$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: FWNv3kIyd+GtBgsDNfkTpXPW3R8dqmlD/HZbmFM+RT0= Subject key identifier: F1:67:B7:E5:D4:1A:B7:55:E3:73:D8:4E:4E:14:6B:3C:5E:7F:81:93 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 10D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 10CD Signing time: Fri 22 Aug 2025 17:25:18 +0000 Manifest this update: Fri 22 Aug 2025 17:25:18 +0000 Manifest next update: Fri 29 Aug 2025 17:25:18 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: ml0BleWU/1QzuEImefoxOCZo21a7FwA1tx7xwbesPsQ=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4311 (0x10d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Aug 22 17:25:18 2025 GMT Not After : Aug 29 17:25:18 2025 GMT Subject: CN=68a8a7fe-060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:88:43:51:3b:e2:63:89:64:a2:3c:54:c1: f8:d2:ba:18:dc:be:18:99:ba:f4:7a:89:e3:9e:bc: 48:b4:dd:16:18:17:88:54:29:49:e2:77:9c:b8:30: ce:6e:d4:c9:28:8b:5e:32:39:52:30:12:74:72:66: d5:8d:4e:2e:f9:87:74:54:f8:b1:0a:cf:bc:03:90: ea:25:03:ec:82:f3:ad:3a:8c:ce:7a:85:6d:f3:a0: ed:c1:a2:49:02:2b:e4:7e:bb:9e:5c:9c:d3:e7:64: e1:ed:a6:3e:41:11:f8:05:e1:60:4a:8b:49:8b:e2: 7e:96:e8:8d:99:07:71:12:70:79:09:d0:e7:42:c5: b6:ac:21:18:51:69:2a:26:19:35:62:85:b9:39:70: ae:24:8d:36:a8:9c:d2:1a:60:eb:f2:6e:80:57:cb: 4f:52:96:98:6e:36:f0:a0:c9:61:28:18:15:eb:90: 39:3f:d9:1b:c2:d3:63:ee:6c:b7:be:91:bc:6f:0c: 8b:e6:95:46:d6:20:d4:9e:31:fd:ca:d6:c5:e5:1c: 78:63:48:e9:48:e4:40:06:65:76:e0:9b:60:5e:31: 5a:00:da:1f:09:13:7d:25:30:67:9a:63:53:21:99: 4b:ff:35:c2:c6:ba:67:44:72:03:45:a7:79:1f:38: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:B7:E5:D4:1A:B7:55:E3:73:D8:4E:4E:14:6B:3C:5E:7F:81:93 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8b:b8:ca:a9:8c:e9:70:64:64:70:02:94:49:5c:2f:03:2f: b0:41:a1:de:8d:5e:4c:bf:9d:11:98:81:1a:12:99:18:a6:6e: 2f:39:0a:fb:b1:65:38:18:4d:d8:4a:99:97:c4:ad:cd:48:44: 63:cc:87:d0:ca:fe:38:20:cd:23:9e:01:54:fb:24:74:f8:cb: cf:22:96:e2:5b:0c:ef:41:a7:74:3e:ac:f8:e4:e9:98:f3:f5: 9b:e8:0e:cb:0c:57:80:73:ff:32:d1:8e:af:64:a2:48:6c:b0: 1e:b1:ef:6a:91:3e:59:4b:3d:3a:7f:b1:63:49:04:85:2a:b2: 09:99:1a:5c:09:8c:1c:ee:53:fa:53:43:8c:9f:63:3a:b7:97: 46:35:f3:10:98:80:ed:28:73:1e:c1:4e:fe:8c:d2:93:d6:99: 5a:6e:7c:c4:0b:06:8d:0f:e6:1f:2b:63:0a:37:cf:4b:ab:1f: e9:d6:83:ef:a6:b4:f8:a2:f4:e4:b3:d4:5e:7e:dd:8e:59:cd: 9f:44:db:64:7b:c8:38:6b:66:56:d4:a2:14:f3:5b:bb:d9:ac: 8e:8d:bf:27:cd:e3:75:15:06:a3:60:c2:af:4d:1f:27:e3:b1: 2d:e3:a7:3f:70:b5:5c:0e:6f:41:4e:f7:69:bb:93:99:b3:d7: 70:04:46:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwODIyMTcyNTE4WhcNMjUwODI5MTcyNTE4WjAYMRYwFAYD VQQDEw02OGE4YTdmZS0wNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD6IQ1E74mOJZKI8VMH40roY3L4Ymbr0eonjnrxItN0WGBeIVClJ4necuDDO btTJKIteMjlSMBJ0cmbVjU4u+Yd0VPixCs+8A5DqJQPsgvOtOozOeoVt86DtwaJJ AivkfrueXJzT52Th7aY+QRH4BeFgSotJi+J+luiNmQdxEnB5CdDnQsW2rCEYUWkq Jhk1YoW5OXCuJI02qJzSGmDr8m6AV8tPUpaYbjbwoMlhKBgV65A5P9kbwtNj7my3 vpG8bwyL5pVG1iDUnjH9ytbF5Rx4Y0jpSORABmV24JtgXjFaANofCRN9JTBnmmNT IZlL/zXCxrpnRHIDRad5HziuZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFnt+XU GrdV43PYTk4Uazxef4GTMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqi7jKqYzpcGRkcAKUSVwvAy+wQaHejV5Mv50RmIEaEpkYpm4vOQr7 sWU4GE3YSpmXxK3NSERjzIfQyv44IM0jngFU+yR0+MvPIpbiWwzvQad0Pqz45OmY 8/Wb6A7LDFeAc/8y0Y6vZKJIbLAese9qkT5ZSz06f7FjSQSFKrIJmRpcCYwc7lP6 U0OMn2M6t5dGNfMQmIDtKHMewU7+jNKT1plabnzECwaND+YfK2MKN89Lqx/p1oPv prT4ovTks9Reft2OWc2fRNtke8g4a2ZW1KIU81u72ayOjb8nzeN1FQajYMKvTR8n 47Et46c/cLVcDm9BTvdpu5OZs9dwBEYX -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:13 2025 by rpki-client