$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft File: pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json) Hash identifier: CmapTTLfzmLkqfZtPW1sSbB4Y0LKeQxoX+CvhJtXkzE= Subject key identifier: B4:0D:92:C0:2A:8D:CB:0B:35:DA:93:09:4F:C9:1B:4D:15:D8:BB:75 Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft Manifest number: 043A Signing time: Mon 21 Jul 2025 00:33:13 +0000 Manifest this update: Mon 21 Jul 2025 00:33:13 +0000 Manifest next update: Mon 28 Jul 2025 00:33:13 +0000 Files and hashes: 1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: NC10Lla8poYJR4OfCO1w+S/u2yDEgtPTmRJFm6d52QU=) 2: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: lIplJdaPasT2KYwLM0CqR2rgchRbxFw1QkPzOjcDDzQ=) 3: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: I/KKCOrgm9HCsHD4UXCBhGaL/wAB3+JEfU4a1X3HO+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Validity Not Before: Jul 21 00:33:13 2025 GMT Not After : Jul 28 00:33:13 2025 GMT Subject: CN=687d8ac9-cfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:23:8c:92:57:e8:b7:91:d5:b9:8e:36:dc: ba:12:fc:72:08:3f:e6:6a:52:8b:3f:46:96:f1:46: 15:a8:79:30:de:f0:d0:8f:64:1b:fe:a0:20:9a:bd: 08:59:8a:10:8a:df:9d:6c:a9:9b:61:f9:2f:29:42: 8c:e9:76:9e:90:3b:80:3a:47:65:83:e8:01:51:26: 88:eb:50:3a:4f:5a:86:4e:22:9f:62:26:d3:83:50: 28:34:74:46:43:3e:fc:24:89:d1:a2:03:67:37:8f: 23:82:77:84:ba:49:f5:26:90:16:54:d8:07:5b:a7: 2b:29:36:b0:a0:27:6c:c6:5a:4c:5f:2d:ba:65:0a: 12:9c:38:93:ec:56:1d:4b:ec:33:bd:66:d1:c7:ae: 3b:3d:aa:02:d9:38:76:b6:4d:c8:1d:91:0e:ba:dd: 78:94:f8:bf:a0:eb:7b:1e:c0:19:3e:22:fe:88:f1: 56:5f:7f:f4:0d:93:bb:c6:82:20:b0:78:a4:24:7a: 9f:fe:33:96:85:26:72:52:45:50:27:f1:52:88:56: 6e:f7:6c:3e:86:4e:40:ef:77:f8:a8:a8:65:22:30: 67:a4:1f:f1:b5:8d:1f:04:b6:fa:04:e1:89:c5:97: 31:02:f4:69:4e:22:eb:ad:6d:32:85:67:db:45:f7: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:92:C0:2A:8D:CB:0B:35:DA:93:09:4F:C9:1B:4D:15:D8:BB:75 X509v3 Authority Key Identifier: keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:4f:ec:85:de:04:e2:fd:35:8f:df:2f:e4:c9:2c:19:61: 4b:6f:e0:89:f2:c2:2a:89:11:c6:c8:cb:24:76:3f:66:d8:b9: 4a:c3:07:12:61:d8:e4:21:25:e9:f5:97:c8:a5:b8:d8:c0:ba: 7e:fb:01:51:be:0b:f5:3e:0e:f7:e4:38:fa:f3:22:59:1c:bd: 69:d0:aa:3b:20:75:6b:b7:26:58:98:ee:9d:bf:21:d1:42:6f: e9:63:c5:05:1d:8f:6f:76:dc:20:6d:6a:76:90:69:d0:f0:39: e4:c1:94:d1:a1:c0:6d:fe:b7:52:d5:5d:66:ee:97:79:3d:11: 0b:6a:88:d6:8d:d0:db:97:8b:93:4f:cf:f7:51:fb:0c:ac:ef: 1d:af:31:32:f3:58:4f:ea:11:58:1c:86:9e:11:b9:5a:66:fe: 36:44:16:48:dc:8d:e8:3b:f2:1a:44:90:84:af:dc:71:eb:45: a7:ae:bd:db:e5:a2:f2:f2:16:5e:c6:95:ed:05:53:0e:40:d7: af:0b:6a:c3:53:f2:d8:dd:87:5d:31:9a:e4:b1:2f:68:3a:38: f8:eb:2b:97:36:d0:92:a0:d3:0a:f8:0e:c4:ef:d0:37:dd:e1: f9:3f:49:0b:bc:fa:53:42:33:16:09:b5:4a:dd:9f:46:a7:05: 93:0a:81:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE N0E2Njg1QzYwHhcNMjUwNzIxMDAzMzEzWhcNMjUwNzI4MDAzMzEzWjAYMRYwFAYD VQQDEw02ODdkOGFjOS1jZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrgjjJJX6LeR1bmONty6EvxyCD/malKLP0aW8UYVqHkw3vDQj2Qb/qAgmr0I WYoQit+dbKmbYfkvKUKM6XaekDuAOkdlg+gBUSaI61A6T1qGTiKfYibTg1AoNHRG Qz78JInRogNnN48jgneEukn1JpAWVNgHW6crKTawoCdsxlpMXy26ZQoSnDiT7FYd S+wzvWbRx647PaoC2Th2tk3IHZEOut14lPi/oOt7HsAZPiL+iPFWX3/0DZO7xoIg sHikJHqf/jOWhSZyUkVQJ/FSiFZu92w+hk5A73f4qKhlIjBnpB/xtY0fBLb6BOGJ xZcxAvRpTiLrrW0yhWfbRfdB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQNksAq jcsLNdqTCU/JG00V2Lt1MB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4 NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzc1Qy9BQ0FDMzlCRTY4NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJC M25URFAyOXpiRnJYcG1oY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+rk/shd4E4v01j98v5MksGWFLb+CJ8sIqiRHGyMskdj9m2LlKwwcS YdjkISXp9ZfIpbjYwLp++wFRvgv1Pg735Dj68yJZHL1p0Ko7IHVrtyZYmO6dvyHR Qm/pY8UFHY9vdtwgbWp2kGnQ8DnkwZTRocBt/rdS1V1m7pd5PRELaojWjdDbl4uT T8/3UfsMrO8drzEy81hP6hFYHIaeEblaZv42RBZI3I3oO/IaRJCEr9xx60Wnrr3b 5aLy8hZexpXtBVMOQNevC2rDU/LY3YddMZrksS9oOjj46yuXNtCSoNMK+A7E79A3 3eH5P0kLvPpTQjMWCbVK3Z9GpwWTCoEe -----END CERTIFICATE-----Generated at Mon Jul 21 05:49:01 2025 by rpki-client