$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft File: rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json) Hash identifier: N0X2luDzXsDDCGKGmW0uBCpPK2S/YpQnNtzbBoCHQwE= Subject key identifier: 18:01:46:19:60:B3:7C:A6:28:DE:FA:90:9E:4F:06:86:14:69:1F:19 Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft Manifest number: 94 Signing time: Mon 21 Jul 2025 06:35:36 +0000 Manifest this update: Mon 21 Jul 2025 06:35:35 +0000 Manifest next update: Mon 28 Jul 2025 06:35:35 +0000 Files and hashes: 1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: WBQvjaDFg07khU6C0lDupxSqif3QO3qgqZhNpSipIOY=) 2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: /KjXSfmE2q+fXSG5F8CKP1wpSYcVa/XLVf1LpFs9wvg=) 3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: G+4s3zAMADjSVZmHk5FULbhH5AjFBhHH97tW10llI8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A Validity Not Before: Jul 21 06:35:35 2025 GMT Not After : Jul 28 06:35:35 2025 GMT Subject: CN=687ddfb8-12b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:43:ea:e6:6e:32:87:b4:f5:f2:c5:81:aa: 20:70:2b:c9:75:f1:dc:50:79:4f:e9:06:b3:21:92: 09:ef:b1:2b:80:97:eb:f0:0c:fb:27:ed:66:d7:22: c9:94:42:01:aa:2e:d4:90:5c:2d:f6:63:80:51:60: 31:46:1a:64:20:12:4b:20:b6:16:7c:4c:ac:4a:3c: 35:86:91:15:3d:e6:77:fc:3c:23:03:9e:55:55:78: e5:62:bf:41:da:53:ba:de:05:5f:a7:11:f3:5e:7f: ab:8e:b8:fe:30:a4:e3:7f:a5:af:b6:bd:b5:b6:20: 99:07:7a:a0:78:91:e3:ee:2e:1a:a0:ff:13:be:a0: e2:90:ac:a2:e3:07:0e:1a:f4:d5:c3:1c:e0:a8:09: 01:86:c1:e6:4e:32:1c:ba:f5:9f:5e:3d:ba:7e:a2: 16:11:4e:bb:43:56:f5:15:98:13:f2:32:19:ef:ae: f5:77:8c:a5:8b:61:39:65:6b:d6:20:fa:1c:f1:9c: 92:05:4a:08:cb:b1:49:11:5f:f2:0a:33:e7:36:4e: c2:b3:32:45:90:be:57:e1:38:de:68:67:9b:8c:da: 2f:28:a6:6f:4f:ff:82:d8:67:ab:f4:17:ed:04:cb: 7d:ac:16:89:5d:63:43:6f:9f:6a:0f:0f:78:f4:81: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:01:46:19:60:B3:7C:A6:28:DE:FA:90:9E:4F:06:86:14:69:1F:19 X509v3 Authority Key Identifier: keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:63:a3:9d:3d:39:0f:1a:4e:4c:88:7e:14:ee:d4:1a:f9: 2b:d2:de:d5:16:5e:b8:2b:93:dc:2e:a1:de:bd:17:fa:8a:ae: 67:0a:cc:97:9b:03:49:43:db:20:b6:fb:79:eb:be:18:51:35: fd:04:be:76:0f:53:15:50:4d:50:b3:63:4e:a9:0f:ad:07:60: e4:4f:9b:1d:0a:bd:eb:bb:50:8d:e2:c1:d3:7b:62:7b:20:ce: f9:4c:70:8e:e1:c8:e5:88:45:45:16:d3:40:50:84:7d:54:40: 39:b8:1e:43:bd:91:51:18:df:e9:31:95:81:d9:43:2f:b4:e9: 3c:c4:33:28:01:fd:cb:6d:31:30:85:db:fe:9b:40:36:e2:8a: 1a:54:b9:b6:08:b3:d3:30:df:1d:15:3a:c1:a2:dc:01:6e:9a: 65:bd:ef:b7:71:21:2d:d3:02:5e:01:c5:2f:0f:ef:61:12:3f: 7c:ff:55:5a:4f:f2:bd:5f:96:7a:22:bf:81:fd:97:6f:00:ed: 99:67:4c:7a:cb:0a:35:88:1a:a6:5b:97:6a:14:d1:eb:70:06: 25:1e:5c:c7:a2:cf:5e:bb:1a:a3:78:29:21:8d:97:5c:08:de: f9:77:57:88:d7:09:35:c3:ff:d6:6e:ec:c7:76:87:99:df:fe: 36:33:53:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKEFFRDgwMTBERTREMjNGRjREMEY5MDA1QkFDOTI1QkRC N0YzREYzMEEwHhcNMjUwNzIxMDYzNTM1WhcNMjUwNzI4MDYzNTM1WjAYMRYwFAYD VQQDEw02ODdkZGZiOC0xMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT1D6uZuMoe09fLFgaogcCvJdfHcUHlP6QazIZIJ77ErgJfr8Az7J+1m1yLJ lEIBqi7UkFwt9mOAUWAxRhpkIBJLILYWfEysSjw1hpEVPeZ3/DwjA55VVXjlYr9B 2lO63gVfpxHzXn+rjrj+MKTjf6Wvtr21tiCZB3qgeJHj7i4aoP8TvqDikKyi4wcO GvTVwxzgqAkBhsHmTjIcuvWfXj26fqIWEU67Q1b1FZgT8jIZ7671d4yli2E5ZWvW IPoc8ZySBUoIy7FJEV/yCjPnNk7CszJFkL5X4TjeaGebjNovKKZvT/+C2Ger9Bft BMt9rBaJXWNDb59qDw949IHoRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgBRhlg s3ymKN76kJ5PBoYUaR8ZMB8GA1UdIwQYMBaAFK7YAQ3k0j/00PkAW6ySW9t/PfMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8yNzQ5QzdCRTg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1BfVFEtUUJickpKYjIzODk4 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J0Z0JEZVRTUF9UUS1RQmJySkpiMjM4OTh3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8yNzQ5QzdCRTg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9ydGdCRGVUU1Bf VFEtUUJickpKYjIzODk4d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBeWOjnT05DxpOTIh+FO7UGvkr0t7VFl64K5PcLqHevRf6iq5nCsyX mwNJQ9sgtvt5674YUTX9BL52D1MVUE1Qs2NOqQ+tB2DkT5sdCr3ru1CN4sHTe2J7 IM75THCO4cjliEVFFtNAUIR9VEA5uB5DvZFRGN/pMZWB2UMvtOk8xDMoAf3LbTEw hdv+m0A24ooaVLm2CLPTMN8dFTrBotwBbpplve+3cSEt0wJeAcUvD+9hEj98/1Va T/K9X5Z6Ir+B/ZdvAO2ZZ0x6ywo1iBqmW5dqFNHrcAYlHlzHos9euxqjeCkhjZdc CN75d1eI1wk1w//WbuzHdoeZ3/42M1M+ -----END CERTIFICATE-----Generated at Mon Jul 21 12:57:00 2025 by rpki-client