$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: WUPHMTksmZZUaZM4QR9etwyiKG9H66X2xgyzOUMvVes= Subject key identifier: DE:E3:7D:7F:C3:96:C1:7C:AA:FD:0E:31:E2:E6:31:5A:20:ED:55:AD Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0CC5 Signing time: Sun 24 Aug 2025 18:05:59 +0000 Manifest this update: Sun 24 Aug 2025 18:05:59 +0000 Manifest next update: Sun 31 Aug 2025 18:05:59 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: SEMauqsMvCiktHrYLoOSmG5ShYmpXbNVZoF7eg7I1BY=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Aug 24 18:05:59 2025 GMT Not After : Aug 31 18:05:59 2025 GMT Subject: CN=68ab5487-2cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:6c:eb:1a:26:c0:91:75:ad:84:5f:f7:88: dc:fe:44:da:b8:95:02:e9:c3:11:38:8e:1d:3c:9d: 9b:0b:9b:44:ca:46:e1:44:b7:a7:61:74:3f:f7:47: 19:52:92:28:99:6a:fd:2e:12:91:9f:e8:48:e4:c7: 3a:9d:45:7d:a1:70:dd:cd:cd:13:20:9c:f6:58:51: d6:c0:25:0c:19:1e:76:5a:37:ea:ba:53:8c:7b:3c: b2:69:d0:e3:9a:b3:62:20:9e:87:23:cf:c4:0d:ef: 35:38:64:a9:d6:1c:31:bb:2e:a3:c3:83:de:35:79: 66:e3:6e:9c:b4:70:29:46:48:99:93:c2:ca:87:d7: f6:62:e0:57:d2:23:fe:72:ff:d6:ea:10:92:8f:db: b2:b7:e4:8b:c2:4e:43:1d:b4:39:01:15:f6:88:e6: ed:ea:39:b4:82:b8:af:b8:c7:5a:4d:af:2a:6c:b5: 9d:50:aa:02:1b:56:1b:c0:4d:9d:a4:78:76:68:8e: 5a:d6:4b:f0:51:92:ea:93:59:ba:ce:d8:a2:52:59: 6b:1b:30:4b:bf:b3:9e:9d:6b:c2:a2:03:61:a8:ab: 94:97:cc:9f:b9:36:21:17:8d:7e:fc:b1:58:14:8d: 00:85:ce:5b:5c:b0:58:20:13:07:10:72:2d:65:33: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:7D:7F:C3:96:C1:7C:AA:FD:0E:31:E2:E6:31:5A:20:ED:55:AD X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:3d:96:c4:85:91:75:9a:ce:e4:da:4b:5d:27:34:a8:f4: 7f:aa:8e:9b:97:05:c4:58:1e:90:50:91:b7:bf:48:13:a5:7b: 40:87:4d:e0:17:ee:45:2c:ad:67:ef:89:20:5a:af:79:d4:8a: f5:68:84:a4:65:b4:4e:ca:5f:c8:d2:57:fa:5f:4d:74:54:7d: c4:82:b2:ce:67:38:95:ad:cc:b9:62:b9:8f:91:c6:c4:81:fa: d5:d5:78:92:64:00:f6:5f:81:b8:89:7e:88:fb:c1:85:34:23: 53:d3:fd:e7:53:e5:ce:70:d7:aa:9a:a1:64:c0:89:1f:c4:8b: ce:4a:8a:84:31:ec:a0:de:29:76:bd:ba:0c:71:21:d6:fe:8f: fb:bf:92:03:32:ff:1a:49:dc:42:35:78:1f:b2:21:26:33:63: b8:a2:c7:ee:25:47:e6:fe:df:1c:9a:e1:ad:96:14:b0:e5:1e: fd:54:ba:0a:c4:e0:6c:9b:29:73:ff:dd:76:e8:40:0a:72:17: af:21:6b:bb:d6:bb:ed:f8:1a:99:18:f1:a8:58:34:36:da:df: 63:4e:78:8b:04:c5:7e:e9:ea:b8:37:0f:44:dd:9a:56:6a:72: a9:c3:c0:75:75:47:5e:13:49:f2:35:0d:76:d0:fb:85:bb:ff: 79:9f:e9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUwODI0MTgwNTU5WhcNMjUwODMxMTgwNTU5WjAYMRYwFAYD VQQDEw02OGFiNTQ4Ny0yY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytxs6xomwJF1rYRf94jc/kTauJUC6cMROI4dPJ2bC5tEykbhRLenYXQ/90cZ UpIomWr9LhKRn+hI5Mc6nUV9oXDdzc0TIJz2WFHWwCUMGR52WjfqulOMezyyadDj mrNiIJ6HI8/EDe81OGSp1hwxuy6jw4PeNXlm426ctHApRkiZk8LKh9f2YuBX0iP+ cv/W6hCSj9uyt+SLwk5DHbQ5ARX2iObt6jm0grivuMdaTa8qbLWdUKoCG1YbwE2d pHh2aI5a1kvwUZLqk1m6ztiiUllrGzBLv7OenWvCogNhqKuUl8yfuTYhF41+/LFY FI0Ahc5bXLBYIBMHEHItZTOvdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7jfX/D lsF8qv0OMeLmMVog7VWtMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmEz2WxIWRdZrO5NpLXSc0qPR/qo6blwXEWB6QUJG3v0gTpXtAh03g F+5FLK1n74kgWq951Ir1aISkZbROyl/I0lf6X010VH3EgrLOZziVrcy5YrmPkcbE gfrV1XiSZAD2X4G4iX6I+8GFNCNT0/3nU+XOcNeqmqFkwIkfxIvOSoqEMeyg3il2 vboMcSHW/o/7v5IDMv8aSdxCNXgfsiEmM2O4osfuJUfm/t8cmuGtlhSw5R79VLoK xOBsmylz/9126EAKchevIWu71rvt+BqZGPGoWDQ22t9jTniLBMV+6eq4Nw9E3ZpW anKpw8B1dUdeE0nyNQ120PuFu/95n+nV -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:16 2025 by rpki-client