$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: 0wJvygIp7r2g/57iqfjdCQU/Xv1jPsYq3btKKalNhqA= Subject key identifier: 93:C2:36:0D:D7:73:AC:6F:01:36:F2:8F:D0:65:A5:95:A5:3C:7A:42 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 01AF Signing time: Sat 05 Jul 2025 03:27:08 +0000 Manifest this update: Sat 05 Jul 2025 03:27:08 +0000 Manifest next update: Sat 12 Jul 2025 03:27:08 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: ah7Czgace6snc6ltGDxFOk7mtAjDa9t2WTmy6aEHU2Q=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Jul 5 03:27:08 2025 GMT Not After : Jul 12 03:27:08 2025 GMT Subject: CN=68689b8c-e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:db:5d:fc:a9:18:aa:b6:71:cc:30:31:4f: 20:73:3c:f6:dd:ae:09:fb:be:f1:4b:12:6b:b8:6b: ce:f1:a2:75:85:97:2b:4e:38:41:cf:33:ec:bf:57: 7b:d1:1d:de:0d:d1:98:54:85:13:8d:96:47:4b:34: be:51:ef:4e:72:ca:b7:43:db:7e:99:45:c5:2f:bf: ab:bd:d3:37:16:6f:54:3b:41:42:50:f4:24:8a:7c: 13:57:88:a7:50:9f:7b:88:50:dc:2d:24:aa:c7:22: 2a:73:97:6a:d5:68:da:b1:03:40:3e:be:37:f0:dd: 2e:db:0d:72:3c:e2:1d:59:87:32:f6:91:ef:01:64: 99:4a:9e:9b:4e:87:7b:cd:a6:ad:4b:cd:0a:d8:c2: f5:20:2c:38:0c:9c:94:c5:de:a5:60:fe:0c:e4:de: 90:07:16:95:85:49:e1:22:33:2d:92:f8:a2:60:f3: 55:d5:7a:9b:cf:e4:fc:7a:8f:0a:22:28:c0:1e:3c: 12:3f:44:79:c4:cd:99:75:2e:e3:3b:f9:3a:b8:8e: 1c:f8:3d:21:4b:33:9b:80:fb:22:35:ed:60:a3:43: 32:cb:bc:c8:7b:c4:ec:ef:55:a1:f0:fc:fb:1a:48: 7b:62:6b:f2:50:2c:6e:bc:c7:6e:a2:0d:3c:71:63: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C2:36:0D:D7:73:AC:6F:01:36:F2:8F:D0:65:A5:95:A5:3C:7A:42 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ab:2c:b7:f8:06:a7:91:97:cf:5a:97:51:97:d2:0a:34:43: fb:bf:d6:c8:4b:64:50:23:f1:12:34:83:b1:94:cb:5f:95:07: 78:52:05:99:7f:2d:90:47:38:aa:9e:44:8c:01:c7:7e:6e:52: 47:a3:82:a9:c7:72:78:00:27:b2:d4:83:bb:95:37:1c:44:7c: 80:52:c1:ee:8f:11:e8:3c:93:68:8c:9b:6d:14:b1:01:c5:e5: 32:3a:77:4a:51:ac:a9:7e:6b:c6:42:46:09:7a:6f:53:92:57: c5:c9:ea:2b:6e:f2:d6:a2:f6:38:05:69:45:b3:ad:61:c1:e2: 76:ae:36:5e:b1:bd:c0:61:99:9f:9d:3f:55:8c:df:be:54:46: 24:93:df:14:ba:1d:b1:60:04:9e:95:c8:55:91:f6:f3:a5:31: bc:f8:7a:f3:64:74:dc:df:0d:5b:8d:b7:87:6b:d3:df:e4:3f: de:15:ab:88:40:60:9b:f1:c5:dc:2f:4c:2b:d8:07:e0:8c:07: 57:41:8b:49:c9:33:c7:81:6e:2a:5a:44:cc:42:a0:07:43:99: 2b:18:1d:c6:ec:a2:e5:80:9e:17:01:88:e8:55:e2:7a:25:c3: e0:84:37:fc:bc:43:e2:53:43:84:ad:14:97:02:04:c3:78:d2: d4:d5:a1:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUwNzA1MDMyNzA4WhcNMjUwNzEyMDMyNzA4WjAYMRYwFAYD VQQDEw02ODY4OWI4Yy1lNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J7bXfypGKq2ccwwMU8gczz23a4J+77xSxJruGvO8aJ1hZcrTjhBzzPsv1d7 0R3eDdGYVIUTjZZHSzS+Ue9Ocsq3Q9t+mUXFL7+rvdM3Fm9UO0FCUPQkinwTV4in UJ97iFDcLSSqxyIqc5dq1WjasQNAPr438N0u2w1yPOIdWYcy9pHvAWSZSp6bTod7 zaatS80K2ML1ICw4DJyUxd6lYP4M5N6QBxaVhUnhIjMtkviiYPNV1Xqbz+T8eo8K IijAHjwSP0R5xM2ZdS7jO/k6uI4c+D0hSzObgPsiNe1go0Myy7zIe8Ts71Wh8Pz7 Gkh7YmvyUCxuvMduog08cWOJcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPCNg3X c6xvATbyj9BlpZWlPHpCMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqyy3+AankZfPWpdRl9IKNEP7v9bIS2RQI/ESNIOxlMtflQd4UgWZ fy2QRziqnkSMAcd+blJHo4Kpx3J4ACey1IO7lTccRHyAUsHujxHoPJNojJttFLEB xeUyOndKUaypfmvGQkYJem9TklfFyeorbvLWovY4BWlFs61hweJ2rjZesb3AYZmf nT9VjN++VEYkk98Uuh2xYASelchVkfbzpTG8+HrzZHTc3w1bjbeHa9Pf5D/eFauI QGCb8cXcL0wr2AfgjAdXQYtJyTPHgW4qWkTMQqAHQ5krGB3G7KLlgJ4XAYjoVeJ6 JcPghDf8vEPiU0OErRSXAgTDeNLU1aEd -----END CERTIFICATE-----Generated at Sat Jul 5 06:08:28 2025 by rpki-client