$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: 2ZnDLs9mSXadSfmr1MPD+ulQ8c61ugZgz060/emJoq4= Subject key identifier: C3:4A:F1:E6:76:B7:F5:F0:91:45:8D:53:E6:CE:C6:E4:4A:5A:A4:67 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 07FA Signing time: Fri 22 Aug 2025 21:02:38 +0000 Manifest this update: Fri 22 Aug 2025 21:02:37 +0000 Manifest next update: Fri 29 Aug 2025 21:02:37 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: ZCC4FlhNzU0Pp8Fc0+8LbB0YgAPSLaIyQQtPmnWjGCI=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: r2HES/7CUo40HGeXhmTY61PHC2lO/T7eeHbuuq9LOdc=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: rEOJzqlAnVBPeZC3MOxbXAE7DFN8lpEBOlDK4eG1ZzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Aug 22 21:02:37 2025 GMT Not After : Aug 29 21:02:37 2025 GMT Subject: CN=68a8daed-8add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:68:c0:67:b9:7e:e2:98:b2:47:ac:e3:b3: f4:10:b6:7a:16:d9:0a:1b:38:4c:be:5f:f4:61:87: 63:75:ca:f0:31:ce:b8:12:4b:24:ed:a2:2b:f4:33: 48:90:72:16:10:c9:5a:17:ee:1c:45:ba:73:e0:b4: f9:f8:9e:a7:85:4a:ef:f5:4e:0d:91:90:5b:e5:99: 23:28:4a:7a:86:66:12:c5:52:9f:ca:4b:c4:54:c0: 3d:8f:f1:6f:32:42:df:de:42:74:10:ec:d3:b4:2c: 4f:84:ec:1d:57:44:25:6c:3e:c1:df:24:ee:16:a5: 08:f9:b3:50:e0:30:e5:0c:b2:ce:92:29:f2:4a:03: 65:5d:db:96:42:5e:ac:03:e6:70:e9:2d:53:51:fc: 26:3d:41:16:1b:cf:54:09:68:36:91:40:c7:ee:53: ab:41:95:61:13:51:66:f6:4b:7f:61:43:46:b7:9e: 59:bf:e6:e8:f2:0f:9e:d0:b6:cc:4f:ed:f5:06:d3: cd:62:c0:30:13:aa:4f:25:04:22:a6:82:57:cf:7e: 4a:82:5b:e1:d0:a7:39:f0:ef:64:b3:73:76:c5:d7: 27:2b:58:6b:c4:72:10:91:db:b5:57:75:c5:78:44: 82:09:fe:00:16:18:96:aa:3b:4b:ac:78:3e:5a:eb: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:F1:E6:76:B7:F5:F0:91:45:8D:53:E6:CE:C6:E4:4A:5A:A4:67 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6f:00:c6:73:e1:b0:ac:be:36:fd:07:39:43:32:82:15:89: f0:77:d4:e1:04:64:ea:87:ff:40:02:b6:6f:e1:f8:d1:93:b9: cd:f2:e2:50:96:8f:df:0f:ff:dc:fb:d7:88:a9:7a:a2:b2:ff: 32:cf:99:0d:71:e7:29:d1:0d:a4:49:af:34:7d:b6:88:7b:bb: c7:9c:ca:ac:fa:d5:e4:0f:0d:c1:f3:af:ef:e2:eb:3a:0e:49: 9e:7c:9b:4c:68:38:fb:3c:79:ae:a6:d8:f7:bb:2e:af:57:f6: 67:05:9b:e7:60:75:3c:e8:e7:b6:cf:2a:65:29:c0:8f:23:40: b0:c3:47:c7:55:16:34:10:93:3d:31:2e:0f:58:e6:cb:60:f2: e0:fd:11:db:7c:05:3d:05:08:b8:f8:a2:74:13:54:e1:c3:e8: 27:a0:9a:49:9e:df:72:a4:d7:2b:dd:32:c2:cc:3c:96:ed:ff: 4e:a0:d0:fb:d7:71:84:74:87:0a:8e:1f:8d:ac:27:12:9b:35: 6a:13:86:61:e8:c0:8d:2f:0d:c8:05:13:db:90:34:26:da:cc: 62:0d:fc:73:4f:09:38:85:10:f0:31:19:d6:e2:1a:2e:1c:fc: 09:91:7d:62:bf:6f:c3:fa:d3:52:20:a7:1e:5a:32:4d:4a:0a: e4:40:13:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwODIyMjEwMjM3WhcNMjUwODI5MjEwMjM3WjAYMRYwFAYD VQQDEw02OGE4ZGFlZC04YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N5owGe5fuKYskes47P0ELZ6FtkKGzhMvl/0YYdjdcrwMc64Eksk7aIr9DNI kHIWEMlaF+4cRbpz4LT5+J6nhUrv9U4NkZBb5ZkjKEp6hmYSxVKfykvEVMA9j/Fv MkLf3kJ0EOzTtCxPhOwdV0QlbD7B3yTuFqUI+bNQ4DDlDLLOkinySgNlXduWQl6s A+Zw6S1TUfwmPUEWG89UCWg2kUDH7lOrQZVhE1Fm9kt/YUNGt55Zv+bo8g+e0LbM T+31BtPNYsAwE6pPJQQipoJXz35Kglvh0Kc58O9ks3N2xdcnK1hrxHIQkdu1V3XF eESCCf4AFhiWqjtLrHg+Wut+CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNK8eZ2 t/XwkUWNU+bOxuRKWqRnMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANbwDGc+GwrL42/Qc5QzKCFYnwd9ThBGTqh/9AArZv4fjRk7nN8uJQ lo/fD//c+9eIqXqisv8yz5kNcecp0Q2kSa80fbaIe7vHnMqs+tXkDw3B86/v4us6 DkmefJtMaDj7PHmuptj3uy6vV/ZnBZvnYHU86Oe2zyplKcCPI0Cww0fHVRY0EJM9 MS4PWObLYPLg/RHbfAU9BQi4+KJ0E1Thw+gnoJpJnt9ypNcr3TLCzDyW7f9OoND7 13GEdIcKjh+NrCcSmzVqE4Zh6MCNLw3IBRPbkDQm2sxiDfxzTwk4hRDwMRnW4hou HPwJkX1iv2/D+tNSIKceWjJNSgrkQBMn -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:20 2025 by rpki-client