$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: 4i4dRf8nZmQYbD3CdkoOXpyJNQvj5plc7JZ//2utUAc= Subject key identifier: BC:88:2C:BB:75:B4:AA:D4:FF:01:63:2C:CA:08:A8:26:36:3B:27:67 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0CCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0CC4 Signing time: Fri 22 Aug 2025 18:15:06 +0000 Manifest this update: Fri 22 Aug 2025 18:15:05 +0000 Manifest next update: Fri 29 Aug 2025 18:15:05 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: t9JdOivZIbvJRRqvXHZHwhRnLiOjN0qe+l/C2VucK4c=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Aug 22 18:15:05 2025 GMT Not After : Aug 29 18:15:05 2025 GMT Subject: CN=68a8b3aa-8371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:67:11:7b:95:22:81:3d:fd:5a:cd:43:fe:b8: ef:8d:91:4e:6d:3c:7e:59:e1:08:04:62:65:94:2b: 27:19:47:ce:af:91:4e:35:6d:a4:b2:f2:ff:2e:28: 5a:fb:ee:64:95:64:fe:ea:c5:9d:9d:76:aa:15:dd: 00:e5:aa:ad:04:21:85:b5:6c:88:aa:67:41:cd:de: fb:5e:f3:42:90:65:8a:bc:1e:43:8f:85:50:2c:2c: 24:8e:d2:ba:42:a2:47:5c:47:e1:7b:b8:00:56:11: 40:36:f0:9a:1d:fa:62:e3:61:f9:8e:8f:52:03:80: 10:fa:b8:6b:dc:90:34:ac:cf:d6:bc:c3:34:40:77: fc:4d:a7:6c:7a:16:7b:43:10:a4:af:32:75:41:a1: 12:9a:64:4f:34:6b:39:02:0d:c5:c2:fc:74:23:c5: da:d7:10:69:d7:b6:bf:d8:dd:da:6d:79:95:47:e3: ce:c9:d7:98:b1:5c:d2:fc:f2:74:dd:b1:48:6d:37: 2f:e7:1c:ef:04:44:a2:53:de:92:44:b7:7e:3a:e9: 47:11:24:2d:d3:39:10:d7:9c:2c:44:6b:59:2f:88: 32:20:ec:f7:c3:30:f5:66:c3:d7:67:59:e5:33:cf: 14:55:70:0f:c8:c4:9f:21:d6:9c:81:db:0d:70:60: d0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:88:2C:BB:75:B4:AA:D4:FF:01:63:2C:CA:08:A8:26:36:3B:27:67 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:06:3d:57:cf:fc:9c:fd:54:8e:c5:3d:7b:42:79:b3:62:05: 03:b4:21:7e:80:b2:69:f8:b8:ef:64:e8:71:99:26:42:e0:24: b6:47:52:73:ec:c8:98:a4:07:9b:a2:31:64:dc:49:a8:97:75: 2e:75:8a:ba:35:c1:e1:43:2a:ef:83:80:2d:46:bb:42:d1:83: 02:20:ba:99:6e:8d:be:71:75:d8:71:25:26:76:e4:17:97:a5: 58:a5:63:3e:3a:73:e4:b5:f4:14:ed:62:9a:4f:d3:12:2c:b7: 49:f8:72:7e:f2:9e:57:af:12:53:4d:2e:9a:f6:8e:ce:94:3c: 63:2b:02:93:64:9f:64:3b:66:f4:67:3d:27:b9:84:2c:62:87: 4e:34:b9:8f:7d:42:a2:73:a7:3a:f1:c5:a1:c6:67:c0:25:27: 56:7f:b1:ce:89:29:ad:77:7c:9f:d6:fa:29:99:41:d7:ab:35: fe:40:9e:c6:d8:ef:8f:b6:22:25:f5:6c:11:97:1b:4d:92:3d: 75:c3:04:bf:ed:91:4c:05:21:18:00:cc:83:da:ac:49:b2:b0: c6:b3:53:1b:e9:5f:63:7b:3d:9d:b9:61:0d:b1:3f:d7:b3:f3: ec:8e:e9:54:ec:be:06:8a:67:7e:67:f2:36:e3:e7:83:47:67: e0:f0:c1:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUwODIyMTgxNTA1WhcNMjUwODI5MTgxNTA1WjAYMRYwFAYD VQQDEw02OGE4YjNhYS04MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mcRe5UigT39Ws1D/rjvjZFObTx+WeEIBGJllCsnGUfOr5FONW2ksvL/Liha ++5klWT+6sWdnXaqFd0A5aqtBCGFtWyIqmdBzd77XvNCkGWKvB5Dj4VQLCwkjtK6 QqJHXEfhe7gAVhFANvCaHfpi42H5jo9SA4AQ+rhr3JA0rM/WvMM0QHf8TadsehZ7 QxCkrzJ1QaESmmRPNGs5Ag3Fwvx0I8Xa1xBp17a/2N3abXmVR+POydeYsVzS/PJ0 3bFIbTcv5xzvBESiU96SRLd+OulHESQt0zkQ15wsRGtZL4gyIOz3wzD1ZsPXZ1nl M88UVXAPyMSfIdacgdsNcGDQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyILLt1 tKrU/wFjLMoIqCY2OydnMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Bj1Xz/yc/VSOxT17QnmzYgUDtCF+gLJp+LjvZOhxmSZC4CS2R1Jz 7MiYpAebojFk3Emol3UudYq6NcHhQyrvg4AtRrtC0YMCILqZbo2+cXXYcSUmduQX l6VYpWM+OnPktfQU7WKaT9MSLLdJ+HJ+8p5XrxJTTS6a9o7OlDxjKwKTZJ9kO2b0 Zz0nuYQsYodONLmPfUKic6c68cWhxmfAJSdWf7HOiSmtd3yf1vopmUHXqzX+QJ7G 2O+PtiIl9WwRlxtNkj11wwS/7ZFMBSEYAMyD2qxJsrDGs1Mb6V9jez2duWENsT/X s/PsjulU7L4Gimd+Z/I24+eDR2fg8MGt -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:58 2025 by rpki-client