$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json) Hash identifier: 9NBklcEE4B2UhjF8epD8fIruSmd810c7L8xUV/la3js= Subject key identifier: 17:DA:53:7F:9C:38:9C:9B:B9:3C:15:B7:02:9C:B2:BC:12:4C:47:0C Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft Manifest number: 72 Signing time: Sat 23 Aug 2025 07:06:00 +0000 Manifest this update: Sat 23 Aug 2025 07:05:59 +0000 Manifest next update: Sat 30 Aug 2025 07:05:59 +0000 Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: xsnEWn8Je22/htr3BryjClKQg5bgPww+ZKNR88hsrWY=) 2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Validity Not Before: Aug 23 07:05:59 2025 GMT Not After : Aug 30 07:05:59 2025 GMT Subject: CN=68a96858-bc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:53:0e:76:63:6c:34:7f:90:74:e7:e4:17:a2: ca:49:72:cf:1f:38:5a:d2:23:df:59:19:24:bb:d0: b2:8f:7c:f9:e2:10:4e:d7:39:ec:8f:c9:ec:60:c6: 9d:ff:82:a0:19:fa:dc:27:da:0c:83:f8:0f:14:77: df:96:0e:3c:33:7e:d6:5f:04:3a:35:f1:63:00:c6: df:e6:cf:67:2c:86:d9:11:91:53:a0:a7:21:d3:1b: b0:28:ea:af:d5:0e:7b:03:a7:fc:0f:f6:7b:37:75: 1d:9d:02:1a:d3:43:4f:fb:52:4f:4e:20:89:03:4c: 46:2b:ef:19:0a:60:b0:a1:ce:91:0c:8a:6a:36:55: bf:b2:77:e7:24:b5:87:6e:d0:b7:32:7a:23:b2:02: b7:f2:aa:87:52:77:70:81:55:b1:02:09:14:f6:52: f8:90:53:30:22:82:d3:7d:af:f3:f6:b0:8b:1a:c1: 1a:d5:38:8f:79:23:35:ad:e0:ff:14:6b:f5:2f:be: f1:e9:25:83:d5:10:97:9c:d0:f6:ba:0f:c0:c0:82: 10:57:f5:2e:ff:17:ec:9d:2b:b0:44:59:99:c0:1e: 28:89:18:f3:d3:b6:d4:cb:0a:02:6e:2f:f3:fc:8a: 54:21:61:85:b1:4e:19:1e:7b:00:d0:25:1f:07:45: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:53:7F:9C:38:9C:9B:B9:3C:15:B7:02:9C:B2:BC:12:4C:47:0C X509v3 Authority Key Identifier: keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c7:1a:85:2a:a9:eb:7c:39:89:90:52:9b:03:ab:15:7c:43: b2:76:09:5a:a4:07:e4:27:be:40:77:32:e8:ac:41:12:8a:76: d4:e1:36:11:1d:b5:a8:74:1c:7e:4c:6c:31:63:1b:39:df:b9: f6:1e:a4:8b:a3:b1:12:66:74:c3:7d:21:60:e7:a2:10:67:b0: 00:06:8f:6f:06:c6:06:d4:76:f7:16:f5:d7:86:75:a2:d7:2a: bb:f6:ae:c7:5c:2d:2e:12:fd:94:01:ee:24:01:38:3d:be:7a: 60:d3:49:bc:31:dd:88:6c:89:57:1f:ee:53:29:e0:e8:a1:09: 1a:29:9d:82:62:f3:96:b3:79:32:5e:9f:23:97:c4:43:71:63: 83:2b:8b:79:3f:dc:df:83:ec:50:cb:03:a3:92:b6:1f:25:37: 54:a4:05:98:f6:37:36:25:a4:53:0a:bf:be:cc:9d:ea:5f:b1: 21:b4:f8:69:b4:b9:06:4d:c1:a6:4e:fa:8a:78:b1:11:99:c1: bc:f4:a3:b2:55:94:b5:62:ec:86:0b:25:b2:36:ac:b2:20:03: bf:53:1f:aa:e1:b5:67:49:33:40:ac:44:3c:93:4c:21:fd:10: ab:5e:d7:61:eb:9e:34:fa:d5:39:6d:b3:46:56:71:68:b5:6f: b6:3c:45:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTY2MDExMC8GA1UEBRMoNENCMEI5NUI0QkRDMjMzMTRGMjgzRUY3MzlBOTZBN0M2 NThDMEE2QzAeFw0yNTA4MjMwNzA1NTlaFw0yNTA4MzAwNzA1NTlaMBgxFjAUBgNV BAMTDTY4YTk2ODU4LWJjMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqUw52Y2w0f5B05+QXospJcs8fOFrSI99ZGSS70LKPfPniEE7XOeyPyexgxp3/ gqAZ+twn2gyD+A8Ud9+WDjwzftZfBDo18WMAxt/mz2cshtkRkVOgpyHTG7Ao6q/V DnsDp/wP9ns3dR2dAhrTQ0/7Uk9OIIkDTEYr7xkKYLChzpEMimo2Vb+yd+cktYdu 0LcyeiOyArfyqodSd3CBVbECCRT2UviQUzAigtN9r/P2sIsawRrVOI95IzWt4P8U a/UvvvHpJYPVEJec0Pa6D8DAghBX9S7/F+ydK7BEWZnAHiiJGPPTttTLCgJuL/P8 ilQhYYWxThkeewDQJR8HRR/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9pTf5w4 nJu5PBW3ApyyvBJMRwwwHwYDVR0jBBgwFoAUTLC5W0vcIzFPKD73OalqfGWMCmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjYwLzAxQzUyQTMwRDI0 MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExDNVcwdmNJekZQS0Q3M09hbHFmR1dNQ213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjYwLzAxQzUyQTMwRDI0MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpG UEtENzNPYWxxZkdXTUNtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3HGoUqqet8OYmQUpsDqxV8Q7J2CVqkB+QnvkB3MuisQRKKdtThNhEd tah0HH5MbDFjGznfufYepIujsRJmdMN9IWDnohBnsAAGj28GxgbUdvcW9deGdaLX Krv2rsdcLS4S/ZQB7iQBOD2+emDTSbwx3YhsiVcf7lMp4OihCRopnYJi85azeTJe nyOXxENxY4Mri3k/3N+D7FDLA6OSth8lN1SkBZj2NzYlpFMKv77MnepfsSG0+Gm0 uQZNwaZO+op4sRGZwbz0o7JVlLVi7IYLJbI2rLIgA79TH6rhtWdJM0CsRDyTTCH9 EKte12HrnjT61Tlts0ZWcWi1b7Y8RdQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:49 2025 by rpki-client