$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: yH6Q0z8EksExFbc+EvNWoQmHPa7FPgO/DkiJzF+S3Ts= Subject key identifier: 49:CA:07:8C:DF:8F:51:5C:46:CC:53:AB:8F:1F:EF:51:48:3A:57:2A Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 0418 Signing time: Sat 19 Jul 2025 00:46:52 +0000 Manifest this update: Sat 19 Jul 2025 00:46:52 +0000 Manifest next update: Sat 26 Jul 2025 00:46:52 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: P3MS1d9K3hxQDv+yLYRVXYY0IeNUdPYQWW7/r+mm5nk=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: vU7fQooVaJk/8bmjfMJwzmIcKpCJVNxNvX0SFPwtzeQ=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: GmAluyp1SMa2XHtQwLg3qsZiugrvAjRv/8qqPdWoOr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Jul 19 00:46:52 2025 GMT Not After : Jul 26 00:46:52 2025 GMT Subject: CN=687aeafc-94dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:03:3b:38:8a:b4:9b:56:5d:97:0f:44:06: 38:4c:00:6b:8a:6e:01:61:73:87:4c:6a:f9:c6:f6: fd:dd:e7:c8:b6:2d:fb:85:35:3a:45:fb:cd:10:71: 8e:15:05:bd:dc:08:ee:56:ec:91:d8:04:ab:b2:e0: 08:25:e3:38:fc:11:dc:6b:5d:d2:42:11:d9:06:96: fd:8f:df:be:65:35:e5:6e:0c:14:af:6c:57:0e:7d: 1a:6d:31:c2:e1:63:99:06:b2:85:fa:4f:2c:6e:21: 72:1d:e4:e9:ed:7c:e6:79:eb:2d:df:9b:22:40:c8: 7e:73:73:0a:b9:38:19:16:0e:6f:2e:fd:52:bf:11: f1:29:32:79:c7:fa:8f:8f:38:34:5b:3e:29:50:ba: b4:5a:f3:70:1d:b7:68:4d:4c:40:eb:f2:c6:3d:d6: 3e:c5:28:7a:ce:09:ba:5d:69:20:f0:8a:e2:df:99: 83:a0:31:a4:3a:02:60:c1:1e:cb:8e:9b:3e:be:3d: 0c:e4:bf:2d:a5:38:32:d6:f0:d0:1a:b1:bf:25:c9: 67:af:d7:88:97:df:ec:22:e6:79:cc:2d:8e:b5:2f: 02:f5:b4:6a:a6:20:81:38:68:97:cf:c0:0f:36:19: 41:c1:5e:d9:e2:2f:62:05:6f:62:78:05:9a:f7:a0: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:07:8C:DF:8F:51:5C:46:CC:53:AB:8F:1F:EF:51:48:3A:57:2A X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:82:78:3d:7e:69:b4:1b:22:37:83:7a:60:cc:91:d7:17:36: fa:f0:30:69:c1:40:81:13:dc:2a:5e:0c:ff:ca:2c:e1:c3:5e: dd:06:03:77:d6:e2:87:54:7f:0d:b8:3e:63:74:e3:af:d9:8b: 12:ea:ef:f4:50:6b:a3:2c:ce:fb:d9:70:77:bd:f3:c4:58:a3: fa:eb:4f:53:24:40:17:c9:45:0c:bb:26:f6:45:f1:bb:3a:41: 01:4f:17:26:91:0c:b0:e1:3b:a5:0f:d9:e0:b2:3a:40:63:cc: 16:71:ca:c3:ac:d3:c1:81:23:c9:fe:75:6e:f3:dc:ec:4b:8b: 90:79:f4:f7:09:f1:0e:1b:30:96:d7:77:49:d3:0a:91:06:5e: ab:30:ed:06:3b:6e:ed:45:42:5b:c1:62:71:18:48:8e:40:6e: ca:6d:d9:80:2d:75:64:07:ab:d5:1f:6c:91:24:59:49:82:ec: b8:f8:91:c0:99:a8:88:f5:a8:c3:1d:67:12:2f:14:d0:90:7a: 2e:0a:ef:0f:5f:ad:fa:b8:7c:19:9b:3b:52:2e:a9:ab:02:4f: 06:31:e2:fe:ff:a5:11:0a:9e:90:d3:1e:03:af:eb:a4:16:b5: 31:83:47:a4:31:58:62:18:90:58:14:ef:3c:3c:ed:d9:54:01: 65:22:56:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUwNzE5MDA0NjUyWhcNMjUwNzI2MDA0NjUyWjAYMRYwFAYD VQQDEw02ODdhZWFmYy05NGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKEDOziKtJtWXZcPRAY4TABrim4BYXOHTGr5xvb93efIti37hTU6RfvNEHGO FQW93AjuVuyR2ASrsuAIJeM4/BHca13SQhHZBpb9j9++ZTXlbgwUr2xXDn0abTHC 4WOZBrKF+k8sbiFyHeTp7Xzmeest35siQMh+c3MKuTgZFg5vLv1SvxHxKTJ5x/qP jzg0Wz4pULq0WvNwHbdoTUxA6/LGPdY+xSh6zgm6XWkg8Iri35mDoDGkOgJgwR7L jps+vj0M5L8tpTgy1vDQGrG/Jclnr9eIl9/sIuZ5zC2OtS8C9bRqpiCBOGiXz8AP NhlBwV7Z4i9iBW9ieAWa96AAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnKB4zf j1FcRsxTq48f71FIOlcqMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAagng9fmm0GyI3g3pgzJHXFzb68DBpwUCBE9wqXgz/yizhw17dBgN3 1uKHVH8NuD5jdOOv2YsS6u/0UGujLM772XB3vfPEWKP6609TJEAXyUUMuyb2RfG7 OkEBTxcmkQyw4TulD9ngsjpAY8wWccrDrNPBgSPJ/nVu89zsS4uQefT3CfEOGzCW 13dJ0wqRBl6rMO0GO27tRUJbwWJxGEiOQG7KbdmALXVkB6vVH2yRJFlJguy4+JHA maiI9ajDHWcSLxTQkHouCu8PX636uHwZmztSLqmrAk8GMeL+/6URCp6Q0x4Dr+uk FrUxg0ekMVhiGJBYFO88PO3ZVAFlIlZ5 -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:35 2025 by rpki-client