$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: TaxK+5kPyv3xf/3hBzG1TtBLxUF9oq7euEQPNIdBOyM= Subject key identifier: BD:D5:66:BE:88:F7:B4:CC:02:6E:A6:BC:B6:DA:A1:B6:9E:2A:F1:6F Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 01FA Signing time: Fri 05 Sep 2025 02:44:03 +0000 Manifest this update: Fri 05 Sep 2025 02:44:03 +0000 Manifest next update: Fri 12 Sep 2025 02:44:03 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: mJqy205REq4ifVPwah+lS1BFgaSHjgIUuYsaMmv9T50=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Sep 5 02:44:03 2025 GMT Not After : Sep 12 02:44:03 2025 GMT Subject: CN=68ba4e73-b45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:d8:5a:1e:26:00:07:72:07:fc:a2:a5:24: 2a:f9:28:7a:33:e3:a1:85:a1:15:b0:a8:c5:1e:64: 36:83:5c:f2:bf:7f:da:f3:6a:5e:9d:a3:be:5d:86: 1f:92:61:e8:83:a4:1e:2a:31:50:11:4d:89:7c:27: e0:a7:22:40:3b:da:fb:a2:11:8d:6e:b1:6c:f8:de: 15:e4:83:27:4f:0a:a4:82:dc:1c:8a:ec:63:1f:01: 3d:83:2e:65:22:9a:61:18:5f:50:e7:9d:c4:47:fd: ae:9a:57:5e:18:b4:8c:cf:d9:8d:45:89:d7:49:c1: e6:1f:78:76:67:9c:97:93:8e:f4:91:3d:ff:96:c6: b8:7d:a7:50:e8:f0:70:08:82:fa:e1:b9:8d:0c:d5: 70:15:25:b2:d8:8b:df:62:f6:d2:c6:11:eb:4e:45: e3:6f:10:f5:73:ed:e0:6f:74:1a:98:f1:35:c2:e7: 6c:22:bb:ee:28:ac:6e:01:5e:d2:ba:28:7d:a6:34: ef:e5:d7:b2:00:e8:3c:1d:38:04:c9:a9:ce:8e:34: 70:f5:0b:0e:76:99:a7:0a:19:cb:8f:b7:29:5b:88: 98:46:bf:8d:54:4e:ed:8f:3b:a0:8c:bd:7d:a0:4e: 3a:a7:22:c4:cc:e0:00:e1:29:b4:25:08:27:f5:75: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D5:66:BE:88:F7:B4:CC:02:6E:A6:BC:B6:DA:A1:B6:9E:2A:F1:6F X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:de:e0:f0:80:81:56:dc:cd:12:30:f7:83:5c:fb:9e:9e: 54:d4:50:35:e8:e3:c2:2f:94:59:eb:06:52:44:d2:80:7b:f4: 32:2a:1f:47:0b:f0:02:ec:1c:37:86:18:94:f6:d0:bd:75:71: 5b:5d:c8:55:8d:e4:b3:2b:16:e1:94:ca:c8:2d:74:da:00:90: c8:dc:d3:18:7f:32:08:4d:87:73:bd:5d:d2:7f:8d:22:57:38: 57:a4:85:03:af:12:8b:15:a7:21:e2:2b:a3:28:7e:29:a9:ec: 3b:bf:f3:94:5c:5e:b8:d1:73:89:15:7e:00:44:d2:74:8c:03: 04:df:e4:9d:1d:eb:38:25:e7:9e:5f:42:8f:02:ed:c3:c3:d4: bd:12:99:01:22:bd:e5:8e:0d:63:24:65:a6:6e:ee:1a:c3:17: 57:dd:cf:da:cb:8e:21:54:de:d3:30:4d:c9:ed:f3:40:86:f7: fe:97:a5:47:56:9d:16:67:66:c3:80:44:04:3c:aa:18:d2:af: 93:17:90:e2:12:28:a5:8f:d0:5f:f6:0b:0f:f1:f6:06:ee:aa: 88:12:d4:3c:3e:c6:4b:70:cb:4d:4a:50:f7:35:be:e3:be:4c: b8:da:04:92:7e:96:b7:9e:95:4a:58:32:2e:7e:97:0d:bc:35: 82:d3:ab:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUwOTA1MDI0NDAzWhcNMjUwOTEyMDI0NDAzWjAYMRYwFAYD VQQDEw02OGJhNGU3My1iNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48jYWh4mAAdyB/yipSQq+Sh6M+OhhaEVsKjFHmQ2g1zyv3/a82penaO+XYYf kmHog6QeKjFQEU2JfCfgpyJAO9r7ohGNbrFs+N4V5IMnTwqkgtwciuxjHwE9gy5l IpphGF9Q553ER/2umldeGLSMz9mNRYnXScHmH3h2Z5yXk470kT3/lsa4fadQ6PBw CIL64bmNDNVwFSWy2IvfYvbSxhHrTkXjbxD1c+3gb3QamPE1wudsIrvuKKxuAV7S uih9pjTv5deyAOg8HTgEyanOjjRw9QsOdpmnChnLj7cpW4iYRr+NVE7tjzugjL19 oE46pyLEzOAA4Sm0JQgn9XVFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3VZr6I 97TMAm6mvLbaobaeKvFvMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSMt7g8ICBVtzNEjD3g1z7np5U1FA16OPCL5RZ6wZSRNKAe/QyKh9H C/AC7Bw3hhiU9tC9dXFbXchVjeSzKxbhlMrILXTaAJDI3NMYfzIITYdzvV3Sf40i VzhXpIUDrxKLFach4iujKH4pqew7v/OUXF640XOJFX4ARNJ0jAME3+SdHes4Jeee X0KPAu3Dw9S9EpkBIr3ljg1jJGWmbu4awxdX3c/ay44hVN7TME3J7fNAhvf+l6VH Vp0WZ2bDgEQEPKoY0q+TF5DiEiilj9Bf9gsP8fYG7qqIEtQ8PsZLcMtNSlD3Nb7j vky42gSSfpa3npVKWDIufpcNvDWC06uJ -----END CERTIFICATE-----Generated at Sat Sep 6 15:16:17 2025 by rpki-client