$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: Evx7YGHz/vya06sB9TX10gfQFfv/nB6wCXw43LTKjXg= Subject key identifier: AA:85:1B:D9:58:88:A4:79:DC:33:90:0F:F0:BD:C7:70:33:2A:8C:86 Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 2B Signing time: Wed 23 Jul 2025 08:04:48 +0000 Manifest this update: Wed 23 Jul 2025 08:04:47 +0000 Manifest next update: Wed 30 Jul 2025 08:04:47 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: a6HkOBJSmep+rw5mwd4mqQIJ0nWNAUlVAvVm9aSxmlY=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Jul 23 08:04:47 2025 GMT Not After : Jul 30 08:04:47 2025 GMT Subject: CN=688097a0-fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:fa:f1:db:ca:8c:14:2b:83:97:7d:e7:80: 4f:d0:53:f5:ed:7e:1c:de:aa:89:da:82:c9:7b:89: e1:0e:3c:25:85:ca:01:92:71:d2:c2:e0:a8:94:82: f5:e3:3b:92:6a:b9:c2:36:83:a9:2a:8c:a4:2a:e2: 25:91:28:b0:45:67:6a:ae:d8:9b:1d:7c:48:de:c5: 4c:97:32:6e:ef:4c:fc:8f:4d:2d:db:6f:b1:2b:79: 1c:71:c4:de:5d:81:d7:cb:dc:72:f1:f2:ba:40:7c: c1:66:42:60:95:3d:a4:52:27:61:40:34:55:69:43: 8d:09:2e:98:72:0c:9f:c7:94:95:e3:9a:67:00:14: 5a:bf:c0:3b:a2:cf:45:46:26:30:3e:ef:51:0e:5e: 8a:89:57:a1:40:2b:31:1f:46:4e:61:2e:58:5c:b6: 81:47:a4:1b:4a:3e:2d:c3:58:e8:e5:d8:2b:92:1d: 64:01:fb:b5:d6:34:6c:5d:aa:11:fd:5c:6d:9a:b8: 45:5f:74:a5:d7:9a:b7:cc:e8:e8:d8:9d:60:95:b3: c6:65:0c:fa:e3:df:f1:38:b9:53:87:ee:dd:a5:d2: 8c:b4:43:4f:e4:88:18:c8:33:1c:29:44:e8:06:88: 48:35:23:e6:a2:7b:82:68:94:62:b5:61:3c:74:30: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:85:1B:D9:58:88:A4:79:DC:33:90:0F:F0:BD:C7:70:33:2A:8C:86 X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d0:49:e0:61:5d:f4:8a:25:df:12:65:d9:c9:30:fd:ee:2b: bc:01:74:1b:8a:b9:f6:23:42:07:b0:1d:33:f8:f5:96:28:25: 40:eb:5a:6d:0c:03:90:e1:14:66:39:fe:80:1e:9b:cc:3e:8d: fa:16:f0:d7:2e:bc:6b:40:61:32:2d:dd:e9:00:09:77:95:40: 7d:19:cb:da:50:46:47:08:f6:93:ca:52:0b:52:9c:42:3f:61: 16:88:64:5d:1c:d8:3e:1d:70:3a:6b:d3:ed:d5:5c:ec:a2:5b: c0:ca:8a:5a:a0:f9:a7:43:a7:32:c9:24:42:db:ce:9d:d0:fb: 21:5d:55:43:a6:fa:43:26:7e:98:b4:a5:8d:81:14:f4:17:95: 13:48:ae:ed:0a:26:9f:10:33:05:85:67:22:e1:04:5e:e2:23: c2:b3:46:25:d3:17:63:d8:6d:63:86:69:6f:2f:9e:be:98:28: dc:a1:6d:67:b8:a7:f7:40:6f:e3:80:42:1e:ac:1f:64:ba:38: 34:c5:b1:3f:40:01:0e:bd:66:e6:1b:fe:77:12:0f:29:ae:70: cd:23:6b:f0:cb:f2:8e:9b:1e:aa:8d:86:f5:bb:44:28:7e:3f: eb:8c:4d:c3:d8:8b:75:61:da:fa:42:c8:e9:e0:0f:55:bb:d2: 8c:24:e6:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTA3MjMwODA0NDdaFw0yNTA3MzAwODA0NDdaMBgxFjAUBgNV BAMTDTY4ODA5N2EwLWZiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Hfrx28qMFCuDl33ngE/QU/Xtfhzeqonagsl7ieEOPCWFygGScdLC4KiUgvXj O5JqucI2g6kqjKQq4iWRKLBFZ2qu2JsdfEjexUyXMm7vTPyPTS3bb7EreRxxxN5d gdfL3HLx8rpAfMFmQmCVPaRSJ2FANFVpQ40JLphyDJ/HlJXjmmcAFFq/wDuiz0VG JjA+71EOXoqJV6FAKzEfRk5hLlhctoFHpBtKPi3DWOjl2CuSHWQB+7XWNGxdqhH9 XG2auEVfdKXXmrfM6OjYnWCVs8ZlDPrj3/E4uVOH7t2l0oy0Q0/kiBjIMxwpROgG iEg1I+aie4JolGK1YTx0MBN/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqoUb2ViI pHncM5AP8L3HcDMqjIYwHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJjQSeBhXfSKJd8SZdnJMP3uK7wBdBuKufYjQgewHTP49ZYoJUDrWm0M A5DhFGY5/oAem8w+jfoW8NcuvGtAYTIt3ekACXeVQH0Zy9pQRkcI9pPKUgtSnEI/ YRaIZF0c2D4dcDpr0+3VXOyiW8DKilqg+adDpzLJJELbzp3Q+yFdVUOm+kMmfpi0 pY2BFPQXlRNIru0KJp8QMwWFZyLhBF7iI8KzRiXTF2PYbWOGaW8vnr6YKNyhbWe4 p/dAb+OAQh6sH2S6ODTFsT9AAQ69ZuYb/ncSDymucM0ja/DL8o6bHqqNhvW7RCh+ P+uMTcPYi3Vh2vpCyOngD1W70owk5lA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:13:04 2025 by rpki-client