$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: dtL+ToSmPzbhFpAcriFxMMWeFL+RO0B3bN12nOFV9z0= Subject key identifier: 73:82:E0:5F:DF:73:48:86:5E:EF:51:0B:9F:9F:04:2C:A1:89:36:32 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 018D Signing time: Wed 23 Jul 2025 03:42:21 +0000 Manifest this update: Wed 23 Jul 2025 03:42:21 +0000 Manifest next update: Wed 30 Jul 2025 03:42:21 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: jtCe0Csa12cltAKMtQPItQDXjy6oRHc0w4dim3YxVy4=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Jul 23 03:42:21 2025 GMT Not After : Jul 30 03:42:21 2025 GMT Subject: CN=68805a1d-c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:a4:26:07:d5:20:40:dd:2d:4f:e6:04:da: 2a:0a:50:c2:c9:95:c0:a8:c6:ec:84:41:e9:87:c3: f1:aa:ca:1e:73:ac:d0:f8:2e:3d:15:bc:19:a3:a8: 75:bf:1c:d2:0c:99:de:95:4a:4e:bd:7c:89:fd:84: 6e:ef:e5:1e:22:e4:2a:85:19:86:0d:e2:a6:8a:5f: b6:39:15:62:26:41:17:8d:a6:73:0f:96:40:2f:77: 40:66:96:77:87:96:64:31:ee:38:f3:68:23:83:5a: 5d:88:66:df:d2:a1:ea:16:b8:dd:96:fe:47:0c:e6: d0:ed:f7:27:5c:ac:72:69:c1:6d:80:57:bf:69:a6: aa:d1:ef:0e:14:bb:17:ab:09:ee:c0:0f:ee:72:84: 20:a6:3a:cf:ff:68:56:59:2e:40:46:3b:9d:8d:f5: de:b5:fd:0d:54:d2:81:92:78:8c:1c:ce:cb:09:62: 69:14:af:0a:bc:46:70:c4:4d:58:62:33:d5:5c:75: 60:ee:35:1e:d6:a6:76:22:56:94:89:78:09:17:1a: 20:af:ad:2b:78:61:6d:dc:f2:05:57:f8:0e:fd:c7: 31:15:05:7b:46:0b:bf:51:8c:8d:90:49:06:d0:ed: 95:0b:6f:55:c9:0c:68:6c:88:36:96:c9:de:f4:f2: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:E0:5F:DF:73:48:86:5E:EF:51:0B:9F:9F:04:2C:A1:89:36:32 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2f:33:36:9c:51:60:6c:c3:9c:4a:9f:2f:90:3f:3f:54:91: d5:46:9f:35:c9:55:ac:67:f3:a4:53:fe:6c:7a:95:a6:5e:c8: eb:0d:79:6f:38:bd:27:a4:90:18:28:c8:6f:8e:79:79:95:96: 54:0c:86:a0:1a:7f:ca:a6:11:13:d0:7f:f1:a4:57:5e:f5:91: b7:2b:12:07:e5:86:81:67:5d:bb:2a:32:f3:52:09:9b:34:e4: 6e:1c:f3:59:47:b5:80:1f:10:5c:8a:c9:ee:59:28:ea:a4:56: 42:73:6e:1a:ed:69:44:49:2e:b9:f8:7a:fa:05:5f:0b:f3:88: 72:44:0d:76:4b:88:ef:c7:fc:7f:92:60:a1:93:c6:99:00:48: 33:7c:51:8c:38:05:e8:e3:e5:ac:6c:4b:10:ee:13:2e:ee:eb: 38:c1:40:e6:46:c9:48:62:7f:98:bc:4e:a7:04:52:6f:bd:cd: 71:ff:47:ac:c3:73:ff:41:b9:51:84:be:d5:ff:55:48:b1:83: b0:21:33:b5:27:01:0b:79:c6:77:35:82:8e:10:12:ef:05:8d: 83:1a:aa:34:54:be:4e:4b:5e:7b:5c:6c:cd:32:01:e5:59:5d: b1:0a:37:82:47:d9:d0:a0:d6:eb:5a:e1:a4:9a:ec:45:7a:93: 96:8d:31:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUwNzIzMDM0MjIxWhcNMjUwNzMwMDM0MjIxWjAYMRYwFAYD VQQDEw02ODgwNWExZC1jODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleqkJgfVIEDdLU/mBNoqClDCyZXAqMbshEHph8Pxqsoec6zQ+C49FbwZo6h1 vxzSDJnelUpOvXyJ/YRu7+UeIuQqhRmGDeKmil+2ORViJkEXjaZzD5ZAL3dAZpZ3 h5ZkMe4482gjg1pdiGbf0qHqFrjdlv5HDObQ7fcnXKxyacFtgFe/aaaq0e8OFLsX qwnuwA/ucoQgpjrP/2hWWS5ARjudjfXetf0NVNKBkniMHM7LCWJpFK8KvEZwxE1Y YjPVXHVg7jUe1qZ2IlaUiXgJFxogr60reGFt3PIFV/gO/ccxFQV7Rgu/UYyNkEkG 0O2VC29VyQxobIg2lsne9PKjswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOC4F/f c0iGXu9RC5+fBCyhiTYyMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLLzM2nFFgbMOcSp8vkD8/VJHVRp81yVWsZ/OkU/5sepWmXsjrDXlv OL0npJAYKMhvjnl5lZZUDIagGn/KphET0H/xpFde9ZG3KxIH5YaBZ127KjLzUgmb NORuHPNZR7WAHxBcisnuWSjqpFZCc24a7WlESS65+Hr6BV8L84hyRA12S4jvx/x/ kmChk8aZAEgzfFGMOAXo4+WsbEsQ7hMu7us4wUDmRslIYn+YvE6nBFJvvc1x/0es w3P/QblRhL7V/1VIsYOwITO1JwELecZ3NYKOEBLvBY2DGqo0VL5OS157XGzNMgHl WV2xCjeCR9nQoNbrWuGkmuxFepOWjTGP -----END CERTIFICATE-----Generated at Wed Jul 23 18:49:30 2025 by rpki-client