13:67:36:ee:0c:70:f2:c4: 55:a0:d5:78:56:40:c5:ee:f8:66:23:78:c5:08:9d:43:99:db: 33:17:c5:52:22:74:28:16:40:cf:e6:ec:dd:2a:8d:ed:b9:fe: ae:71:60:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjZFODExMC8GA1UEBRMoNEMyMjEyMUFERkFFM0Y1NzUyODAxNjUxNTFDM0ZEMzBF M0FBRkQwMTAeFw0yNTA3MjEwNzMxMDdaFw0yNTA3MjgwNzMxMDdaMBgxFjAUBgNV BAMTDTY4N2RlY2JiLTRiYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDISIOqY1d9c6oj43osGHCkcJX4XwIGduG2byuBQeO8zqhPJdhxpSDsYqAhydVo o9A3THEhmXN6xC4od2kz9dVZEnQttnKxlUPkkfdR6v8JGYCaCQ4xKF6MJDFWy21a LjX/uaTqavFwd3QsRz55lZOL/epZVtJu4nvz09htgPR55cxItb52n71TKmuFbuFs x74NgVy0Qp/UhU0wYQvprlEpSHP4Lg2Jv5JhW/itrW4rD6CvCXbFQW4U/tTOnofO 7be+nmQETCrCqBaQxbHzgtqvaqnEIeejHaUE6iv5VvDCHLAKLQNeuKiVMB3cJeI1 0cE8pwvX7bkczqMbUmghYQB5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfO9XqnED vhec32zUGEJoljLxUoMwHwYDVR0jBBgwFoAUTCISGt+uP1dSgBZRUcP9MOOq/QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2NkU4L0Q4Mzg4RDM0RjNG QzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFkU2dCWlJVY1A5TU9PcV9R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENJU0d0LXVQMWRTZ0JaUlVjUDlNT09xX1FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 NkU4L0Q4Mzg4RDM0RjNGQzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFk U2dCWlJVY1A5TU9PcV9RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLv+LDslozhpZlYu9soJpfMllPPnhVySMhiVJ0Ta2GQUWRCwUcfYi09 NJp8xESK6REfSGxvtoPbcj6KqcasbqaNPKGoIADwSvrrlPDFb4snSriMhHlmr/57 mFu8KBJWjgGd2MjhzJ3ry9OS0ufwBnexY9lsTF1NmoIrwnb9lFcZmntIIkyGs1gd +Hw9jtp+dSpKU2gz0CspIutUIhIX6ZBNvSB1M5TeUUor9n6yj9TrP2g5FyToHEZX ApDoRiR3XktZXWcsECokA4QbZCo/p6MTZzbuDHDyxFWg1XhWQMXu+GYjeMUInUOZ 2zMXxVIidCgWQM/m7N0qje25/q5xYMg= -----END CERTIFICATE-----Generated at Wed Jul 23 05:37:24 2025 by rpki-client