$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: 0WBwdNfDeSc33+3PjNH0KDKkFIGHPnxVy9nAF6p4Z+0= Subject key identifier: C5:A2:DF:44:A0:D7:8F:4B:0A:08:4C:F9:35:A7:51:EF:C3:31:34:61 Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 3C Signing time: Sat 19 Jul 2025 07:48:29 +0000 Manifest this update: Sat 19 Jul 2025 07:48:29 +0000 Manifest next update: Sat 26 Jul 2025 07:48:29 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: Q0daTVlNY4KbFNr/u++MVAGjPo3IE2Avez1anoiUwis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Jul 19 07:48:29 2025 GMT Not After : Jul 26 07:48:29 2025 GMT Subject: CN=687b4dcd-be46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:c1:85:1f:b3:54:94:99:33:c2:55:ce:ce: ae:5d:6f:d1:8d:1c:1c:fd:10:f2:2d:da:94:d0:73: 9a:9f:8a:59:3b:da:5e:e7:63:8e:ee:10:17:3f:9d: ef:e1:f7:b4:e3:d0:03:ef:71:b2:65:8f:52:5d:dc: aa:15:ed:b5:bd:5c:03:90:11:50:3d:92:ea:1c:e8: 45:7f:52:f5:91:c4:f8:10:26:f2:d0:9c:14:d4:35: f4:d5:a9:8b:ae:20:2c:f6:f3:8f:c8:e2:89:32:50: e5:d9:9a:ed:0b:ba:2f:1d:01:38:31:96:8f:06:f3: db:6c:7e:54:44:13:0b:72:5b:83:d4:77:12:e7:e8: 36:a2:13:cf:ef:aa:70:cb:13:94:84:c4:21:99:a0: cc:c6:1a:98:f7:85:35:07:d4:be:01:cc:79:fd:50: 4d:95:e8:f4:e3:45:ed:56:17:27:54:4c:6d:3b:f4: 24:b3:f7:f6:37:b9:39:28:b4:89:58:8f:92:e3:2a: 25:e2:dc:76:d1:7b:5f:a9:ab:f5:eb:66:e0:5e:35: be:eb:5b:ba:da:1b:17:f1:ee:76:23:c9:c8:2c:5b: 5a:4c:5b:09:ac:32:86:39:82:7e:93:df:b6:e8:7d: f3:53:80:05:24:6d:ae:07:a1:0c:b6:88:5f:2e:76: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A2:DF:44:A0:D7:8F:4B:0A:08:4C:F9:35:A7:51:EF:C3:31:34:61 X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:c1:4f:e4:2f:99:fc:d1:54:b7:34:24:03:5d:4d:47:20: d8:1a:06:d8:00:36:04:97:07:f0:41:70:e7:92:49:94:e4:7f: 5d:12:f1:25:c3:6c:71:f2:a5:54:b2:88:e2:0a:24:1b:bf:a7: f7:db:02:11:65:ff:b6:7d:f4:6b:8c:29:e7:e1:24:4e:ea:ce: 70:12:c8:95:5d:67:06:3e:ab:70:d7:c6:5c:38:7b:50:2e:11: cf:6e:23:23:64:34:5e:fc:80:81:91:0c:c9:7f:dc:2d:51:af: 9e:e4:43:1e:f1:d3:c0:f2:5c:b3:57:8f:fd:26:56:f4:00:00: 12:38:5a:77:e1:70:60:c8:f0:ae:39:ab:00:77:47:c6:a2:2b: 0c:7f:f5:49:fe:bd:7e:ca:d5:c0:96:3b:b5:9c:86:7f:28:05: b6:82:c8:f9:bd:e6:04:30:cf:f0:26:18:6c:5e:65:b7:e7:d2: d4:e5:6b:fa:fa:2e:dc:02:f4:9e:90:7f:46:27:a7:0a:9b:40: 57:1c:00:af:f7:bf:82:38:a9:09:da:c9:00:f2:5e:a2:36:ba: 35:07:03:86:1e:ce:5a:d6:fb:39:56:a4:2a:a4:87:f8:3c:ea: 45:59:ec:ff:e3:41:d3:75:63:a7:d3:d1:44:91:be:30:10:41: 1f:2d:16:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA3MTkwNzQ4MjlaFw0yNTA3MjYwNzQ4MjlaMBgxFjAUBgNV BAMTDTY4N2I0ZGNkLWJlNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwXMGFH7NUlJkzwlXOzq5db9GNHBz9EPIt2pTQc5qfilk72l7nY47uEBc/ne/h 97Tj0APvcbJlj1Jd3KoV7bW9XAOQEVA9kuoc6EV/UvWRxPgQJvLQnBTUNfTVqYuu ICz284/I4okyUOXZmu0Lui8dATgxlo8G89tsflREEwtyW4PUdxLn6DaiE8/vqnDL E5SExCGZoMzGGpj3hTUH1L4BzHn9UE2V6PTjRe1WFydUTG079CSz9/Y3uTkotIlY j5LjKiXi3HbRe1+pq/XrZuBeNb7rW7raGxfx7nYjycgsW1pMWwmsMoY5gn6T37bo ffNTgAUkba4HoQy2iF8udtExAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxaLfRKDX j0sKCEz5NadR78MxNGEwHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOswU/kL5n80VS3NCQDXU1HINgaBtgANgSXB/BBcOeSSZTkf10S8SXD bHHypVSyiOIKJBu/p/fbAhFl/7Z99GuMKefhJE7qznASyJVdZwY+q3DXxlw4e1Au Ec9uIyNkNF78gIGRDMl/3C1Rr57kQx7x08DyXLNXj/0mVvQAABI4WnfhcGDI8K45 qwB3R8aiKwx/9Un+vX7K1cCWO7Wchn8oBbaCyPm95gQwz/AmGGxeZbfn0tTla/r6 LtwC9J6Qf0YnpwqbQFccAK/3v4I4qQnayQDyXqI2ujUHA4YezlrW+zlWpCqkh/g8 6kVZ7P/jQdN1Y6fT0USRvjAQQR8tFpE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:18:38 2025 by rpki-client