$ rpki-client -vvf rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft File: TEVBIN8yQkG8D2WWW7xefL7j1tY.mft (raw, json) Hash identifier: UCIAVlgMySrVMLtelLqh2fIQEgq2cDFe3qU+deuJS0k= Subject key identifier: 61:4B:99:9D:33:F5:D1:F2:A1:81:98:6D:79:53:6C:28:28:4F:4A:38 Authority key identifier: 4C:45:41:20:DF:32:42:41:BC:0F:65:96:5B:BC:5E:7C:BE:E3:D6:D6 Certificate issuer: /CN=A911E696/serialNumber=4C454120DF324241BC0F65965BBC5E7CBEE3D6D6 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft Manifest number: D2 Signing time: Sat 23 Aug 2025 05:47:09 +0000 Manifest this update: Sat 23 Aug 2025 05:47:08 +0000 Manifest next update: Sat 30 Aug 2025 05:47:08 +0000 Files and hashes: 1: TEVBIN8yQkG8D2WWW7xefL7j1tY.crl (hash: zr1aw8b4qtztfnTeYt8lvKLf21ceTUg3fMBnzIuuC+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.crl rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E696, serialNumber=4C454120DF324241BC0F65965BBC5E7CBEE3D6D6 Validity Not Before: Aug 23 05:47:08 2025 GMT Not After : Aug 30 05:47:08 2025 GMT Subject: CN=68a955dc-e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:70:6e:4b:50:3e:cb:5e:3b:00:49:05:64: 68:4c:3b:78:50:7b:4a:e9:56:4b:f7:68:51:c7:c6: 06:f8:34:15:31:62:b7:b7:5b:e7:3e:ca:42:95:c4: ee:1a:b7:fb:df:22:99:5c:c8:81:12:30:b0:fe:5d: ba:56:cc:87:bc:7f:22:38:95:d6:fe:50:0a:1f:c3: cb:bc:4d:42:ec:b1:0a:b2:a3:3a:6a:08:11:7e:f4: 00:31:b0:4c:07:9b:ca:45:fa:06:aa:ec:92:4c:17: de:3c:34:f6:40:04:62:a9:e4:2e:6a:03:95:c3:93: 45:67:bf:41:97:6a:1f:6c:2a:a6:16:f6:b1:4b:c0: 6e:32:21:ee:e6:da:36:8d:cb:9f:27:b0:7e:b7:f6: a3:41:a2:cc:87:99:ff:7e:17:73:20:69:a8:1e:4a: 18:3c:b4:b4:89:4d:00:84:ca:ef:42:f0:8f:cc:71: 0f:9f:21:5e:1f:15:25:2f:87:e5:53:f1:f5:cd:ff: 94:db:95:a9:39:03:e3:54:25:d8:d6:dc:e5:20:b3: 63:11:3c:e6:36:d3:93:fc:a6:9e:a6:aa:04:8f:45: fb:ad:85:cd:98:74:6d:06:a4:96:78:6b:22:e8:1a: 8e:72:ab:8b:4c:10:c0:ec:8f:7a:62:43:9a:bb:77: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:99:9D:33:F5:D1:F2:A1:81:98:6D:79:53:6C:28:28:4F:4A:38 X509v3 Authority Key Identifier: keyid:4C:45:41:20:DF:32:42:41:BC:0F:65:96:5B:BC:5E:7C:BE:E3:D6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:22:c9:0f:e2:ce:41:4d:8b:f2:06:5a:f8:d4:bf:9f:55:7b: 9b:81:be:fa:88:f4:10:76:50:10:9d:84:ad:44:0c:21:77:9b: 96:78:ff:ff:3a:ef:55:09:91:11:46:dc:6f:01:08:40:29:7a: b8:7d:ac:cf:80:c5:22:7b:60:c6:5a:f2:0d:80:6c:5b:42:ed: 44:c6:53:3a:58:bf:ac:15:99:7d:61:ad:49:1a:39:45:aa:2a: 76:81:c7:53:de:86:0d:e5:c6:33:4e:ea:f9:56:11:52:aa:7b: 15:d1:92:dd:00:cc:f5:fe:bf:60:bf:b4:b8:ac:d9:e7:80:81: da:83:95:0e:05:e4:a4:1a:2a:df:71:71:ae:1e:9a:2c:ce:1a: d4:fd:55:d7:cd:dc:f0:f1:b2:00:bd:4a:e9:ea:34:1a:25:88: 1e:06:2f:48:df:5b:af:ce:db:9b:31:3d:13:15:9f:c4:1f:5e: 77:10:43:43:17:8b:6c:4d:14:20:03:a8:6f:ec:da:11:a8:1b: d8:e4:df:bc:e2:04:b3:d9:e7:bc:a1:4d:0e:e9:ca:e1:32:f5: 23:2c:00:96:e7:da:a9:49:fc:b9:ba:cb:cf:53:f2:8d:42:10: 51:9e:d0:c7:28:40:c4:1f:d7:99:52:3d:04:94:64:4d:e6:6a: cd:8c:99:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2OTYxMTAvBgNVBAUTKDRDNDU0MTIwREYzMjQyNDFCQzBGNjU5NjVCQkM1RTdD QkVFM0Q2RDYwHhcNMjUwODIzMDU0NzA4WhcNMjUwODMwMDU0NzA4WjAYMRYwFAYD VQQDEw02OGE5NTVkYy1lNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l5wbktQPsteOwBJBWRoTDt4UHtK6VZL92hRx8YG+DQVMWK3t1vnPspClcTu Grf73yKZXMiBEjCw/l26VsyHvH8iOJXW/lAKH8PLvE1C7LEKsqM6aggRfvQAMbBM B5vKRfoGquySTBfePDT2QARiqeQuagOVw5NFZ79Bl2ofbCqmFvaxS8BuMiHu5to2 jcufJ7B+t/ajQaLMh5n/fhdzIGmoHkoYPLS0iU0AhMrvQvCPzHEPnyFeHxUlL4fl U/H1zf+U25WpOQPjVCXY1tzlILNjETzmNtOT/KaepqoEj0X7rYXNmHRtBqSWeGsi 6BqOcquLTBDA7I96YkOau3dTQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFLmZ0z 9dHyoYGYbXlTbCgoT0o4MB8GA1UdIwQYMBaAFExFQSDfMkJBvA9lllu8Xny+49bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY5Ni83MTIyN0RBMjNF OEIxMUVGODExMzhBNTlDNEY5QUUwMi9URVZCSU44eVFrRzhEMldXVzd4ZWZMN2ox dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RFVkJJTjh5UWtHOEQyV1dXN3hlZkw3ajF0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY5Ni83MTIyN0RBMjNFOEIxMUVGODExMzhBNTlDNEY5QUUwMi9URVZCSU44eVFr RzhEMldXVzd4ZWZMN2oxdFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8IskP4s5BTYvyBlr41L+fVXubgb76iPQQdlAQnYStRAwhd5uWeP// Ou9VCZERRtxvAQhAKXq4fazPgMUie2DGWvINgGxbQu1ExlM6WL+sFZl9Ya1JGjlF qip2gcdT3oYN5cYzTur5VhFSqnsV0ZLdAMz1/r9gv7S4rNnngIHag5UOBeSkGirf cXGuHposzhrU/VXXzdzw8bIAvUrp6jQaJYgeBi9I31uvztubMT0TFZ/EH153EEND F4tsTRQgA6hv7NoRqBvY5N+84gSz2ee8oU0O6crhMvUjLACW59qpSfy5usvPU/KN QhBRntDHKEDEH9eZUj0ElGRN5mrNjJlo -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:06 2025 by rpki-client