$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: Yc3IXDGBhLU3gHUDsm9qhlgPBFiOQAj9OKusvu0Nvis= Subject key identifier: 5E:E8:86:A5:2B:B4:43:BC:63:69:50:26:40:91:AF:A0:C8:25:23:12 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: BB Signing time: Sat 19 Jul 2025 06:07:30 +0000 Manifest this update: Sat 19 Jul 2025 06:07:29 +0000 Manifest next update: Sat 26 Jul 2025 06:07:29 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: OBhjSzRd4FMmPA18qX+mYZE6jUiKSvKmTID/ZGkSMmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Jul 19 06:07:29 2025 GMT Not After : Jul 26 06:07:29 2025 GMT Subject: CN=687b3622-6acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:39:2c:be:26:b2:e7:e9:3f:19:85:c9:95: 5a:00:63:3e:ef:43:ae:af:ee:d9:fb:a4:e3:f4:39: 60:5c:ab:07:35:18:0b:f7:8e:03:a9:47:c2:50:bc: 7d:e6:ad:7b:d1:2f:d3:67:1a:86:be:6d:43:04:f7: 85:cd:26:52:96:91:43:23:94:64:42:f4:2f:44:86: ab:89:32:d0:62:5e:3c:32:1e:3a:42:6c:93:ba:dd: 51:4b:00:06:b5:c1:e0:10:76:ea:70:d7:61:50:5a: 6f:6b:95:43:a8:a7:05:44:d0:68:46:ad:a6:70:93: c9:ee:dd:fb:35:1b:70:e1:dc:ac:7c:1f:0d:ab:ba: e6:0f:7e:56:98:8f:15:e5:af:64:5e:4c:b9:92:76: 79:fa:59:37:07:66:c1:98:04:61:ea:75:a7:48:53: 36:bd:56:8b:a0:cf:f8:e5:2f:d8:74:e0:ee:60:96: 3f:ba:3d:47:d7:81:e5:c2:28:60:83:c4:3a:0b:25: a4:fc:02:9b:65:df:5b:59:35:6f:02:ec:16:43:09: 30:89:9b:bb:9c:6a:71:31:c4:44:4e:d4:68:c9:87: 1c:57:02:e0:7a:e9:41:f2:1b:66:7f:6d:6d:09:48: 78:3a:94:d7:3e:43:89:b7:66:69:64:16:70:55:3e: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E8:86:A5:2B:B4:43:BC:63:69:50:26:40:91:AF:A0:C8:25:23:12 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:34:3a:cd:1e:1b:34:ab:1c:33:af:1b:a7:9c:14:9e:c6:d5: aa:15:af:69:a0:2e:1e:e4:01:51:fb:d1:26:12:c9:53:2f:69: 08:c6:28:0d:e4:57:e5:d2:30:52:e5:0d:44:53:fe:3a:60:ac: 4b:d5:b8:02:57:c7:75:cf:38:1a:c1:08:7d:de:68:a9:51:54: 96:3b:91:6a:10:c1:c2:ca:58:24:53:43:f2:82:fd:10:1b:91: 8c:06:bf:0c:4e:ff:2e:39:dc:7c:93:88:86:14:47:66:26:78: 8d:f3:68:ec:e2:71:3b:a1:1c:a3:c8:db:a2:29:4f:93:3c:05: 7b:20:8f:7e:24:3b:a7:30:c6:de:06:ed:4f:3e:ec:45:cc:e4: 8a:9d:1e:9b:06:e2:6b:34:5f:27:95:45:60:eb:e3:8c:4f:58: 27:3b:c8:d8:25:07:57:82:35:a2:90:5b:29:b6:c9:34:08:54: f3:ab:25:ab:7a:a8:75:60:06:27:1b:2a:7d:f4:c8:59:95:7a: d5:b0:58:72:1a:fc:a2:a4:fe:bd:0b:d6:35:7d:9d:35:98:69: 6b:30:12:bd:bf:5a:d1:33:ba:04:a5:1f:c2:af:7d:fe:ec:13: c7:21:27:a8:7d:80:c4:1c:fb:80:c2:0e:89:e3:e5:1e:f3:75: cd:63:25:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUwNzE5MDYwNzI5WhcNMjUwNzI2MDYwNzI5WjAYMRYwFAYD VQQDEw02ODdiMzYyMi02YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gs5LL4msufpPxmFyZVaAGM+70Our+7Z+6Tj9DlgXKsHNRgL944DqUfCULx9 5q170S/TZxqGvm1DBPeFzSZSlpFDI5RkQvQvRIariTLQYl48Mh46QmyTut1RSwAG tcHgEHbqcNdhUFpva5VDqKcFRNBoRq2mcJPJ7t37NRtw4dysfB8Nq7rmD35WmI8V 5a9kXky5knZ5+lk3B2bBmARh6nWnSFM2vVaLoM/45S/YdODuYJY/uj1H14Hlwihg g8Q6CyWk/AKbZd9bWTVvAuwWQwkwiZu7nGpxMcRETtRoyYccVwLgeulB8htmf21t CUh4OpTXPkOJt2ZpZBZwVT6RjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7ohqUr tEO8Y2lQJkCRr6DIJSMSMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdNDrNHhs0qxwzrxunnBSextWqFa9poC4e5AFR+9EmEslTL2kIxigN 5Ffl0jBS5Q1EU/46YKxL1bgCV8d1zzgawQh93mipUVSWO5FqEMHCylgkU0Pygv0Q G5GMBr8MTv8uOdx8k4iGFEdmJniN82js4nE7oRyjyNuiKU+TPAV7II9+JDunMMbe Bu1PPuxFzOSKnR6bBuJrNF8nlUVg6+OMT1gnO8jYJQdXgjWikFsptsk0CFTzqyWr eqh1YAYnGyp99MhZlXrVsFhyGvyipP69C9Y1fZ01mGlrMBK9v1rRM7oEpR/Cr33+ 7BPHISeofYDEHPuAwg6J4+Ue83XNYyXo -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:13 2025 by rpki-client