$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft File: rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json) Hash identifier: CxbbswWcqh/ycDJvNxUymih0LknoGABKW1ucHzCABzw= Subject key identifier: 98:87:DC:20:98:A2:15:9A:3A:C6:45:3A:5C:5F:D1:E3:79:86:3C:32 Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft Manifest number: 7B Signing time: Sun 01 Jun 2025 06:26:31 +0000 Manifest this update: Sun 01 Jun 2025 06:26:31 +0000 Manifest next update: Sun 08 Jun 2025 06:26:31 +0000 Files and hashes: 1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: jYy+xItnxxN2zesOSoYbW1qDBH8dGbDmbyy7cwei2d0=) 2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: /KjXSfmE2q+fXSG5F8CKP1wpSYcVa/XLVf1LpFs9wvg=) 3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: G+4s3zAMADjSVZmHk5FULbhH5AjFBhHH97tW10llI8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Validity Not Before: Jun 1 06:26:31 2025 GMT Not After : Jun 8 06:26:31 2025 GMT Subject: CN=683bf297-ec5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:ea:81:4c:79:04:84:55:36:1e:66:a1:7c: 06:a2:8a:d0:f1:dd:91:62:16:7a:bf:b7:4f:0d:bb: 1e:3a:7a:52:e9:8c:7d:7d:07:8a:4b:47:7d:57:83: f9:41:fb:35:5a:8d:4f:a9:1e:7a:44:38:ad:9b:4a: 87:c7:53:42:1e:62:dc:6d:be:2c:1d:b1:b2:39:54: 2f:c9:cf:4d:47:6c:31:64:70:29:e2:2b:26:58:62: a1:95:e1:a0:eb:75:1f:18:ee:dd:d8:c8:54:ee:d2: 53:4b:ab:6a:b9:a4:60:7d:fa:5b:76:27:ed:d0:8c: 20:29:69:1d:09:b6:f6:27:fc:3a:ee:f5:28:bc:55: 52:0c:b4:e1:14:07:b1:6b:f1:f6:b2:af:fe:a1:73: f1:e0:4e:5a:93:c6:82:42:dc:00:ad:2e:a4:2f:10: 98:19:27:b7:59:b7:7f:c5:dc:d6:7c:eb:39:87:27: 9d:7b:44:8a:95:19:07:34:71:c6:a3:c9:16:2e:1e: 66:64:d9:3e:0c:4e:33:b7:c3:c7:44:38:c1:5c:3c: 80:0c:a1:05:bf:0c:e4:d0:4a:2a:c9:43:67:0f:4d: 0e:3d:1a:be:1b:3e:f8:b5:f3:38:80:03:1d:aa:c9: c3:cb:e4:c4:fe:8f:34:4b:cb:64:62:2e:8b:31:6a: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:87:DC:20:98:A2:15:9A:3A:C6:45:3A:5C:5F:D1:E3:79:86:3C:32 X509v3 Authority Key Identifier: keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:08:1e:0f:9d:b7:e3:b0:b4:88:7c:50:b0:c0:0f:2e:49:1a: 61:5e:0d:76:94:57:e2:9e:f7:1e:71:b0:9c:fc:8b:6a:8d:25: 3c:08:3d:21:32:c9:63:41:89:c7:c1:a8:29:33:4a:ed:21:a3: 23:34:b3:1a:ce:97:72:a3:8b:81:65:50:bc:f5:22:3e:f8:1c: 0e:65:1c:e0:99:89:a3:0a:22:65:1e:41:83:5f:62:1a:81:1c: 1a:4f:69:0d:53:c6:1f:3d:30:b7:9e:e4:ee:13:b4:cf:01:4b: dd:11:3b:f2:07:62:e4:80:b0:05:85:77:bd:6d:48:bd:2c:f5: 1a:8f:8e:f6:79:49:9e:a8:e9:ed:44:63:c0:30:ca:85:12:c3: 36:5e:a4:03:06:a1:90:4c:91:60:09:7a:82:20:53:05:fd:95: d2:ea:2b:ec:db:47:3d:4f:e2:f7:db:3a:38:b7:9a:ba:28:00: d5:3e:81:ab:16:77:ed:d0:34:63:4b:40:23:ed:90:5b:5b:2d: b0:e3:10:f9:49:3e:9b:5c:dd:a6:9a:f3:8d:aa:96:f2:08:71: e5:a7:25:51:38:ec:01:77:4d:2c:81:07:f4:9e:26:c0:f1:c7: bc:db:08:b4:67:02:c8:e7:94:0a:19:b0:21:1e:35:2b:0a:d1: 4e:4c:a3:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTFDRjExMC8GA1UEBRMoQUVEODAxMERFNEQyM0ZGNEQwRjkwMDVCQUM5MjVCREI3 RjNERjMwQTAeFw0yNTA2MDEwNjI2MzFaFw0yNTA2MDgwNjI2MzFaMBgxFjAUBgNV BAMTDTY4M2JmMjk3LWVjNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqxOqBTHkEhFU2HmahfAaiitDx3ZFiFnq/t08Nux46elLpjH19B4pLR31Xg/lB +zVajU+pHnpEOK2bSofHU0IeYtxtviwdsbI5VC/Jz01HbDFkcCniKyZYYqGV4aDr dR8Y7t3YyFTu0lNLq2q5pGB9+lt2J+3QjCApaR0JtvYn/Dru9Si8VVIMtOEUB7Fr 8fayr/6hc/HgTlqTxoJC3ACtLqQvEJgZJ7dZt3/F3NZ86zmHJ517RIqVGQc0ccaj yRYuHmZk2T4MTjO3w8dEOMFcPIAMoQW/DOTQSirJQ2cPTQ49Gr4bPvi18ziAAx2q ycPL5MT+jzRLy2RiLosxauUlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmIfcIJii FZo6xkU6XF/R43mGPDIwHwYDVR0jBBgwFoAUrtgBDeTSP/TQ+QBbrJJb23898wow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MUNGLzI3NDlDN0JFODZE NzExRUY4NTRERDQ3QkM0RjlBRTAyL3J0Z0JEZVRTUF9UUS1RQmJySkpiMjM4OTh3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnRnQkRlVFNQX1RRLVFCYnJKSmIyMzg5OHdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MUNGLzI3NDlDN0JFODZENzExRUY4NTRERDQ3QkM0RjlBRTAyL3J0Z0JEZVRTUF9U US1RQmJySkpiMjM4OTh3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANcIHg+dt+OwtIh8ULDADy5JGmFeDXaUV+Ke9x5xsJz8i2qNJTwIPSEy yWNBicfBqCkzSu0hoyM0sxrOl3Kji4FlULz1Ij74HA5lHOCZiaMKImUeQYNfYhqB HBpPaQ1Txh89MLee5O4TtM8BS90RO/IHYuSAsAWFd71tSL0s9RqPjvZ5SZ6o6e1E Y8AwyoUSwzZepAMGoZBMkWAJeoIgUwX9ldLqK+zbRz1P4vfbOji3mrooANU+gasW d+3QNGNLQCPtkFtbLbDjEPlJPptc3aaa842qlvIIceWnJVE47AF3TSyBB/SeJsDx x7zbCLRnAsjnlAoZsCEeNSsK0U5Mo+w= -----END CERTIFICATE-----Generated at Mon Jun 2 21:47:39 2025 by rpki-client