$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft File: TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json) Hash identifier: FRxZZLF3bt/oAIRKEQrjJXOV6DbsszrkYHM75tBait0= Subject key identifier: 41:E0:F4:8B:E2:27:CC:D5:B9:C7:29:9B:75:FA:B6:F0:BE:4E:A7:A1 Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft Manifest number: 0CB2 Signing time: Fri 18 Jul 2025 18:22:09 +0000 Manifest this update: Fri 18 Jul 2025 18:22:08 +0000 Manifest next update: Fri 25 Jul 2025 18:22:08 +0000 Files and hashes: 1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: yU0GM6+ZxGTXSmJAj1QXSFYwCZ0R3kC/Ge/roEs4agk=) 2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=) 3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=) 4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Validity Not Before: Jul 18 18:22:08 2025 GMT Not After : Jul 25 18:22:08 2025 GMT Subject: CN=687a90d0-49fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:77:ed:cb:3f:cc:9a:67:9a:6d:15:44:04: 52:8e:3a:5e:56:c2:59:64:48:46:c2:32:cc:66:8d: e8:d5:53:8c:88:11:39:be:73:78:7b:f6:1f:03:0e: 36:d9:2f:38:d8:59:89:c2:63:6e:e9:c0:a9:20:32: fb:66:6f:f4:54:bd:44:d0:d3:bd:79:76:47:86:c7: 01:6d:11:44:c7:ab:af:a9:51:50:0e:3e:12:e6:d1: 7b:d7:a3:ff:9a:da:6c:4c:9f:a1:84:c5:04:e5:69: 11:8c:98:00:53:3c:e2:ac:ce:98:e6:67:d3:8d:3f: df:21:4a:9d:72:d9:be:4c:c8:d3:89:d0:b7:d0:23: 60:62:d2:f1:70:1a:59:95:48:59:ef:b2:83:7c:fa: b6:c6:61:50:57:49:1d:b8:59:d4:ae:33:35:02:9e: 15:28:86:b9:34:5e:99:9e:fe:c3:58:37:2e:ad:ed: 80:ae:98:f4:1f:5c:a5:44:a9:93:fd:e0:64:89:a7: 77:d6:44:b9:3e:c5:e7:81:ad:56:50:56:51:60:31: 01:86:1b:ec:ca:15:c8:6b:ed:b8:e5:43:69:a8:79: f7:45:74:e1:a1:c5:5d:39:9e:42:91:34:43:b4:89: fd:19:5e:08:1c:a3:82:be:b0:ed:97:db:a0:d0:91: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:F4:8B:E2:27:CC:D5:B9:C7:29:9B:75:FA:B6:F0:BE:4E:A7:A1 X509v3 Authority Key Identifier: keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:b6:41:9a:51:98:cd:b2:02:a9:a5:8b:86:a6:9b:c2:b0: 7d:c1:85:40:93:85:a6:65:e2:8d:87:42:62:f9:c3:68:5b:70: 5d:ac:b3:e0:39:c6:7d:9b:f1:ef:d0:cb:10:0a:8d:5a:f8:b3: 7c:e5:3a:73:42:86:0f:93:78:b7:ee:14:2a:d3:83:95:5d:e5: ca:6d:21:56:87:2a:93:87:f5:0f:cc:49:ff:09:16:28:37:4b: 1e:ad:71:43:a5:91:25:49:90:ba:c2:f4:a3:9b:69:98:dd:9f: 81:39:20:4b:88:2b:c6:94:56:f0:9e:ea:94:6f:cf:2b:a2:32: 1f:43:df:72:41:c0:60:20:13:db:84:63:f2:b3:8d:98:a6:62: 06:11:64:38:9a:85:a2:81:09:25:35:87:a7:79:62:69:8e:54: 18:b6:46:78:81:53:37:46:fc:05:7b:aa:65:7e:44:3e:ca:30: a6:bf:93:cd:e7:3b:48:0c:22:38:d5:b0:2a:04:ac:1d:7b:36: 0d:bc:74:7e:f9:43:c0:01:87:bc:2d:eb:8e:19:9d:df:0c:f3: 8c:bd:b8:ba:10:c2:0c:52:a7:fb:15:7f:ac:6a:ed:6d:a5:c5: 05:17:8f:60:9e:2b:93:f9:72:b2:a6:0d:ae:dd:c9:fb:03:20: 32:ad:cf:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0 M0U3RTdBREIwHhcNMjUwNzE4MTgyMjA4WhcNMjUwNzI1MTgyMjA4WjAYMRYwFAYD VQQDEw02ODdhOTBkMC00OWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0x37cs/zJpnmm0VRARSjjpeVsJZZEhGwjLMZo3o1VOMiBE5vnN4e/YfAw42 2S842FmJwmNu6cCpIDL7Zm/0VL1E0NO9eXZHhscBbRFEx6uvqVFQDj4S5tF716P/ mtpsTJ+hhMUE5WkRjJgAUzzirM6Y5mfTjT/fIUqdctm+TMjTidC30CNgYtLxcBpZ lUhZ77KDfPq2xmFQV0kduFnUrjM1Ap4VKIa5NF6Znv7DWDcure2Arpj0H1ylRKmT /eBkiad31kS5PsXnga1WUFZRYDEBhhvsyhXIa+245UNpqHn3RXThocVdOZ5CkTRD tIn9GV4IHKOCvrDtl9ug0JENTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHg9Ivi J8zVuccpm3X6tvC+TqehMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2 ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzA5NC8wMUY4RUI5MkY2ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wt cjJERGpuYVZzRHRENS1ldHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA637ZBmlGYzbICqaWLhqabwrB9wYVAk4WmZeKNh0Ji+cNoW3BdrLPg OcZ9m/Hv0MsQCo1a+LN85TpzQoYPk3i37hQq04OVXeXKbSFWhyqTh/UPzEn/CRYo N0serXFDpZElSZC6wvSjm2mY3Z+BOSBLiCvGlFbwnuqUb88rojIfQ99yQcBgIBPb hGPys42YpmIGEWQ4moWigQklNYeneWJpjlQYtkZ4gVM3RvwFe6plfkQ+yjCmv5PN 5ztIDCI41bAqBKwdezYNvHR++UPAAYe8LeuOGZ3fDPOMvbi6EMIMUqf7FX+sau1t pcUFF49gniuT+XKypg2u3cn7AyAyrc/V -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:53 2025 by rpki-client