$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: keMnOfBHBmMCjFY4rz/A/IO/Cjlu0ohSXue9eeD4EjY= Subject key identifier: 37:EE:18:AC:57:83:BE:F7:3B:55:E0:B4:C7:14:CC:F1:59:A6:3F:79 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 0722 Signing time: Tue 22 Jul 2025 22:08:16 +0000 Manifest this update: Tue 22 Jul 2025 22:08:15 +0000 Manifest next update: Tue 29 Jul 2025 22:08:15 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: VmBEJL4a+pz2/1SwUGNPW6z4SNErhtpSAsEPt1p95pE=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: COBPm0g4nlJAOhrh0hQYrpWCggmct2exc7fAFXJ645A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: Jul 22 22:08:15 2025 GMT Not After : Jul 29 22:08:15 2025 GMT Subject: CN=68800bd0-278b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:3b:32:d9:d6:5f:c1:b2:01:8c:35:ba:55: 00:5c:fc:b8:0b:43:87:aa:9a:a7:da:a6:6e:0e:08: 07:1c:06:3b:73:4e:69:a0:77:83:2a:d8:9c:5c:44: f1:94:2b:f1:d1:43:47:66:ef:03:eb:6f:1b:5a:d5: 37:91:01:1f:b0:ad:1b:81:60:57:f5:65:b2:bd:37: 22:bc:3c:7e:a2:3e:a5:db:24:73:de:17:6a:be:67: 89:64:95:e9:16:b6:a3:5d:f6:b4:7d:79:ed:e7:3b: 62:79:04:d7:1f:55:e3:47:f9:bf:b0:18:16:4a:56: 4f:17:39:f1:97:99:24:3a:51:fc:12:78:76:d7:44: f3:51:57:fa:76:28:b8:29:bc:a9:bf:15:ea:1e:c3: 97:3d:07:17:90:b2:30:85:31:df:a1:16:89:7d:70: 51:36:b6:e2:05:9f:33:4a:a4:36:d6:44:b3:c0:2d: 68:4f:b5:ae:69:33:da:3d:74:c1:9f:f7:fb:b2:76: cb:b1:74:00:27:30:1c:be:73:29:cd:56:9a:91:02: a1:a3:41:b8:d6:e9:af:4d:ee:aa:97:40:a3:6e:71: 51:15:49:44:da:5e:b0:dd:15:ff:64:b2:0a:35:6a: 05:62:88:a5:aa:67:37:6f:eb:cb:99:d6:fb:83:9b: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:18:AC:57:83:BE:F7:3B:55:E0:B4:C7:14:CC:F1:59:A6:3F:79 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:30:90:ba:d0:27:2f:e1:e2:f4:db:e5:1d:fb:60:80:e6: 2e:30:b3:d5:d9:d0:42:0d:ca:8c:38:80:fa:4a:3e:21:e9:c6: 5b:31:83:49:ca:01:ef:d9:6b:92:49:1e:a2:62:4c:d4:69:f9: 01:c3:29:38:82:89:b7:28:49:c5:de:96:27:d8:69:e1:ee:1e: b0:fb:3b:c2:c1:aa:00:41:18:a2:c9:cc:60:10:11:98:d5:54: 6b:ff:09:6c:35:6f:8e:ae:4d:ec:87:81:96:fd:7f:2f:d8:f9: e9:71:ec:c9:23:4f:9a:c1:e0:bb:0f:b5:b0:de:6a:d2:e2:a2: ee:a0:ca:cd:3a:1a:b4:e0:59:3f:0d:e9:b7:11:14:4c:e8:af: 92:a1:8a:3f:5b:67:8e:05:2d:df:1e:5f:40:7e:71:a3:1f:f0: fb:5c:ba:47:d4:68:65:53:50:36:a4:27:ce:b7:64:93:8b:44: 78:f8:41:96:30:c7:c9:b6:67:30:38:03:b5:1d:77:07:0f:c5: f2:c0:b6:13:df:63:e5:76:1c:6b:18:3c:da:b1:5e:95:11:3d: 65:42:d7:26:46:ce:66:07:af:fb:3b:91:1e:70:c7:f1:8c:67: 15:1f:86:43:bc:17:e9:ed:c6:79:27:3d:ff:1d:d9:86:b7:f8: 32:5c:e2:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUwNzIyMjIwODE1WhcNMjUwNzI5MjIwODE1WjAYMRYwFAYD VQQDEw02ODgwMGJkMC0yNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FU7MtnWX8GyAYw1ulUAXPy4C0OHqpqn2qZuDggHHAY7c05poHeDKticXETx lCvx0UNHZu8D628bWtU3kQEfsK0bgWBX9WWyvTcivDx+oj6l2yRz3hdqvmeJZJXp FrajXfa0fXnt5ztieQTXH1XjR/m/sBgWSlZPFznxl5kkOlH8Enh210TzUVf6dii4 KbypvxXqHsOXPQcXkLIwhTHfoRaJfXBRNrbiBZ8zSqQ21kSzwC1oT7WuaTPaPXTB n/f7snbLsXQAJzAcvnMpzVaakQKho0G41umvTe6ql0CjbnFRFUlE2l6w3RX/ZLIK NWoFYoilqmc3b+vLmdb7g5vC1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfuGKxX g773O1XgtMcUzPFZpj95MB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JzCQutAnL+Hi9NvlHftggOYuMLPV2dBCDcqMOID6Sj4h6cZbMYNJ ygHv2WuSSR6iYkzUafkBwyk4gom3KEnF3pYn2Gnh7h6w+zvCwaoAQRiiycxgEBGY 1VRr/wlsNW+Ork3sh4GW/X8v2PnpcezJI0+aweC7D7Ww3mrS4qLuoMrNOhq04Fk/ Dem3ERRM6K+SoYo/W2eOBS3fHl9AfnGjH/D7XLpH1GhlU1A2pCfOt2STi0R4+EGW MMfJtmcwOAO1HXcHD8XywLYT32PldhxrGDzasV6VET1lQtcmRs5mB6/7O5EecMfx jGcVH4ZDvBfp7cZ5Jz3/HdmGt/gyXOL9 -----END CERTIFICATE-----Generated at Wed Jul 23 02:31:27 2025 by rpki-client