$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: yEzijiz+V6dzo1uFoedCaMrv3XyiYpg9KkeTiRtLsK4= Subject key identifier: 02:B0:FF:35:27:CF:60:41:C3:77:53:A7:65:C6:DA:CF:FC:07:44:0C Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01E4 Signing time: Sun 20 Jul 2025 16:24:02 +0000 Manifest this update: Sun 20 Jul 2025 16:24:01 +0000 Manifest next update: Sun 27 Jul 2025 16:24:01 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: bQ354AAJJksCvR2FNZn6lp//wvMiMUtPykHgkADayWI=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jul 20 16:24:01 2025 GMT Not After : Jul 27 16:24:01 2025 GMT Subject: CN=687d1821-2929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:3c:93:4e:79:66:a2:e8:73:3e:9b:62:85: 1b:68:76:25:ac:f7:5c:05:5a:b5:96:e3:fd:51:e9: f4:1f:85:db:e9:8e:4a:c9:48:08:5b:90:55:cd:aa: 57:ef:16:41:3c:48:55:b6:7f:d2:75:2c:4e:3b:5c: e0:cb:b6:48:2e:04:b1:80:68:45:39:d0:74:e8:45: 24:5b:8f:48:9d:cb:1b:e0:c9:a9:b4:35:fd:13:d6: b6:3e:32:6f:c5:01:c3:55:5f:5d:1b:4e:76:93:43: d0:07:cb:55:df:b8:9c:b7:03:12:f0:38:42:e0:71: 38:4e:36:ae:25:9d:65:31:fd:97:31:8b:bf:4d:0e: 03:ca:9a:bd:30:8c:11:45:fc:e8:13:da:ae:83:b1: bc:c5:a0:f9:43:e7:18:4e:6e:78:84:8c:ab:84:82: fd:e5:e6:af:6e:d4:b4:20:e3:c2:86:b5:f5:58:4d: 86:81:42:f0:cd:60:ad:56:15:f2:89:c0:7b:7a:9a: cb:90:59:31:d1:b5:6f:1d:e3:95:dd:03:fa:72:7e: e2:22:91:79:a6:3c:d1:f7:b8:c5:23:c3:2d:c7:61: b3:02:08:f4:25:3d:2e:59:47:44:1b:f2:12:4f:f2: 22:20:6a:8e:37:ad:7d:f0:59:6e:bb:7e:07:d4:24: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:FF:35:27:CF:60:41:C3:77:53:A7:65:C6:DA:CF:FC:07:44:0C X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:3e:1e:74:79:48:2e:54:a8:1c:5c:2c:bf:f7:ea:91:82:da: 7b:3f:69:ae:11:e6:f4:59:cd:cc:cc:54:1b:16:18:ee:9f:58: 41:5e:31:45:76:e4:e3:0e:34:9d:9f:40:d4:8e:30:2d:41:a4: 95:e1:58:f5:81:71:ca:88:98:46:f8:b4:9a:00:32:ce:36:52: c6:b8:17:13:bc:82:df:4a:39:2d:02:dc:0f:6f:d2:a7:ed:63: 69:4b:99:be:62:cf:8d:fb:8a:19:af:68:25:1b:e0:ff:0a:25: 75:b6:8f:7c:a1:1d:da:1f:bd:7a:ae:b3:c4:26:e7:60:89:01: 73:a5:ec:b1:19:2d:a9:f5:b8:89:08:aa:26:ae:54:4b:4b:73: 73:8d:a2:90:25:6a:2d:4a:99:15:9b:74:d1:ff:70:a9:a0:4c: 81:49:18:96:99:42:99:9d:f7:bb:9f:e7:31:5c:b9:7d:05:9a: 45:90:26:18:70:dd:c6:f1:45:f9:da:62:10:09:fb:f7:c5:13: 09:d5:38:f0:3c:a5:39:e9:fc:4f:dc:0a:fb:d8:de:f2:de:77: 1b:83:58:b8:7b:38:c7:41:fe:bf:30:78:71:05:6e:27:ee:0b: ca:3f:e9:d6:ff:73:6f:02:8f:b1:35:a6:ed:bd:8c:2e:33:e7: 80:be:d1:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwNzIwMTYyNDAxWhcNMjUwNzI3MTYyNDAxWjAYMRYwFAYD VQQDEw02ODdkMTgyMS0yOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFg8k055ZqLocz6bYoUbaHYlrPdcBVq1luP9Uen0H4Xb6Y5KyUgIW5BVzapX 7xZBPEhVtn/SdSxOO1zgy7ZILgSxgGhFOdB06EUkW49Incsb4MmptDX9E9a2PjJv xQHDVV9dG052k0PQB8tV37ictwMS8DhC4HE4TjauJZ1lMf2XMYu/TQ4Dypq9MIwR RfzoE9qug7G8xaD5Q+cYTm54hIyrhIL95eavbtS0IOPChrX1WE2GgULwzWCtVhXy icB7eprLkFkx0bVvHeOV3QP6cn7iIpF5pjzR97jFI8Mtx2GzAgj0JT0uWUdEG/IS T/IiIGqON6198Fluu34H1CSMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKw/zUn z2BBw3dTp2XG2s/8B0QMMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVPh50eUguVKgcXCy/9+qRgtp7P2muEeb0Wc3MzFQbFhjun1hBXjFF duTjDjSdn0DUjjAtQaSV4Vj1gXHKiJhG+LSaADLONlLGuBcTvILfSjktAtwPb9Kn 7WNpS5m+Ys+N+4oZr2glG+D/CiV1to98oR3aH716rrPEJudgiQFzpeyxGS2p9biJ CKomrlRLS3NzjaKQJWotSpkVm3TR/3CpoEyBSRiWmUKZnfe7n+cxXLl9BZpFkCYY cN3G8UX52mIQCfv3xRMJ1TjwPKU56fxP3Ar72N7y3ncbg1i4ezjHQf6/MHhxBW4n 7gvKP+nW/3NvAo+xNabtvYwuM+eAvtGN -----END CERTIFICATE-----Generated at Sun Jul 20 20:40:52 2025 by rpki-client