$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: 4NmFnNPM4/hRlKVKPuFq71fkMH98r1oOGzPosAnTa74= Subject key identifier: C8:1F:5C:05:06:4B:26:64:95:8E:5E:3F:EB:F3:65:17:8A:24:DC:95 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 011F Signing time: Wed 23 Jul 2025 04:58:36 +0000 Manifest this update: Wed 23 Jul 2025 04:58:36 +0000 Manifest next update: Wed 30 Jul 2025 04:58:36 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: rjQ7XXUghCB3hwwkjo6grwElg3w06WaTopgfHKCCxic=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Jul 23 04:58:36 2025 GMT Not After : Jul 30 04:58:36 2025 GMT Subject: CN=68806bfc-b74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:d0:84:09:83:14:b5:d5:2f:9b:a1:96:75: 11:18:90:82:47:fc:50:63:3e:6c:af:14:b4:95:70: b9:ed:93:96:48:52:7c:42:8c:b1:d3:6d:95:c8:e2: c9:c0:ea:45:34:94:77:68:59:fe:75:5c:cb:c8:9d: 8c:5d:40:53:8a:44:dc:cd:57:ff:25:c6:4a:35:44: 31:89:72:8c:ec:3f:4b:57:b4:12:e1:04:5b:01:31: a6:81:c8:06:b1:12:cc:66:e3:1b:d9:08:96:76:38: 22:1e:a9:5b:1b:31:b7:d8:af:bb:e1:b9:15:6d:91: 7e:6c:7e:43:b0:87:89:f5:fb:35:5d:68:03:84:f8: 73:32:76:23:1a:92:64:01:42:fd:07:1c:0b:2a:83: 16:4a:63:e1:25:d6:ea:30:66:32:e8:4e:7e:6e:f0: 10:f5:38:e8:d7:83:48:be:21:ee:32:9a:19:c9:f7: 58:b1:c7:99:37:4b:16:e2:e3:ec:20:6d:6e:3e:32: 16:11:fb:8b:dd:f6:37:e5:47:ec:9f:84:c4:cf:6d: f4:16:ea:2b:4d:a3:03:94:04:40:4b:d3:75:19:ea: 66:64:1b:3b:e4:c9:50:f2:2f:ac:1b:e6:a6:a3:02: 81:d4:ae:88:f4:c4:40:fa:4f:f8:40:90:11:0b:b0: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1F:5C:05:06:4B:26:64:95:8E:5E:3F:EB:F3:65:17:8A:24:DC:95 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:82:3f:e6:d8:ed:32:02:90:75:ed:b6:f4:33:24:b2:5e:be: 0f:66:3b:ed:12:30:cf:1a:91:f9:2e:b6:ba:76:8b:fb:36:8a: 1b:cf:2b:a6:67:d9:27:ca:4c:48:37:5c:37:a0:81:b5:49:c6: 85:13:e9:16:51:63:98:5c:ed:48:5b:16:88:b4:4a:c6:d7:ec: 39:4f:71:c4:eb:de:12:cb:9a:b6:48:79:60:29:86:04:dc:59: 41:e3:89:28:09:97:54:56:02:e9:a2:dd:47:bc:7d:b6:c1:c8: 3a:46:d7:33:b8:ad:de:ff:a1:8f:b8:4b:4e:6a:65:b3:d5:f2: 85:14:21:88:fe:7d:68:62:ba:ff:a7:f4:fd:d5:b6:2f:72:67: 2d:b7:f8:8d:1c:8a:3c:b1:46:a5:e8:97:64:f4:41:c7:ff:9d: bc:dd:60:50:78:3e:b3:87:13:e2:c3:9f:29:14:d3:0c:aa:58: 2c:69:12:16:f4:aa:f0:6a:eb:f3:8f:63:b6:23:99:4d:03:3a: cd:e0:6f:89:01:99:a4:1c:4a:e5:70:24:50:37:d6:c5:96:c7: 5d:de:4b:08:1e:2f:d8:d5:26:33:1b:df:bb:f1:45:73:1f:31: 73:a3:9d:5a:8d:21:b8:0f:6d:3f:56:fa:33:25:d1:8a:d3:f4: 62:f4:ab:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwNzIzMDQ1ODM2WhcNMjUwNzMwMDQ1ODM2WjAYMRYwFAYD VQQDEw02ODgwNmJmYy1iNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08vQhAmDFLXVL5uhlnURGJCCR/xQYz5srxS0lXC57ZOWSFJ8Qoyx022VyOLJ wOpFNJR3aFn+dVzLyJ2MXUBTikTczVf/JcZKNUQxiXKM7D9LV7QS4QRbATGmgcgG sRLMZuMb2QiWdjgiHqlbGzG32K+74bkVbZF+bH5DsIeJ9fs1XWgDhPhzMnYjGpJk AUL9BxwLKoMWSmPhJdbqMGYy6E5+bvAQ9Tjo14NIviHuMpoZyfdYsceZN0sW4uPs IG1uPjIWEfuL3fY35Ufsn4TEz230FuorTaMDlARAS9N1GepmZBs75MlQ8i+sG+am owKB1K6I9MRA+k/4QJARC7CprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgfXAUG SyZklY5eP+vzZReKJNyVMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBegj/m2O0yApB17bb0MySyXr4PZjvtEjDPGpH5Lra6dov7Noobzyum Z9knykxIN1w3oIG1ScaFE+kWUWOYXO1IWxaItErG1+w5T3HE694Sy5q2SHlgKYYE 3FlB44koCZdUVgLpot1HvH22wcg6RtczuK3e/6GPuEtOamWz1fKFFCGI/n1oYrr/ p/T91bYvcmctt/iNHIo8sUal6Jdk9EHH/5283WBQeD6zhxPiw58pFNMMqlgsaRIW 9Krwauvzj2O2I5lNAzrN4G+JAZmkHErlcCRQN9bFlsdd3ksIHi/Y1SYzG9+78UVz HzFzo51ajSG4D20/VvozJdGK0/Ri9Ksy -----END CERTIFICATE-----Generated at Wed Jul 23 12:12:27 2025 by rpki-client