$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: UDnZD8eGYXAKU6iaYxiPjqrG2GgBtEg0VtfjxUkPkuw= Subject key identifier: DD:5E:05:46:3F:28:0C:1D:8A:B1:ED:8C:90:DC:F4:D0:72:E8:DD:EF Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 015C Signing time: Mon 21 Jul 2025 04:06:08 +0000 Manifest this update: Mon 21 Jul 2025 04:06:08 +0000 Manifest next update: Mon 28 Jul 2025 04:06:08 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: 6OSe2oaKdLXtd+tMMUzWqiSQ5N4yYZ647+HMlLWKZrs=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: DsVxbJQBFvHguy7znDHJZ9CR2UmTMow8V9P9QuFVJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Jul 21 04:06:08 2025 GMT Not After : Jul 28 04:06:08 2025 GMT Subject: CN=687dbcb0-5c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:cf:dd:67:9d:da:f9:10:87:7c:28:04:a9: fd:12:0f:ec:07:85:db:ea:50:7d:5c:26:99:90:40: c8:61:50:cc:ad:7b:fa:8a:b7:1e:73:d0:a4:1b:7a: 01:df:c5:91:70:0a:27:57:e7:21:88:e3:4f:e4:e9: b4:cb:20:f7:df:0d:47:04:f7:24:c4:fd:45:d7:63: 16:17:b1:ca:8d:84:6e:f0:a6:83:01:d4:96:a7:97: fd:c3:73:21:67:a3:09:b4:98:f8:a7:19:8d:6f:c9: 7e:1d:57:56:85:04:d2:69:78:d9:53:69:bb:08:b9: 4b:6b:7d:a4:33:f0:01:0b:79:f7:41:4b:ee:2b:21: f6:0c:5c:18:42:b8:9f:f2:2c:e1:ef:65:d1:ed:42: 22:5e:7c:f3:ef:4e:ee:85:b2:2a:47:30:97:c8:c0: 06:24:ab:2f:12:75:69:4c:f7:f2:b6:37:4a:3d:f7: cb:ad:cb:48:b7:7a:4d:9f:2b:bf:9a:f7:62:5f:e2: 87:dc:d6:c7:57:f1:1c:da:81:ad:ef:8f:8d:b7:a5: b5:1d:07:70:ab:a4:e2:8c:e4:f3:bb:ad:66:cd:33: 55:58:48:f2:5e:5f:6a:4f:39:ab:d4:d3:60:d5:65: 82:ef:c6:d0:76:f4:c8:82:8d:09:f1:ce:d5:29:4b: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:05:46:3F:28:0C:1D:8A:B1:ED:8C:90:DC:F4:D0:72:E8:DD:EF X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:52:26:4a:ad:09:8f:4c:f5:89:8e:0c:ae:57:8a:b8:3c:f5: c9:ad:65:fa:70:d3:21:11:25:7e:4b:d9:fc:b5:0f:1b:44:08: 75:9b:13:94:ba:3a:81:25:8f:fd:8f:cc:cd:85:be:62:e1:6e: 9d:f1:77:d9:d1:54:90:22:29:bf:bc:5d:01:48:88:11:78:4d: eb:6d:74:5a:e0:1a:a9:1a:88:8b:37:e5:5b:d9:08:51:d0:3b: 06:be:83:2f:48:2e:c9:7a:19:66:d2:27:c8:56:f0:68:5c:04: 84:6d:12:44:12:bf:c4:4b:21:97:a2:06:15:6d:81:77:72:c5: 96:20:c8:4e:9c:04:96:76:ea:02:77:c5:8a:26:67:e5:71:65: 9e:f8:98:8b:25:e4:ff:1a:ad:a3:b9:86:9b:16:37:b2:4e:87: 49:99:5e:1b:c6:95:17:cf:cf:a0:76:11:ef:80:26:92:70:ee: 63:9a:ab:0f:ae:99:79:43:9b:20:86:f3:d3:c8:17:bc:8d:1f: 33:0d:0d:c8:e7:ed:56:45:5c:a5:c4:6b:b2:ea:18:39:22:26: 79:53:13:3b:44:dd:b9:3a:e2:21:38:2b:bd:15:35:05:f6:73: 02:2d:90:5b:0d:52:62:1c:e3:c7:ed:c6:65:66:ef:df:65:e3: 58:6a:5b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUwNzIxMDQwNjA4WhcNMjUwNzI4MDQwNjA4WjAYMRYwFAYD VQQDEw02ODdkYmNiMC01YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkLP3Wed2vkQh3woBKn9Eg/sB4Xb6lB9XCaZkEDIYVDMrXv6ircec9CkG3oB 38WRcAonV+chiONP5Om0yyD33w1HBPckxP1F12MWF7HKjYRu8KaDAdSWp5f9w3Mh Z6MJtJj4pxmNb8l+HVdWhQTSaXjZU2m7CLlLa32kM/ABC3n3QUvuKyH2DFwYQrif 8izh72XR7UIiXnzz707uhbIqRzCXyMAGJKsvEnVpTPfytjdKPffLrctIt3pNnyu/ mvdiX+KH3NbHV/Ec2oGt74+Nt6W1HQdwq6TijOTzu61mzTNVWEjyXl9qTzmr1NNg 1WWC78bQdvTIgo0J8c7VKUvtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1eBUY/ KAwdirHtjJDc9NBy6N3vMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1UiZKrQmPTPWJjgyuV4q4PPXJrWX6cNMhESV+S9n8tQ8bRAh1mxOU ujqBJY/9j8zNhb5i4W6d8XfZ0VSQIim/vF0BSIgReE3rbXRa4BqpGoiLN+Vb2QhR 0DsGvoMvSC7Jehlm0ifIVvBoXASEbRJEEr/ESyGXogYVbYF3csWWIMhOnASWduoC d8WKJmflcWWe+JiLJeT/Gq2juYabFjeyTodJmV4bxpUXz8+gdhHvgCaScO5jmqsP rpl5Q5sghvPTyBe8jR8zDQ3I5+1WRVylxGuy6hg5IiZ5UxM7RN25OuIhOCu9FTUF 9nMCLZBbDVJiHOPH7cZlZu/fZeNYaluM -----END CERTIFICATE-----Generated at Mon Jul 21 12:40:50 2025 by rpki-client