$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: 1VKqCHLKTE6AlCzgNFuQCzvHHJ0I6SeTU5Q7zIMpSus= Subject key identifier: 42:B6:79:52:26:D3:84:68:A5:35:46:45:56:79:37:D3:AA:D2:43:61 Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A74 Signing time: Wed 02 Jul 2025 19:52:14 +0000 Manifest this update: Wed 02 Jul 2025 19:52:14 +0000 Manifest next update: Wed 09 Jul 2025 19:52:14 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: WbDK5RXubazIWQxOb9a4PGpa9gvkG83ijV9+6oGlX2w=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Jul 2 19:52:14 2025 GMT Not After : Jul 9 19:52:14 2025 GMT Subject: CN=68658dee-ee06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:4a:09:e5:f6:88:27:10:a8:b4:1d:0b:48: d0:00:ad:ea:cf:84:70:4e:4c:48:b7:62:48:22:2a: 26:e4:13:26:f0:e1:dd:b7:92:dc:2e:d6:16:c4:96: 9f:87:97:8d:b5:f8:a5:c4:21:8c:63:eb:bf:e2:91: 04:ca:fe:e3:c3:f5:10:2e:ca:a2:35:a5:f5:e9:4e: 86:80:e5:09:89:30:78:ba:b6:ae:66:7c:c3:df:d5: a3:31:4e:eb:a5:79:e9:57:47:18:86:a8:ea:a6:c2: 54:db:ad:72:2a:4b:aa:35:35:64:02:25:a8:82:c2: a9:30:9d:7d:7b:2a:04:00:0a:8e:ba:b4:6f:8b:12: 18:3f:63:88:b8:9c:44:da:a7:1b:ae:bd:21:18:24: da:02:35:6d:c4:01:46:20:bf:97:2e:4e:17:8d:34: 4a:41:1a:f3:2b:45:7f:78:60:83:f5:ec:1f:3e:86: 7c:d0:d5:7a:bb:7a:30:6c:24:16:36:78:63:c5:be: 6b:f6:76:16:38:80:4a:38:5c:ca:61:c6:50:a5:4d: a9:7a:59:4d:76:fa:a4:e8:df:8c:1d:ff:70:f8:46: 63:a4:a2:72:85:92:06:82:4e:4a:16:bb:ef:ee:92: 0a:73:70:12:c8:5c:90:ed:aa:3c:93:54:cf:e2:02: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:79:52:26:D3:84:68:A5:35:46:45:56:79:37:D3:AA:D2:43:61 X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7a:b8:40:72:57:e1:a4:ee:9b:8c:58:a4:9f:c0:48:c5:b2: 70:c4:fb:bd:da:6e:5b:44:4f:a4:45:06:8f:b1:07:eb:30:75: 26:dd:08:a9:3c:d4:d5:ed:a3:4e:b0:0d:cc:d3:e7:e9:2e:90: b8:dd:51:9b:4a:1d:36:ba:ed:f0:ac:e8:21:16:9a:d4:c8:22: 1f:3e:fe:96:8f:f8:ec:41:cf:0f:33:bb:5e:40:cb:30:e2:35: 6c:b3:df:6b:35:07:c1:56:4d:58:d3:ce:05:8e:9e:41:37:f3: 6b:17:d8:e4:db:c2:d3:60:66:b7:d6:92:80:e5:56:a4:71:67: e1:98:b8:d8:20:19:81:0f:aa:3d:f4:1f:69:e3:84:1f:97:53: f5:ce:56:0d:77:af:bc:29:20:f9:ab:10:d8:f0:a4:4e:e4:05: 60:31:8a:a6:61:be:2b:72:35:db:f0:5d:71:cd:69:9b:c7:b5: f5:48:ec:12:80:7d:27:fa:74:fd:cc:d1:76:bf:ad:97:69:1a: 18:82:6c:e8:71:81:a5:53:2a:0f:4e:dc:1f:cd:f0:1f:a9:ee: df:96:f5:f4:e8:df:9e:ca:86:29:95:a5:b4:71:24:e3:eb:10: a2:62:45:26:48:55:b3:54:1b:e7:bd:35:33:1f:51:d5:6b:a5: 5d:ea:53:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUwNzAyMTk1MjE0WhcNMjUwNzA5MTk1MjE0WjAYMRYwFAYD VQQDEw02ODY1OGRlZS1lZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI1KCeX2iCcQqLQdC0jQAK3qz4RwTkxIt2JIIiom5BMm8OHdt5LcLtYWxJaf h5eNtfilxCGMY+u/4pEEyv7jw/UQLsqiNaX16U6GgOUJiTB4urauZnzD39WjMU7r pXnpV0cYhqjqpsJU261yKkuqNTVkAiWogsKpMJ19eyoEAAqOurRvixIYP2OIuJxE 2qcbrr0hGCTaAjVtxAFGIL+XLk4XjTRKQRrzK0V/eGCD9ewfPoZ80NV6u3owbCQW Nnhjxb5r9nYWOIBKOFzKYcZQpU2pellNdvqk6N+MHf9w+EZjpKJyhZIGgk5KFrvv 7pIKc3ASyFyQ7ao8k1TP4gLBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK2eVIm 04RopTVGRVZ5N9Oq0kNhMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAserhAclfhpO6bjFikn8BIxbJwxPu92m5bRE+kRQaPsQfrMHUm3Qip PNTV7aNOsA3M0+fpLpC43VGbSh02uu3wrOghFprUyCIfPv6Wj/jsQc8PM7teQMsw 4jVss99rNQfBVk1Y084Fjp5BN/NrF9jk28LTYGa31pKA5VakcWfhmLjYIBmBD6o9 9B9p44Qfl1P1zlYNd6+8KSD5qxDY8KRO5AVgMYqmYb4rcjXb8F1xzWmbx7X1SOwS gH0n+nT9zNF2v62XaRoYgmzocYGlUyoPTtwfzfAfqe7flvX06N+eyoYplaW0cSTj 6xCiYkUmSFWzVBvnvTUzH1HVa6Vd6lPp -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:37 2025 by rpki-client