$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft File: tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json) Hash identifier: diIGxT3LwoNhO/blq2EKj1sb8/bNPnQ5nwstjC7i7FU= Subject key identifier: 1C:58:0D:B3:25:8C:E5:9C:79:02:B8:39:92:30:0D:8E:19:54:70:72 Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 Certificate issuer: /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft Manifest number: 01CC Signing time: Sat 23 Aug 2025 03:00:36 +0000 Manifest this update: Sat 23 Aug 2025 03:00:36 +0000 Manifest next update: Sat 30 Aug 2025 03:00:36 +0000 Files and hashes: 1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: T5S5hSqeVYYb5TOPZJD+Qncd0hu4Yr8658tALpMVqCA=) 2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: +f458BpYNQXJWNiE1S64iQtoNN+WOZY8faBLRWwapzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Validity Not Before: Aug 23 03:00:36 2025 GMT Not After : Aug 30 03:00:36 2025 GMT Subject: CN=68a92ed4-5d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:ff:c8:44:0e:2a:72:b7:dd:5b:b2:66:59: 96:74:f2:8c:cb:fd:da:88:94:57:5e:f6:fd:ea:e0: fb:b0:bf:e8:ca:79:a8:0d:4c:c2:12:99:0b:4e:f3: cb:2e:79:57:b8:3c:58:02:a9:8c:95:92:c4:e6:ff: ad:7b:42:ac:5c:89:b2:cc:8d:6a:f6:53:27:9a:26: ae:af:73:da:84:73:ee:3e:c4:a1:73:61:40:e1:e5: a1:3c:38:b7:f2:0f:70:05:50:8a:85:a7:e7:35:19: e2:2a:03:a0:42:25:18:81:91:3b:be:76:a0:ad:37: 45:54:5d:a6:b8:8b:48:c8:d6:b5:33:87:2e:a1:c6: 86:84:ce:bb:77:68:fe:a7:ad:ba:9b:5f:b3:fb:85: 1e:d2:05:30:99:02:d1:5a:2e:94:9e:8c:e7:13:4c: 3a:c4:37:e5:1b:7c:f6:c9:a2:2a:9c:4d:62:ef:0d: e2:f0:ed:c5:6c:af:16:35:2d:00:c3:f2:6c:30:31: 10:ff:1c:60:d3:ad:5d:3d:f3:43:9c:54:a1:d1:d1: 9a:1c:5f:bb:2c:5b:34:e0:61:0c:bb:9d:f0:b4:de: e4:be:03:2f:78:91:8c:76:3f:34:36:f9:93:ad:00: 7c:c6:f7:1b:c2:51:e9:3e:d2:5d:0a:2d:e2:32:c7: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:0D:B3:25:8C:E5:9C:79:02:B8:39:92:30:0D:8E:19:54:70:72 X509v3 Authority Key Identifier: keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1c:50:fd:a2:c0:0e:5f:41:68:aa:d7:7a:c0:d0:51:0d:27: 04:44:b3:83:82:1c:84:0d:86:40:ea:79:7e:b5:0b:81:c1:b9: 68:1c:97:b9:74:1c:93:5c:55:3d:37:61:59:69:b2:d7:45:10: 98:fe:5f:ce:cd:da:78:83:9b:7b:31:37:11:c5:e8:87:1e:88: 3a:bc:73:25:81:27:cd:de:a0:61:c7:89:e6:f7:c9:a0:15:f4: 26:b2:bd:4a:57:ad:a8:78:68:a0:8c:0c:f7:38:64:e6:44:3d: 31:03:ba:4e:90:e0:9f:29:81:eb:da:0d:f8:a5:37:aa:e7:fb: 03:88:a8:60:e3:25:77:15:1e:fd:d7:f8:9a:1f:48:c1:84:0d: 0e:3b:20:82:f2:a9:05:83:7d:df:06:77:08:51:af:3d:14:c8: 12:ca:dc:fa:c1:b4:d4:92:0f:f3:25:d0:96:06:1e:51:0b:29: 29:0e:ac:c1:a9:80:87:5e:81:5b:ee:e3:04:0e:f4:e9:76:58: db:b4:d8:fd:42:07:27:2e:b7:8a:e9:c0:23:32:e9:e1:c2:05: 5f:aa:8f:29:ab:53:2b:5d:b6:09:91:89:da:08:d2:45:e5:36: 55:11:0a:83:12:15:e6:94:c9:91:8b:0c:d4:d1:d8:39:58:b4: 7e:b5:e2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2OEIxMTAvBgNVBAUTKEI1RTlEREM2QkYwOUY4OTQ1ODU1NjA4NzQ0MkQ5NDhD NDQwMzQ1MzAwHhcNMjUwODIzMDMwMDM2WhcNMjUwODMwMDMwMDM2WjAYMRYwFAYD VQQDEw02OGE5MmVkNC01ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8//yEQOKnK33VuyZlmWdPKMy/3aiJRXXvb96uD7sL/oynmoDUzCEpkLTvPL LnlXuDxYAqmMlZLE5v+te0KsXImyzI1q9lMnmiaur3PahHPuPsShc2FA4eWhPDi3 8g9wBVCKhafnNRniKgOgQiUYgZE7vnagrTdFVF2muItIyNa1M4cuocaGhM67d2j+ p626m1+z+4Ue0gUwmQLRWi6UnoznE0w6xDflG3z2yaIqnE1i7w3i8O3FbK8WNS0A w/JsMDEQ/xxg061dPfNDnFSh0dGaHF+7LFs04GEMu53wtN7kvgMveJGMdj80NvmT rQB8xvcbwlHpPtJdCi3iMscB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxYDbMl jOWceQK4OZIwDY4ZVHByMB8GA1UdIwQYMBaAFLXp3ca/CfiUWFVgh0QtlIxEA0Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4Qi8xRjdCMUQwOEMz OEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1KUllWV0NIUkMyVWpFUURS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RlbmR4cjhKLUpSWVZXQ0hSQzJVakVRRFJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4Qi8xRjdCMUQwOEMzOEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1K UllWV0NIUkMyVWpFUURSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9HFD9osAOX0Foqtd6wNBRDScERLODghyEDYZA6nl+tQuBwbloHJe5 dByTXFU9N2FZabLXRRCY/l/Ozdp4g5t7MTcRxeiHHog6vHMlgSfN3qBhx4nm98mg FfQmsr1KV62oeGigjAz3OGTmRD0xA7pOkOCfKYHr2g34pTeq5/sDiKhg4yV3FR79 1/iaH0jBhA0OOyCC8qkFg33fBncIUa89FMgSytz6wbTUkg/zJdCWBh5RCykpDqzB qYCHXoFb7uMEDvTpdljbtNj9QgcnLreK6cAjMunhwgVfqo8pq1MrXbYJkYnaCNJF 5TZVEQqDEhXmlMmRiwzU0dg5WLR+teKm -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:36 2025 by rpki-client