$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: 44ga614fFpzcFjaLvvVPHYNikF/uuWurLGcn1ZyPCoI= Subject key identifier: BF:32:CD:C7:60:9D:E0:A9:CC:92:DF:35:99:CA:B4:BD:F9:12:0E:99 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0C52 Signing time: Sun 20 Jul 2025 18:35:08 +0000 Manifest this update: Sun 20 Jul 2025 18:35:08 +0000 Manifest next update: Sun 27 Jul 2025 18:35:08 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: 6LGfYA4ifg46sasjBQPP6p/oDbFA1JYu82DRS1YkNs0=) 2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) 3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: hdydafQMMkJvIt5EBnS/YGAF8bc0IukS3bIy5kaR5Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Jul 20 18:35:08 2025 GMT Not After : Jul 27 18:35:08 2025 GMT Subject: CN=687d36dc-47a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:82:dd:af:e4:06:a8:ce:0b:23:10:68:19: eb:f9:94:07:28:6c:88:45:68:7f:62:92:7a:d4:e4: f2:39:e2:d7:91:ef:57:20:ab:a4:75:91:20:85:4f: 70:a0:e5:35:0e:e7:70:56:00:12:fe:7e:d0:1a:60: b6:88:5e:c4:3a:6c:00:45:b1:b9:01:a8:43:d3:21: 8d:01:c9:bb:af:5c:b9:ef:8f:a4:0c:00:22:64:52: a0:d2:be:15:81:97:ad:a1:2c:ec:1f:a7:5a:b9:0f: ce:3c:53:09:d4:bf:e3:b5:98:7a:f1:79:bf:c3:5e: e6:ad:90:02:63:5d:52:8a:39:f7:26:f2:b8:2b:58: 9c:f0:cf:18:b7:2f:f6:b9:a1:0f:38:5f:f1:48:15: 80:8d:e9:94:61:3c:83:b7:47:37:0d:0b:a2:26:f4: 6b:41:15:d5:ff:b8:de:f7:78:0a:e4:c1:b8:49:15: 5f:e8:33:9b:62:0b:bc:de:c0:90:aa:1c:66:8e:89: 26:ae:fe:3e:31:d9:98:37:38:63:66:eb:ff:b8:d5: d1:47:5f:e1:0c:f8:b3:ed:57:7f:86:53:0e:fd:85: ab:8f:b8:9a:f2:c9:14:fe:57:86:09:e6:03:ad:b7: 23:b0:f4:d4:89:73:e6:9c:51:c3:51:35:f0:60:60: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:CD:C7:60:9D:E0:A9:CC:92:DF:35:99:CA:B4:BD:F9:12:0E:99 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cd:4c:d3:ea:3c:c4:8d:fe:8e:65:3e:8c:f4:ae:37:09:41: 1c:64:48:4a:12:c3:95:3e:e3:82:48:a9:27:33:f1:a9:37:c3: 2a:41:00:8a:f1:18:78:a7:14:9c:17:ec:25:ac:98:15:8e:61: 9b:4d:d7:38:27:8f:ef:7c:a5:1d:d9:e8:62:21:af:b5:95:bf: 00:31:e8:05:d5:ff:4a:37:3e:a7:41:bc:12:8e:6a:f2:0c:b7: dd:c9:5a:03:3d:5e:c9:45:5c:1d:42:1a:2b:a8:c3:b0:5e:4e: c8:4c:72:56:13:ab:eb:66:38:d0:2e:ae:69:37:a2:84:4f:ba: 57:74:d7:8f:11:8e:0b:f6:9b:5b:86:f9:e7:d6:4e:b8:81:5a: 57:f6:24:50:86:4c:44:38:bb:79:12:3c:96:41:60:6f:a4:53: 5e:d1:70:ed:c0:84:1c:f2:e7:9a:75:40:fe:2e:c0:97:a0:83: bc:95:45:67:f1:2c:34:0a:62:cd:b7:2a:a5:70:f7:54:c4:6e: 0a:bf:a2:70:74:0d:93:97:14:13:ff:1a:8f:0d:46:0c:ce:15: b7:a6:91:a6:4b:16:1b:ca:c5:ce:2e:58:e1:87:52:0a:fe:9a: c1:4f:38:b2:33:86:49:86:7c:6c:cb:72:53:82:d1:d9:9a:82: 7c:f8:b8:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjUwNzIwMTgzNTA4WhcNMjUwNzI3MTgzNTA4WjAYMRYwFAYD VQQDEw02ODdkMzZkYy00N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsCC3a/kBqjOCyMQaBnr+ZQHKGyIRWh/YpJ61OTyOeLXke9XIKukdZEghU9w oOU1DudwVgAS/n7QGmC2iF7EOmwARbG5AahD0yGNAcm7r1y574+kDAAiZFKg0r4V gZetoSzsH6dauQ/OPFMJ1L/jtZh68Xm/w17mrZACY11Sijn3JvK4K1ic8M8Yty/2 uaEPOF/xSBWAjemUYTyDt0c3DQuiJvRrQRXV/7je93gK5MG4SRVf6DObYgu83sCQ qhxmjokmrv4+MdmYNzhjZuv/uNXRR1/hDPiz7Vd/hlMO/YWrj7ia8skU/leGCeYD rbcjsPTUiXPmnFHDUTXwYGBFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8yzcdg neCpzJLfNZnKtL35Eg6ZMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfzUzT6jzEjf6OZT6M9K43CUEcZEhKEsOVPuOCSKknM/GpN8MqQQCK 8Rh4pxScF+wlrJgVjmGbTdc4J4/vfKUd2ehiIa+1lb8AMegF1f9KNz6nQbwSjmry DLfdyVoDPV7JRVwdQhorqMOwXk7ITHJWE6vrZjjQLq5pN6KET7pXdNePEY4L9ptb hvnn1k64gVpX9iRQhkxEOLt5EjyWQWBvpFNe0XDtwIQc8ueadUD+LsCXoIO8lUVn 8Sw0CmLNtyqlcPdUxG4Kv6JwdA2TlxQT/xqPDUYMzhW3ppGmSxYbysXOLljhh1IK /prBTziyM4ZJhnxsy3JTgtHZmoJ8+Lgy -----END CERTIFICATE-----Generated at Mon Jul 21 13:28:59 2025 by rpki-client