$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: VfaD3Es9G179WzIvk/7gV+Cw1k+gXoZxPqpIu65qVIY= Subject key identifier: 73:B1:B2:7E:2B:74:00:F7:23:D9:C1:F8:17:39:21:73:09:F5:D0:E8 Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 0208 Signing time: Sat 23 Aug 2025 02:25:43 +0000 Manifest this update: Sat 23 Aug 2025 02:25:43 +0000 Manifest next update: Sat 30 Aug 2025 02:25:43 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: UD3pkWBjFtZXj979qTOiBWj+qCD7cUFf+Qdh6CQsUy8=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Aug 23 02:25:43 2025 GMT Not After : Aug 30 02:25:43 2025 GMT Subject: CN=68a926a7-187e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:42:de:71:4c:80:8c:75:7d:6e:8a:1d:9a: 14:24:87:45:4c:99:80:0c:47:3e:91:96:e6:67:e3: 43:23:c1:9c:e1:e9:87:9b:35:93:35:50:17:40:0a: 42:1e:3a:13:1f:88:ee:a3:d0:34:d5:cc:5e:6b:ea: 61:31:8c:9e:af:d9:b0:ff:ca:8a:73:aa:2c:8c:81: 43:01:ef:5f:5e:c3:8c:4f:32:4f:2a:ce:36:36:c9: 4d:cc:c5:88:13:8b:e2:3b:bc:81:c6:4f:bc:87:18: 6f:99:1e:23:5a:2b:0f:d9:dd:5a:fe:21:1b:b4:52: 03:a7:9e:01:c2:fa:42:4f:17:8e:08:00:1e:82:de: b7:a7:86:ee:a5:e6:20:bc:ed:b7:9d:8f:ca:9f:d6: 9b:3c:d5:34:84:d4:8a:29:76:ce:01:a6:9c:48:36: 87:da:1a:33:52:04:91:a1:02:84:6a:75:b2:87:97: 87:43:db:28:da:46:85:fb:4c:0b:a1:a5:b2:54:10: f9:d1:64:e8:22:09:d8:99:c6:07:87:ba:7c:d8:3b: 11:f5:ea:c7:f0:9b:22:9d:70:80:73:11:e4:8b:08: 01:fa:87:8d:68:11:b3:e7:f0:1b:aa:e8:8b:2d:d6: f6:70:5c:4c:8f:cc:52:86:69:3d:0a:59:f0:76:00: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B1:B2:7E:2B:74:00:F7:23:D9:C1:F8:17:39:21:73:09:F5:D0:E8 X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:c9:0d:8f:7b:dc:51:7b:54:22:2f:59:11:00:23:3d:08: 57:34:7f:04:0c:53:9e:3a:1f:5e:f4:1f:75:23:f4:8e:97:27: 16:a9:e6:8a:45:ef:e0:76:65:5a:ea:9a:1d:67:03:23:9a:70: 8b:d0:d8:1d:3f:ef:b6:f9:5b:b0:43:4b:0c:be:b7:31:63:24: 2d:c6:53:dd:7f:50:8a:fa:2c:2a:61:8a:0f:6f:0d:14:e5:06: 83:42:56:66:36:a4:70:b6:69:d7:7b:8b:a3:2b:49:38:33:c6: 68:25:40:dc:b0:7c:4b:c9:63:09:67:94:de:ac:20:bc:5e:01: ef:c8:de:05:97:47:a3:ec:1b:77:4f:a9:36:7d:da:56:86:9b: 11:5d:66:a4:8d:ab:a0:47:ef:2e:e9:dd:16:51:64:9f:94:28: 5c:54:49:1b:66:9b:33:aa:78:64:56:04:4f:68:82:29:df:ae: b7:8a:f8:48:6b:cc:a6:c4:3b:fc:e1:3a:0e:3a:da:aa:26:14: a1:d3:84:12:13:20:cb:91:e8:33:3b:87:f4:26:6f:20:c8:24: 61:47:dd:3d:30:e8:f4:63:09:c3:81:cb:43:a2:d6:23:08:aa: 75:38:6f:ab:3f:8c:7d:27:c5:92:5c:21:27:49:21:81:db:82: 43:5c:cf:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjUwODIzMDIyNTQzWhcNMjUwODMwMDIyNTQzWjAYMRYwFAYD VQQDEw02OGE5MjZhNy0xODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVNC3nFMgIx1fW6KHZoUJIdFTJmADEc+kZbmZ+NDI8Gc4emHmzWTNVAXQApC HjoTH4juo9A01cxea+phMYyer9mw/8qKc6osjIFDAe9fXsOMTzJPKs42NslNzMWI E4viO7yBxk+8hxhvmR4jWisP2d1a/iEbtFIDp54BwvpCTxeOCAAegt63p4bupeYg vO23nY/Kn9abPNU0hNSKKXbOAaacSDaH2hozUgSRoQKEanWyh5eHQ9so2kaF+0wL oaWyVBD50WToIgnYmcYHh7p82DsR9erH8JsinXCAcxHkiwgB+oeNaBGz5/AbquiL Ldb2cFxMj8xShmk9ClnwdgDsTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOxsn4r dAD3I9nB+Bc5IXMJ9dDoMB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4oMkNj3vcUXtUIi9ZEQAjPQhXNH8EDFOeOh9e9B91I/SOlycWqeaK Re/gdmVa6podZwMjmnCL0NgdP++2+VuwQ0sMvrcxYyQtxlPdf1CK+iwqYYoPbw0U 5QaDQlZmNqRwtmnXe4ujK0k4M8ZoJUDcsHxLyWMJZ5TerCC8XgHvyN4Fl0ej7Bt3 T6k2fdpWhpsRXWakjaugR+8u6d0WUWSflChcVEkbZpszqnhkVgRPaIIp3663ivhI a8ymxDv84ToOOtqqJhSh04QSEyDLkegzO4f0Jm8gyCRhR909MOj0YwnDgctDotYj CKp1OG+rP4x9J8WSXCEnSSGB24JDXM/I -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:14 2025 by rpki-client