$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json) Hash identifier: l2L+1L/dUOFJvSBs8oz2kasuyJbu9qTF1KcDWUDGaXE= Subject key identifier: 24:7D:79:F7:0C:6F:54:1F:FC:A2:D7:48:A9:59:91:82:71:E8:3A:5E Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft Manifest number: 0736 Signing time: Fri 18 Jul 2025 22:02:21 +0000 Manifest this update: Fri 18 Jul 2025 22:02:21 +0000 Manifest next update: Fri 25 Jul 2025 22:02:21 +0000 Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: 1LEf7Nb2vNhykwbwU49M+iKv6w3feA4Ds9uE8uwFyBk=) 2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: xmCa0S6gH7UT6IXBmoA13nKDzBCa881kyZEoIomnGCw=) 3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: UDmf7YDCi7nUXuyz+EQ/ianBiDIEB+Xhn6jTOtoUZ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: Jul 18 22:02:21 2025 GMT Not After : Jul 25 22:02:21 2025 GMT Subject: CN=687ac46d-e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:78:92:a7:8f:e2:1b:db:51:30:0d:fd:14: 5c:e3:87:67:95:bf:e0:22:4e:c0:15:99:c2:53:bd: 1c:34:93:ed:ba:25:26:02:c6:6f:ce:e1:00:ec:5b: 9d:12:71:ec:69:90:83:41:03:25:88:2f:34:ff:99: 20:2c:be:fb:48:05:68:5e:ef:11:2b:d5:be:26:c1: a5:31:8a:14:8c:47:f6:93:1e:6a:0b:93:c5:d6:10: af:a8:7d:ff:bc:14:69:1a:f9:eb:d4:a3:37:b7:7e: 2c:5f:e5:8a:41:09:bd:61:ad:6a:a8:38:e6:21:ad: 2d:6d:e1:b3:fd:82:31:29:21:10:e5:c7:6c:c7:dd: 62:9e:17:8c:ba:b1:0d:ff:38:9b:04:ff:e3:ec:aa: dd:52:4e:82:40:ff:be:c0:bc:2b:5d:9f:48:1a:0c: b7:12:74:8c:51:ce:3f:57:ed:31:74:fb:c4:c8:ec: 6b:c2:0b:fd:c9:e0:2f:22:bd:b7:fb:d8:eb:a1:17: 41:d3:7a:b3:f0:e7:b7:6f:fa:a4:85:d2:d3:27:2a: bf:85:3e:d3:71:63:e7:3e:ce:9e:11:b6:cb:8e:5d: a4:7d:48:c6:20:51:5d:05:47:f7:3f:90:e0:6e:f6: 0e:48:c0:3e:be:b8:87:9a:42:ad:9e:7a:82:a7:a5: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:79:F7:0C:6F:54:1F:FC:A2:D7:48:A9:59:91:82:71:E8:3A:5E X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:aa:d4:92:16:9f:5e:17:56:7b:f0:96:4f:15:b5:3d:f1: 50:05:36:17:ea:50:9b:7f:ec:5c:cd:9d:75:d1:7f:3d:54:2f: 24:d6:4d:51:07:46:15:92:c2:6d:a6:c7:c1:5e:7d:33:33:28: db:9f:26:65:1a:64:29:90:fa:11:0f:fc:45:62:3c:b7:71:f1: 9f:d3:1d:2f:70:56:21:fd:b9:f8:57:4b:48:fc:dc:a7:50:da: 48:d3:b2:cc:d4:b9:5a:4b:52:43:a5:da:05:81:24:ae:39:3b: 0e:d1:0b:49:12:c8:5e:4c:54:49:28:d1:28:4f:af:5d:72:8c: 7b:3f:9f:b6:1a:1f:18:cd:9f:b2:d0:84:b8:98:90:bb:b4:09: b2:91:21:e7:80:6e:a3:4c:70:4f:57:5c:01:3b:88:92:4e:80: b0:9c:ac:49:a7:f7:cc:35:51:a9:67:ef:08:69:ab:b6:6c:45: c1:34:a6:d4:1d:10:82:7a:98:92:6a:d9:e3:5d:1f:aa:cb:19: 9a:0a:ae:3b:6f:a2:47:72:14:17:18:5a:31:62:bf:d4:69:65: 9e:45:da:3e:d0:a0:ba:76:45:dd:5e:ab:32:6c:c3:24:a3:c4: 55:f9:10:a8:ea:1c:b0:0a:eb:32:6a:86:93:b4:4c:ae:a8:b0: 81:13:69:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjUwNzE4MjIwMjIxWhcNMjUwNzI1MjIwMjIxWjAYMRYwFAYD VQQDEw02ODdhYzQ2ZC1lMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjt4kqeP4hvbUTAN/RRc44dnlb/gIk7AFZnCU70cNJPtuiUmAsZvzuEA7Fud EnHsaZCDQQMliC80/5kgLL77SAVoXu8RK9W+JsGlMYoUjEf2kx5qC5PF1hCvqH3/ vBRpGvnr1KM3t34sX+WKQQm9Ya1qqDjmIa0tbeGz/YIxKSEQ5cdsx91inheMurEN /zibBP/j7KrdUk6CQP++wLwrXZ9IGgy3EnSMUc4/V+0xdPvEyOxrwgv9yeAvIr23 +9jroRdB03qz8Oe3b/qkhdLTJyq/hT7TcWPnPs6eEbbLjl2kfUjGIFFdBUf3P5Dg bvYOSMA+vriHmkKtnnqCp6WdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR9efcM b1Qf/KLXSKlZkYJx6DpeMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5N6rUkhafXhdWe/CWTxW1PfFQBTYX6lCbf+xczZ110X89VC8k1k1R B0YVksJtpsfBXn0zMyjbnyZlGmQpkPoRD/xFYjy3cfGf0x0vcFYh/bn4V0tI/Nyn UNpI07LM1LlaS1JDpdoFgSSuOTsO0QtJEsheTFRJKNEoT69dcox7P5+2Gh8YzZ+y 0IS4mJC7tAmykSHngG6jTHBPV1wBO4iSToCwnKxJp/fMNVGpZ+8Iaau2bEXBNKbU HRCCepiSatnjXR+qyxmaCq47b6JHchQXGFoxYr/UaWWeRdo+0KC6dkXdXqsybMMk o8RV+RCo6hywCusyaoaTtEyuqLCBE2kG -----END CERTIFICATE-----Generated at Sun Jul 20 11:38:56 2025 by rpki-client