$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: Zmz+Ec9o60DYiZhWriFNiEqBoq+LJMckR01IyGrpZv8= Subject key identifier: 0E:05:7F:B3:7E:77:34:85:A2:90:0C:82:1B:B7:2D:51:9D:BE:E5:7B Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0B7A Signing time: Sun 20 Jul 2025 19:07:31 +0000 Manifest this update: Sun 20 Jul 2025 19:07:30 +0000 Manifest next update: Sun 27 Jul 2025 19:07:30 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: GgwKciyswK+S/GZYMncvLAYjo6gvAFo1da0pSdd4P1k=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: ACheYQYEXBleb6DdPHzkUhEDmzrchulLT+Neb0c5vYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: Jul 20 19:07:30 2025 GMT Not After : Jul 27 19:07:30 2025 GMT Subject: CN=687d3e72-b401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:a4:a5:e7:a2:33:28:46:00:53:2b:ab:1b: 47:94:69:15:83:f7:c9:16:fb:0c:8a:28:5b:bd:d9: a3:1d:37:97:b0:9e:9b:28:8a:17:f4:93:59:69:ac: 11:7c:94:e2:43:0b:ef:f6:60:2c:f4:0a:36:5c:34: 07:38:69:8a:aa:27:fb:a6:a5:c2:cc:8c:32:3c:69: b6:59:48:c4:89:bf:fb:51:36:4d:97:39:49:4f:9d: db:5e:7e:8a:7e:98:0d:ea:7f:e1:73:4a:3e:0d:0a: e6:7b:16:fb:38:e8:61:4e:86:a1:30:9d:7e:32:03: c3:fd:90:93:dd:0f:15:96:8f:b9:8d:1d:cb:9f:a8: c7:2e:4f:e9:2e:88:2f:ce:e7:54:95:b3:65:51:9f: 00:01:75:bd:58:83:9d:73:3d:52:51:97:c5:86:51: 67:fe:c3:20:b9:13:2d:b6:8a:dc:15:28:c7:de:a8: f2:c0:5c:4c:c5:a5:16:f0:81:4e:e5:74:e9:2e:df: 31:92:31:cd:31:05:1f:31:8a:e1:7b:3d:c3:aa:39: 0f:fd:8b:27:ad:01:90:53:a1:47:43:07:e6:d5:f0: 03:e3:c5:82:e8:46:93:3a:c3:22:33:31:e7:ae:6d: fc:20:89:81:17:09:d1:46:4d:68:81:cd:af:21:d1: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:7F:B3:7E:77:34:85:A2:90:0C:82:1B:B7:2D:51:9D:BE:E5:7B X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f8:0d:b3:0d:8a:9e:af:d0:67:cd:39:21:6d:db:81:10:6c: 3d:03:e3:50:ba:40:94:a8:a7:cc:c3:62:b0:0f:91:f3:84:d5: 6c:9b:6e:71:9d:ea:e6:7f:ee:6b:e8:d6:e2:d7:b7:23:1b:a6: 9d:c1:3e:ae:ae:e8:16:b9:93:35:59:f7:51:be:5d:58:f9:61: 3e:08:51:0d:e6:9e:e2:14:42:97:5b:5e:13:7a:5c:5b:43:3b: 37:04:19:92:88:08:cb:91:6c:35:f1:ea:d4:82:81:a7:d9:b6: 9c:b6:7a:3b:39:ff:17:a3:d2:4a:88:b8:bf:dc:57:0f:f0:bf: 34:91:f9:9e:67:81:d3:e1:6e:a5:5e:33:e0:00:0d:a5:c0:22: b9:4a:95:a8:68:79:b1:cf:03:db:d2:c9:1e:c9:31:56:35:d2: 50:45:e1:9b:51:d3:53:df:c2:b3:0a:11:cc:a6:90:ac:a8:76: 5f:f0:65:24:27:d2:a6:6d:8a:b6:90:1b:b8:73:62:19:a7:85: 4e:3c:fa:c8:aa:26:21:43:d3:06:62:a4:69:b8:01:14:3e:64: 24:99:a4:48:52:5b:3a:87:14:e0:27:23:b6:a5:a8:35:2f:19: d0:60:62:88:59:78:95:11:ba:25:9a:b0:30:6b:49:45:1c:20: 58:03:82:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUwNzIwMTkwNzMwWhcNMjUwNzI3MTkwNzMwWjAYMRYwFAYD VQQDEw02ODdkM2U3Mi1iNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZWkpeeiMyhGAFMrqxtHlGkVg/fJFvsMiihbvdmjHTeXsJ6bKIoX9JNZaawR fJTiQwvv9mAs9Ao2XDQHOGmKqif7pqXCzIwyPGm2WUjEib/7UTZNlzlJT53bXn6K fpgN6n/hc0o+DQrmexb7OOhhToahMJ1+MgPD/ZCT3Q8Vlo+5jR3Ln6jHLk/pLogv zudUlbNlUZ8AAXW9WIOdcz1SUZfFhlFn/sMguRMttorcFSjH3qjywFxMxaUW8IFO 5XTpLt8xkjHNMQUfMYrhez3DqjkP/YsnrQGQU6FHQwfm1fAD48WC6EaTOsMiMzHn rm38IImBFwnRRk1ogc2vIdGaAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Ff7N+ dzSFopAMghu3LVGdvuV7MB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7+A2zDYqer9BnzTkhbduBEGw9A+NQukCUqKfMw2KwD5HzhNVsm25x nermf+5r6Nbi17cjG6adwT6urugWuZM1WfdRvl1Y+WE+CFEN5p7iFEKXW14Telxb Qzs3BBmSiAjLkWw18erUgoGn2bactno7Of8Xo9JKiLi/3FcP8L80kfmeZ4HT4W6l XjPgAA2lwCK5SpWoaHmxzwPb0skeyTFWNdJQReGbUdNT38KzChHMppCsqHZf8GUk J9KmbYq2kBu4c2IZp4VOPPrIqiYhQ9MGYqRpuAEUPmQkmaRIUls6hxTgJyO2pag1 LxnQYGKIWXiVEbolmrAwa0lFHCBYA4IA -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:23 2025 by rpki-client