$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: 3gCa2qLul32YSLYvDt+xVBINEj9Ad7pKENMtty/NRSQ= Subject key identifier: E3:A2:4C:A6:17:73:5B:54:84:71:30:86:04:7D:78:7A:BB:C5:93:30 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: B7 Signing time: Sat 23 Aug 2025 06:10:01 +0000 Manifest this update: Sat 23 Aug 2025 06:10:00 +0000 Manifest next update: Sat 30 Aug 2025 06:10:00 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: KmNium1pCE/jMVEFR9oDpl571R/f7lDCvghF1aoYp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Aug 23 06:10:00 2025 GMT Not After : Aug 30 06:10:00 2025 GMT Subject: CN=68a95b38-3d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:e7:72:49:91:88:4c:d3:8a:2b:50:8b:2b: 2a:f9:c0:b4:9e:ff:56:b9:6b:9c:e0:25:10:ce:a3: b7:8b:7d:bc:4a:21:c5:15:d6:df:69:7f:a6:9b:82: 98:d8:33:02:cc:49:52:95:54:f1:55:8a:e3:7f:cf: cc:68:26:1a:6f:95:a8:6f:a4:9a:0a:f6:c9:0f:9c: 9e:a8:b8:dd:3e:a6:2a:7f:83:fd:03:23:94:5f:25: 91:56:55:58:bd:c3:41:d5:47:7d:82:e9:49:8e:57: 22:18:70:d7:67:74:fe:c9:20:51:e7:cd:b7:5e:af: 2e:ed:8f:88:5d:2f:24:a2:e3:05:32:2c:5f:c3:5b: 71:6a:9b:98:c2:38:05:e1:5b:0f:93:e5:78:7b:24: 95:34:9d:32:fc:67:6a:c9:9f:dd:14:43:d4:c2:17: fa:40:be:83:9c:18:87:56:8d:31:86:3c:8f:78:1b: 58:32:b9:11:55:43:d0:7d:d3:b5:51:8e:b3:e4:94: e6:2c:fc:cb:96:63:82:99:eb:7b:a2:5b:9f:c9:6b: b3:30:f7:49:fd:34:ba:2e:74:bd:60:98:b2:74:74: dd:56:be:fc:68:a0:66:a8:27:7d:2a:86:3e:67:bb: 7c:8d:ae:1f:dd:f8:60:0e:9d:27:2e:d8:13:46:39: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A2:4C:A6:17:73:5B:54:84:71:30:86:04:7D:78:7A:BB:C5:93:30 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b0:ee:58:00:c2:4a:90:d2:83:ae:ef:eb:7c:6e:00:c5:de: f7:c7:54:8f:e0:71:e4:00:a3:78:67:d1:7b:64:b3:a5:49:29: 71:5a:81:93:21:a5:0f:0c:dd:ae:bf:7c:18:1d:d3:9b:85:75: 79:bc:ed:db:ea:9a:85:75:a0:ae:bf:c6:bf:64:54:40:c7:47: 53:5d:d1:0e:92:22:c3:a4:3d:12:39:6c:a7:57:57:af:2e:6b: 59:8d:8f:ca:95:19:fd:4d:e2:30:99:22:8b:7a:1a:e6:b5:e3: a5:26:cb:16:b5:45:4c:18:2c:a2:50:5b:70:71:52:e7:87:1b: fa:ed:d0:45:24:04:05:86:02:f2:89:b8:a0:52:2e:5d:2c:ea: 53:42:40:5c:89:ea:c9:b6:c2:47:34:a5:c7:ee:d1:bc:a1:21: f6:67:24:2e:84:61:19:dc:c1:48:32:54:ef:31:cb:23:19:38: c8:31:57:37:84:24:61:56:8b:37:40:7b:9f:fd:9c:da:21:ac: d5:22:db:7f:a1:90:09:84:40:65:06:4e:cd:db:1a:b8:04:23: d9:99:71:84:d3:fc:ee:6d:5e:16:35:a4:b3:c7:2f:84:2f:ae: ee:dc:c6:01:52:5a:21:4c:8f:09:3f:bd:fc:e8:cf:0d:b1:54: dd:f4:90:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUwODIzMDYxMDAwWhcNMjUwODMwMDYxMDAwWjAYMRYwFAYD VQQDEw02OGE5NWIzOC0zZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwXnckmRiEzTiitQiysq+cC0nv9WuWuc4CUQzqO3i328SiHFFdbfaX+mm4KY 2DMCzElSlVTxVYrjf8/MaCYab5Wob6SaCvbJD5yeqLjdPqYqf4P9AyOUXyWRVlVY vcNB1Ud9gulJjlciGHDXZ3T+ySBR5823Xq8u7Y+IXS8kouMFMixfw1txapuYwjgF 4VsPk+V4eySVNJ0y/GdqyZ/dFEPUwhf6QL6DnBiHVo0xhjyPeBtYMrkRVUPQfdO1 UY6z5JTmLPzLlmOCmet7olufyWuzMPdJ/TS6LnS9YJiydHTdVr78aKBmqCd9KoY+ Z7t8ja4f3fhgDp0nLtgTRjmCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOiTKYX c1tUhHEwhgR9eHq7xZMwMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgsO5YAMJKkNKDru/rfG4Axd73x1SP4HHkAKN4Z9F7ZLOlSSlxWoGT IaUPDN2uv3wYHdObhXV5vO3b6pqFdaCuv8a/ZFRAx0dTXdEOkiLDpD0SOWynV1ev LmtZjY/KlRn9TeIwmSKLehrmteOlJssWtUVMGCyiUFtwcVLnhxv67dBFJAQFhgLy ibigUi5dLOpTQkBcierJtsJHNKXH7tG8oSH2ZyQuhGEZ3MFIMlTvMcsjGTjIMVc3 hCRhVos3QHuf/ZzaIazVItt/oZAJhEBlBk7N2xq4BCPZmXGE0/zubV4WNaSzxy+E L67u3MYBUlohTI8JP7386M8NsVTd9JAJ -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:15 2025 by rpki-client