$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft File: tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json) Hash identifier: OAmQiL5YwTOd5Gn18nNVpnY5xz4BKi6mBa3I4LcroDc= Subject key identifier: D9:50:48:7D:CE:14:70:88:A0:7A:3C:39:37:DC:3A:FC:D6:C9:21:A5 Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 Certificate issuer: /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft Manifest number: 01B3 Signing time: Sat 05 Jul 2025 03:26:36 +0000 Manifest this update: Sat 05 Jul 2025 03:26:35 +0000 Manifest next update: Sat 12 Jul 2025 03:26:35 +0000 Files and hashes: 1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: AbfaXWpkx6CX/JV6RSndn4bf/ODJ1R96oZnQ6lVN2jw=) 2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: +f458BpYNQXJWNiE1S64iQtoNN+WOZY8faBLRWwapzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Validity Not Before: Jul 5 03:26:35 2025 GMT Not After : Jul 12 03:26:35 2025 GMT Subject: CN=68689b6b-caf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:d8:57:c9:e7:40:65:48:2e:6a:aa:c8:e1: e8:ab:2a:24:4d:24:78:42:60:61:3d:98:1f:39:ce: 64:bf:95:3b:fe:03:e7:65:6d:6e:aa:e9:c4:87:e0: 0f:97:b8:49:92:7a:ac:6f:c1:90:22:82:5a:da:5e: 18:d6:15:12:dd:3f:66:4d:98:97:09:cf:6d:0a:fd: f4:1d:69:d4:43:5b:19:b3:94:10:1d:8c:41:c7:56: ef:df:15:ce:dd:16:1b:92:09:be:9b:69:69:c0:40: 93:49:03:fb:45:67:f2:17:d5:a8:3d:da:bf:5a:ae: 06:8f:3b:0e:2d:3e:ef:2e:c9:5e:ca:16:8f:ad:12: 25:2a:5f:a8:31:60:79:8d:cf:06:5c:94:d3:92:cf: 23:d1:df:9c:c7:9e:34:26:f3:8b:0a:74:4e:cd:0f: ea:3f:8f:27:bb:d8:b0:d5:18:e0:cc:c4:f3:8f:dc: c2:a9:fd:ed:e9:ea:71:4c:04:2e:f5:e7:9f:37:51: b1:e2:eb:9c:ca:a5:fa:65:25:09:c4:df:2a:a1:67: 42:a9:f0:08:8f:4b:d2:db:09:02:52:17:16:4a:0b: 08:f0:70:b3:42:d7:ea:dd:be:a5:e3:b7:84:40:51: ae:7b:11:ce:fe:18:cd:d6:22:ce:f4:6a:d8:ac:38: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:50:48:7D:CE:14:70:88:A0:7A:3C:39:37:DC:3A:FC:D6:C9:21:A5 X509v3 Authority Key Identifier: keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:23:66:5b:e7:e0:5e:9d:a7:d4:9c:08:ec:f7:fc:06:96:fe: d7:38:6e:8c:a4:37:c2:d1:1f:b6:84:b8:b1:b5:33:3c:3d:a3: bd:f0:cf:c0:1d:37:6e:ad:f0:bc:1e:65:43:8d:7b:94:2b:51: a9:15:89:b3:ef:43:0c:7c:5f:00:e2:94:25:31:b5:cb:e9:2a: 7b:c1:91:6b:17:fd:75:c5:31:d9:67:dd:1c:4f:34:a3:7d:c7: 8a:fe:82:a3:16:f1:83:31:d5:ec:54:79:e4:09:2b:d8:bc:6f: 8d:dd:56:12:8c:2d:f9:aa:e7:b3:d2:03:3b:66:3c:1c:91:d5: aa:15:1a:a2:c8:34:b5:be:94:64:ab:cd:30:dc:74:e1:6e:ee: b6:48:49:df:92:4b:fa:d8:8e:8c:5a:26:57:09:9e:96:80:5c: 5d:a5:65:42:5d:b8:d5:de:01:a3:44:13:2f:64:ba:9f:6c:48: b6:61:eb:44:24:f0:ad:3a:92:e6:c9:ee:7e:2d:4f:b4:d2:63: dd:42:d0:69:86:af:db:36:32:ee:9c:60:ec:1d:bf:9b:71:da: 1f:71:fd:b3:f4:97:f6:36:12:6f:00:26:7a:87:66:11:e3:1e: 94:82:27:d8:4c:97:fd:a3:fa:49:8a:91:5a:e9:35:0f:56:fb: d2:7a:e8:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2OEIxMTAvBgNVBAUTKEI1RTlEREM2QkYwOUY4OTQ1ODU1NjA4NzQ0MkQ5NDhD NDQwMzQ1MzAwHhcNMjUwNzA1MDMyNjM1WhcNMjUwNzEyMDMyNjM1WjAYMRYwFAYD VQQDEw02ODY4OWI2Yi1jYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zHYV8nnQGVILmqqyOHoqyokTSR4QmBhPZgfOc5kv5U7/gPnZW1uqunEh+AP l7hJknqsb8GQIoJa2l4Y1hUS3T9mTZiXCc9tCv30HWnUQ1sZs5QQHYxBx1bv3xXO 3RYbkgm+m2lpwECTSQP7RWfyF9WoPdq/Wq4GjzsOLT7vLsleyhaPrRIlKl+oMWB5 jc8GXJTTks8j0d+cx540JvOLCnROzQ/qP48nu9iw1RjgzMTzj9zCqf3t6epxTAQu 9eefN1Gx4uucyqX6ZSUJxN8qoWdCqfAIj0vS2wkCUhcWSgsI8HCzQtfq3b6l47eE QFGuexHO/hjN1iLO9GrYrDgRRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlQSH3O FHCIoHo8OTfcOvzWySGlMB8GA1UdIwQYMBaAFLXp3ca/CfiUWFVgh0QtlIxEA0Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4Qi8xRjdCMUQwOEMz OEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1KUllWV0NIUkMyVWpFUURS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RlbmR4cjhKLUpSWVZXQ0hSQzJVakVRRFJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4Qi8xRjdCMUQwOEMzOEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1K UllWV0NIUkMyVWpFUURSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByI2Zb5+BenafUnAjs9/wGlv7XOG6MpDfC0R+2hLixtTM8PaO98M/A HTdurfC8HmVDjXuUK1GpFYmz70MMfF8A4pQlMbXL6Sp7wZFrF/11xTHZZ90cTzSj fceK/oKjFvGDMdXsVHnkCSvYvG+N3VYSjC35quez0gM7ZjwckdWqFRqiyDS1vpRk q80w3HThbu62SEnfkkv62I6MWiZXCZ6WgFxdpWVCXbjV3gGjRBMvZLqfbEi2YetE JPCtOpLmye5+LU+00mPdQtBphq/bNjLunGDsHb+bcdofcf2z9Jf2NhJvACZ6h2YR 4x6UgifYTJf9o/pJipFa6TUPVvvSeugK -----END CERTIFICATE-----Generated at Sat Jul 5 11:29:15 2025 by rpki-client