$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: zfb62UuEeCWVBoo6a0qgaFc7kl8h5fBWhH3hluw0JI0= Subject key identifier: 7B:36:08:BB:A3:94:4C:E4:DB:B2:0A:F7:3F:23:3F:97:12:68:7D:9E Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 10BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0E8B Signing time: Sun 20 Jul 2025 19:07:43 +0000 Manifest this update: Sun 20 Jul 2025 19:07:42 +0000 Manifest next update: Sun 27 Jul 2025 19:07:42 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: yyaiVwXlz+sQ9zvMBJ49VFAu5h87BwZjeoQlmstVsKc=) 2: 8F1E3424322B11F0818ACD4FC4F9AE02.roa (hash: 875ctWs61hW92U/6MHYrD0EAePq8VUuVwyuiFfbj3aE=) 3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 5: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4287 (0x10bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Jul 20 19:07:42 2025 GMT Not After : Jul 27 19:07:42 2025 GMT Subject: CN=687d3e7f-6b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:ae:4b:48:fe:19:01:29:4c:6b:12:32:2b: e4:1d:8f:be:41:01:6f:4c:58:83:9c:bb:59:68:df: 8b:f4:7b:38:1b:cc:e0:f5:4a:1e:b0:57:ac:d1:b3: ed:50:97:e0:2f:f8:1a:57:25:16:5e:d1:d4:49:ad: b4:12:2a:81:34:ac:7f:02:cd:a8:38:78:14:87:d0: 51:bc:1c:7b:23:9e:72:1f:24:07:d7:69:e0:2e:14: 68:85:d8:63:8f:6b:e4:0b:4f:b1:d8:6e:8d:94:d8: 90:13:71:2c:a3:4e:34:a4:a9:7b:47:be:6d:5b:6c: 5e:4b:fb:55:69:60:1e:80:63:ee:ef:65:97:44:21: a7:f7:3f:6a:77:66:69:38:9c:46:18:db:ff:d7:7e: ee:3d:ef:96:6e:51:5c:d7:87:39:a6:61:fb:3a:0c: 58:64:60:c0:3b:f9:3a:9d:e9:51:c0:6d:9e:a1:39: 61:3a:5b:98:f5:62:ba:cd:49:26:b6:24:2e:84:da: 59:f5:4c:75:c4:bf:6d:2c:6e:8b:7a:a7:4b:2e:a5: cf:0c:d2:16:ba:62:3f:eb:15:f7:85:2a:f1:67:54: 62:ba:3b:90:58:e0:d3:4e:86:48:7d:81:b8:68:97: 3a:4e:6f:40:bb:ce:9f:07:52:0e:ad:7d:99:08:44: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:36:08:BB:A3:94:4C:E4:DB:B2:0A:F7:3F:23:3F:97:12:68:7D:9E X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:f3:b3:c2:a8:ed:48:8f:e2:b8:5c:f5:38:1d:d4:0b:09: 61:fd:7c:59:d9:2a:c9:f3:6b:c0:f4:be:9a:d0:1e:26:a5:9e: 31:54:a5:e2:a8:b0:64:e4:bf:00:a4:65:b7:29:b9:46:eb:7c: ce:64:c9:cb:b0:08:94:c5:9b:18:1b:8a:d9:8a:ef:17:73:8f: 1a:9b:1a:c1:90:df:f9:f4:6f:f0:04:0a:6f:c0:2f:0f:ed:8d: e9:c4:e7:35:3d:a1:2b:ef:42:d9:6d:61:ad:a5:a3:9e:32:a4: 82:53:a0:45:25:f3:1d:4b:8d:11:01:69:51:9a:d4:21:55:b2: 83:74:29:40:f6:46:59:6f:a4:5a:36:66:f9:73:35:35:77:68: 19:20:79:f2:e8:6b:b2:a2:82:f0:94:18:0f:e9:80:d4:38:74: 89:3b:65:f0:7c:ba:5a:5a:95:a4:32:3f:de:9b:99:cb:79:5c: 33:12:46:57:e9:09:27:5c:f3:9f:b7:d4:fa:84:68:3b:72:17: 42:53:89:30:0a:f1:fc:9d:b6:cf:a1:5e:44:eb:ae:3e:ef:20: 52:64:40:35:e2:09:e4:52:2b:65:41:47:38:4b:1e:ce:f0:23: 28:6a:66:32:e0:61:30:95:d8:b1:bd:4c:1d:c0:c0:13:29:d1: 45:f2:0f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUwNzIwMTkwNzQyWhcNMjUwNzI3MTkwNzQyWjAYMRYwFAYD VQQDEw02ODdkM2U3Zi02Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNSuS0j+GQEpTGsSMivkHY++QQFvTFiDnLtZaN+L9Hs4G8zg9UoesFes0bPt UJfgL/gaVyUWXtHUSa20EiqBNKx/As2oOHgUh9BRvBx7I55yHyQH12ngLhRohdhj j2vkC0+x2G6NlNiQE3Eso040pKl7R75tW2xeS/tVaWAegGPu72WXRCGn9z9qd2Zp OJxGGNv/137uPe+WblFc14c5pmH7OgxYZGDAO/k6nelRwG2eoTlhOluY9WK6zUkm tiQuhNpZ9Ux1xL9tLG6LeqdLLqXPDNIWumI/6xX3hSrxZ1RiujuQWODTToZIfYG4 aJc6Tm9Au86fB1IOrX2ZCERkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs2CLuj lEzk27IK9z8jP5cSaH2eMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/YPOzwqjtSI/iuFz1OB3UCwlh/XxZ2SrJ82vA9L6a0B4mpZ4xVKXi qLBk5L8ApGW3KblG63zOZMnLsAiUxZsYG4rZiu8Xc48amxrBkN/59G/wBApvwC8P 7Y3pxOc1PaEr70LZbWGtpaOeMqSCU6BFJfMdS40RAWlRmtQhVbKDdClA9kZZb6Ra Nmb5czU1d2gZIHny6GuyooLwlBgP6YDUOHSJO2XwfLpaWpWkMj/em5nLeVwzEkZX 6QknXPOft9T6hGg7chdCU4kwCvH8nbbPoV5E664+7yBSZEA14gnkUitlQUc4Sx7O 8CMoamYy4GEwldixvUwdwMATKdFF8g9B -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:42 2025 by rpki-client