$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: JA3zgTJHsQ16VQM3HEPftUt5r8cmakjjQAZG/+QKD0E= Subject key identifier: 46:85:C9:86:4B:DF:43:55:05:27:D1:67:F4:66:95:44:73:AB:22:DC Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A81 Signing time: Mon 28 Jul 2025 20:00:23 +0000 Manifest this update: Mon 28 Jul 2025 20:00:23 +0000 Manifest next update: Mon 04 Aug 2025 20:00:23 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: F/e2E125KrxD4CsYYfoZGgBzks9DJUzSFvR5VctXzjw=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Jul 28 20:00:23 2025 GMT Not After : Aug 4 20:00:23 2025 GMT Subject: CN=6887d6d7-13f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:f3:43:11:69:ab:c1:f8:b9:1a:17:5c:d6: b0:09:dd:a9:c7:2e:72:76:31:68:7b:26:63:25:48: 56:af:90:11:49:52:f5:74:ac:96:81:15:5d:20:e0: 36:bb:41:e4:95:12:f3:c1:69:83:91:87:66:e7:43: 8c:f3:db:90:e9:dd:c5:2d:98:2a:84:b1:ff:67:31: c7:4c:09:7c:fd:26:0f:d7:00:44:45:2f:8a:89:0c: 4a:9e:7e:c2:95:67:16:49:7d:3b:35:59:05:01:b3: e1:3e:2d:27:c5:86:42:f7:eb:9f:54:69:22:ba:c3: 26:67:77:5b:da:9f:74:7d:35:94:b5:15:06:b0:fa: ab:0e:40:86:17:fd:df:9c:53:41:dc:d9:7a:a7:9b: 35:00:01:98:64:0a:40:0e:6a:a5:df:cf:e7:b5:cc: 85:e0:9f:43:71:65:13:29:8f:0e:d9:97:0e:06:20: 7c:bd:40:d0:70:2a:36:f1:44:2b:46:85:7e:57:27: 15:68:7a:24:71:e4:72:71:af:24:9a:e8:e3:85:6e: 9e:50:f7:da:7b:c7:b9:30:3d:a8:3f:90:c3:e3:c6: 96:10:bd:f5:70:99:2a:66:f3:01:03:3c:d0:81:24: e7:9e:91:71:ab:99:0a:c2:01:af:fe:e9:b1:d9:50: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:C9:86:4B:DF:43:55:05:27:D1:67:F4:66:95:44:73:AB:22:DC X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a5:c5:3f:71:5f:bf:fa:64:5c:8e:90:ed:d2:3a:80:1c:d7: 4f:c6:ee:4b:95:10:f8:1b:98:8c:e2:63:48:59:a9:16:84:06: 33:60:ec:a3:49:52:58:ef:f2:4a:b6:4c:30:3c:a3:45:b7:67: da:3e:d6:bf:96:94:f6:ff:d0:fc:57:46:fc:81:bb:c4:17:67: ce:45:a2:13:86:49:0f:22:4d:0f:39:02:94:b7:0b:19:c6:06: b6:fb:33:82:54:50:91:14:ba:16:41:c1:07:4d:d3:57:a2:06: 80:c4:b2:45:81:c0:f7:d0:17:ee:00:6d:30:42:80:0f:cd:75: f7:bd:24:33:8b:b5:5a:04:5c:96:7c:76:79:34:93:dd:9c:b5: 89:70:d1:26:49:a3:56:40:5e:ca:19:e3:cc:6a:86:7c:49:d4: 77:f4:92:21:98:63:d5:a7:2d:d1:35:71:b0:53:e0:45:e2:05: 86:7d:b7:ff:7d:70:d5:3e:b2:e9:69:42:d4:f9:0d:95:77:6e: e4:08:ea:3c:2d:a8:22:f4:bf:a8:f8:9f:59:e8:e1:35:66:76: 21:01:b3:57:e9:33:12:b6:bd:99:4e:da:60:f4:8d:c4:91:5d: d9:2a:11:7f:10:d1:17:dc:cc:6f:f3:05:f2:99:5f:2c:a5:e8: 75:00:0f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUwNzI4MjAwMDIzWhcNMjUwODA0MjAwMDIzWjAYMRYwFAYD VQQDEw02ODg3ZDZkNy0xM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vjzQxFpq8H4uRoXXNawCd2pxy5ydjFoeyZjJUhWr5ARSVL1dKyWgRVdIOA2 u0HklRLzwWmDkYdm50OM89uQ6d3FLZgqhLH/ZzHHTAl8/SYP1wBERS+KiQxKnn7C lWcWSX07NVkFAbPhPi0nxYZC9+ufVGkiusMmZ3db2p90fTWUtRUGsPqrDkCGF/3f nFNB3Nl6p5s1AAGYZApADmql38/ntcyF4J9DcWUTKY8O2ZcOBiB8vUDQcCo28UQr RoV+VycVaHokceRyca8kmujjhW6eUPfae8e5MD2oP5DD48aWEL31cJkqZvMBAzzQ gSTnnpFxq5kKwgGv/umx2VBuqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaFyYZL 30NVBSfRZ/RmlURzqyLcMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvpcU/cV+/+mRcjpDt0jqAHNdPxu5LlRD4G5iM4mNIWakWhAYzYOyj SVJY7/JKtkwwPKNFt2faPta/lpT2/9D8V0b8gbvEF2fORaIThkkPIk0POQKUtwsZ xga2+zOCVFCRFLoWQcEHTdNXogaAxLJFgcD30BfuAG0wQoAPzXX3vSQzi7VaBFyW fHZ5NJPdnLWJcNEmSaNWQF7KGePMaoZ8SdR39JIhmGPVpy3RNXGwU+BF4gWGfbf/ fXDVPrLpaULU+Q2Vd27kCOo8Lagi9L+o+J9Z6OE1ZnYhAbNX6TMStr2ZTtpg9I3E kV3ZKhF/ENEX3Mxv8wXymV8speh1AA8a -----END CERTIFICATE-----Generated at Wed Jul 30 08:10:07 2025 by rpki-client