$ rpki-client -vvf rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft File: TTExNNGjpXdD2_A2ocHu_FlQPbw.mft (raw, json) Hash identifier: v4B/UjypUWmPcMoi30uL1Dw/ssHM6RDs0KAkg+wmbEQ= Subject key identifier: 01:7A:D6:CE:E2:56:D4:33:51:E1:6E:26:AB:4B:B0:8E:47:4E:DC:8B Authority key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC Certificate issuer: /CN=A91516DE/serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft Manifest number: 42 Signing time: Sat 23 Aug 2025 07:40:43 +0000 Manifest this update: Sat 23 Aug 2025 07:40:43 +0000 Manifest next update: Sat 30 Aug 2025 07:40:43 +0000 Files and hashes: 1: TTExNNGjpXdD2_A2ocHu_FlQPbw.crl (hash: 2Lp2aiY3gEGRhADZDSe2aSINJzG+qb/s2qXn0FF/4uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Validity Not Before: Aug 23 07:40:43 2025 GMT Not After : Aug 30 07:40:43 2025 GMT Subject: CN=68a9707b-0462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:a8:28:2a:f8:cd:0a:ad:4e:6b:9e:14:ef: b9:29:02:02:3b:04:93:a8:38:66:a7:57:7c:c9:4b: c3:ed:c4:13:ea:57:f8:5a:cb:b4:fc:19:ec:12:a1: fe:7b:30:62:83:f8:90:9f:08:e2:28:df:31:c4:7b: 5b:e5:b3:a3:4f:c3:a5:91:08:10:83:5b:98:13:bf: 9e:d7:0a:55:0d:d2:67:39:19:fd:c7:7e:ed:df:80: f7:b1:33:b5:4c:86:d5:e9:d8:dd:89:61:66:06:96: 07:98:ed:7c:43:f0:e3:02:ff:f1:a2:bd:f5:a9:65: bc:62:88:a7:b3:80:3d:c1:4d:94:85:84:95:de:9e: d6:73:c5:ec:d0:fc:39:f9:ec:00:ae:1e:8d:65:24: 2e:10:9e:d0:7c:a2:c5:fd:03:c6:7e:3d:dd:75:f3: 3b:26:53:96:c6:a3:ad:5c:71:63:41:75:04:7a:60: 05:ac:58:07:36:1b:ca:c7:a1:b6:08:dd:4a:b0:26: e1:a0:48:13:68:d8:d9:fb:cb:ae:15:0c:fd:fe:34: 8b:7e:c9:4f:7c:e1:b3:60:55:c2:ee:1c:29:46:63: b2:ad:df:bc:8b:77:40:49:f9:36:df:5b:7b:32:3a: cf:3b:54:e3:8c:ef:3e:21:cc:36:52:a9:3c:55:3b: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:D6:CE:E2:56:D4:33:51:E1:6E:26:AB:4B:B0:8E:47:4E:DC:8B X509v3 Authority Key Identifier: keyid:4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b5:bc:ac:25:b3:10:9d:4c:5f:94:a5:b4:9a:e4:97:73:d0: 35:14:22:a4:83:5a:c2:ae:c7:fa:47:52:6c:92:07:f5:95:52: e4:55:b9:3c:be:83:5e:ac:bc:c1:7d:20:70:a9:77:39:59:c0: 30:99:31:68:5a:b8:54:98:ce:12:09:b3:81:b5:e8:e5:b0:41: 1d:01:e0:8c:8e:3e:2f:ec:c7:bf:e7:a4:07:ac:aa:7c:d4:62: b9:3c:74:18:b6:e4:41:34:24:c3:83:43:10:91:3d:88:68:d6: a2:ac:c5:d3:98:cc:06:be:bd:2e:b4:72:6c:fb:28:18:2c:b2: 05:8d:7c:d5:ee:f0:d5:35:54:b1:24:09:9d:70:47:e6:c4:41: 75:82:fe:a7:ce:c7:33:c1:9a:4f:1d:fa:c2:59:b6:b9:a3:45: 3b:83:8d:b0:7a:9a:6f:06:7d:71:21:25:1e:88:5b:a0:d3:8c: 97:2c:3d:74:15:6b:9d:9d:fb:5b:cf:93:da:3f:0d:94:12:4b: 75:7d:f8:24:d4:16:8b:c3:ef:14:b8:9f:8d:ea:27:ed:12:87: 09:5c:90:07:d5:36:25:3f:cb:23:c4:1c:b8:82:76:be:dd:94: 3e:59:26:8b:a2:50:d1:7e:0b:e0:ef:db:12:00:a4:c0:ec:4b: 96:52:79:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZERTExMC8GA1UEBRMoNEQzMTMxMzREMUEzQTU3NzQzREJGMDM2QTFDMUVFRkM1 OTUwM0RCQzAeFw0yNTA4MjMwNzQwNDNaFw0yNTA4MzAwNzQwNDNaMBgxFjAUBgNV BAMTDTY4YTk3MDdiLTA0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpkqgoKvjNCq1Oa54U77kpAgI7BJOoOGanV3zJS8PtxBPqV/hay7T8GewSof57 MGKD+JCfCOIo3zHEe1vls6NPw6WRCBCDW5gTv57XClUN0mc5Gf3Hfu3fgPexM7VM htXp2N2JYWYGlgeY7XxD8OMC//GivfWpZbxiiKezgD3BTZSFhJXentZzxezQ/Dn5 7ACuHo1lJC4QntB8osX9A8Z+Pd118zsmU5bGo61ccWNBdQR6YAWsWAc2G8rHobYI 3UqwJuGgSBNo2Nn7y64VDP3+NIt+yU984bNgVcLuHClGY7Kt37yLd0BJ+TbfW3sy Os87VOOM7z4hzDZSqTxVO0QxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAXrWzuJW 1DNR4W4mq0uwjkdO3IswHwYDVR0jBBgwFoAUTTExNNGjpXdD2/A2ocHu/FlQPbww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkRFLzM3OURCMDcwMUE4 QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhkRDJfQTJvY0h1X0ZsUVBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFRFeE5OR2pwWGREMl9BMm9jSHVfRmxRUGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkRFLzM3OURCMDcwMUE4QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhk RDJfQTJvY0h1X0ZsUVBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIO1vKwlsxCdTF+UpbSa5Jdz0DUUIqSDWsKux/pHUmySB/WVUuRVuTy+ g16svMF9IHCpdzlZwDCZMWhauFSYzhIJs4G16OWwQR0B4IyOPi/sx7/npAesqnzU Yrk8dBi25EE0JMODQxCRPYho1qKsxdOYzAa+vS60cmz7KBgssgWNfNXu8NU1VLEk CZ1wR+bEQXWC/qfOxzPBmk8d+sJZtrmjRTuDjbB6mm8GfXEhJR6IW6DTjJcsPXQV a52d+1vPk9o/DZQSS3V9+CTUFovD7xS4n43qJ+0ShwlckAfVNiU/yyPEHLiCdr7d lD5ZJouiUNF+C+Dv2xIApMDsS5ZSeYQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:20 2025 by rpki-client