$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: nVJ4exXPDAjpIsMU8TNG2PEbnnZ3dpatug7+hoVkIJE= Subject key identifier: 70:80:38:87:E6:00:8C:61:6E:FC:9A:10:16:CB:C1:09:8A:67:9D:B2 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34C2 Signing time: Thu 24 Jul 2025 14:30:00 +0000 Manifest this update: Thu 24 Jul 2025 14:29:59 +0000 Manifest next update: Thu 31 Jul 2025 14:29:59 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: MRVxkSvs8SFWfQ64JTCh4UN6EafZ/t7FTcODSIB5bus=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 14:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Jul 24 14:29:59 2025 GMT Not After : Jul 31 14:29:59 2025 GMT Subject: CN=68824367-a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:58:2e:ec:2f:86:e5:c5:13:da:6f:ec:14: c6:b8:b5:0b:e9:7a:16:15:e0:83:3d:71:c6:19:6f: b5:36:7d:58:65:51:52:82:96:08:e0:94:81:98:9b: 1c:5a:96:ad:82:2e:ec:44:61:20:6c:8c:7c:61:50: fa:94:86:1e:5b:c9:7e:67:af:de:07:79:ea:5e:6b: ef:b1:12:9a:80:ac:67:68:59:5e:17:a8:f7:0d:e8: e4:27:d7:e7:52:98:47:73:a7:0c:ac:54:ba:23:e8: ba:1e:7e:39:20:3e:d7:2c:7a:b0:86:65:4f:1f:a7: 7d:98:de:f1:33:63:73:12:c0:f0:44:30:d7:39:4a: 07:9b:5f:b0:19:3f:24:f4:5a:3e:a5:e0:5f:33:e4: fe:92:c7:0a:2e:02:a3:df:8d:bf:7c:bc:c4:1e:4c: 48:f4:ee:67:14:61:2e:98:9f:4b:30:4d:ca:25:ab: a2:a9:5a:9b:b9:97:e7:c5:ec:6a:36:8a:16:a6:16: 80:28:69:90:cf:1e:9c:49:01:e4:7f:8e:b5:08:1e: 08:39:54:53:7b:ca:e9:05:2b:3f:e9:d8:6f:4e:61: 2c:eb:d6:c8:c9:b6:9b:cc:d4:b7:77:f9:f7:4b:d7: fa:8a:4a:24:69:9f:93:51:36:88:58:9d:a3:0a:16: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:38:87:E6:00:8C:61:6E:FC:9A:10:16:CB:C1:09:8A:67:9D:B2 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d5:1c:18:9c:ad:09:3c:e5:24:20:ed:c1:d2:d0:74:2f:80: 30:39:f3:d9:de:bd:89:37:ad:8f:ca:37:9d:f9:a7:a6:a9:0e: 27:e0:4b:38:96:6d:43:b9:d4:3c:4a:5f:73:8d:2f:da:96:2e: cf:6a:8c:0c:82:ce:79:72:e7:b9:f9:6e:b6:32:7e:96:3e:06: fd:01:1d:63:87:6d:8f:18:94:23:eb:7c:51:3c:0e:9c:38:dc: 90:b2:b0:8f:e3:25:c8:8c:e9:dd:59:f1:ec:6f:7d:56:df:b6: 49:4b:52:dc:e3:d8:b1:7c:ed:1a:6b:a3:6d:97:8f:74:92:dc: 7c:cf:e1:b3:45:21:09:66:93:a0:7c:8a:d4:fa:0b:3c:d6:64: 36:04:5f:4f:04:0f:e9:d0:11:22:b5:e6:d0:35:a0:b2:9f:b4: 77:a7:56:dc:1b:ea:b6:39:4d:65:c9:5f:10:f7:53:5e:b9:cd: 41:d8:aa:bf:31:89:b0:57:44:aa:ce:88:e6:5c:9c:9b:39:92: 26:e8:30:11:65:e7:aa:93:a8:8c:a7:06:93:77:a3:2e:31:f6: 05:74:c2:80:29:3a:3c:3e:30:8b:f3:ec:eb:79:e7:08:c8:e7: 5a:46:8e:a8:66:e2:5e:a8:27:d0:23:33:20:87:5c:69:90:a7: ba:1b:78:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwNzI0MTQyOTU5WhcNMjUwNzMxMTQyOTU5WjAYMRYwFAYD VQQDEw02ODgyNDM2Ny1hMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreBYLuwvhuXFE9pv7BTGuLUL6XoWFeCDPXHGGW+1Nn1YZVFSgpYI4JSBmJsc Wpatgi7sRGEgbIx8YVD6lIYeW8l+Z6/eB3nqXmvvsRKagKxnaFleF6j3DejkJ9fn UphHc6cMrFS6I+i6Hn45ID7XLHqwhmVPH6d9mN7xM2NzEsDwRDDXOUoHm1+wGT8k 9Fo+peBfM+T+kscKLgKj342/fLzEHkxI9O5nFGEumJ9LME3KJauiqVqbuZfnxexq NooWphaAKGmQzx6cSQHkf461CB4IOVRTe8rpBSs/6dhvTmEs69bIybabzNS3d/n3 S9f6ikokaZ+TUTaIWJ2jChaUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCAOIfm AIxhbvyaEBbLwQmKZ52yMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA91RwYnK0JPOUkIO3B0tB0L4AwOfPZ3r2JN62Pyjed+aemqQ4n4Es4 lm1DudQ8Sl9zjS/ali7PaowMgs55cue5+W62Mn6WPgb9AR1jh22PGJQj63xRPA6c ONyQsrCP4yXIjOndWfHsb31W37ZJS1Lc49ixfO0aa6Ntl490ktx8z+GzRSEJZpOg fIrU+gs81mQ2BF9PBA/p0BEitebQNaCyn7R3p1bcG+q2OU1lyV8Q91Neuc1B2Kq/ MYmwV0SqzojmXJybOZIm6DARZeeqk6iMpwaTd6MuMfYFdMKAKTo8PjCL8+zreecI yOdaRo6oZuJeqCfQIzMgh1xpkKe6G3j4 -----END CERTIFICATE-----Generated at Thu Jul 24 21:21:45 2025 by rpki-client