$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: uPCKduQvRMOQTnOfbv1pplb92eB7MI2yzhLSfjTXiE8= Subject key identifier: 01:5F:80:34:B0:8F:91:98:FA:98:66:01:00:8A:8E:10:2C:75:0B:FD Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:53:11 +0000 Manifest this update: Sat 23 Aug 2025 07:53:11 +0000 Manifest next update: Sat 30 Aug 2025 07:53:11 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: T8yRYxWN/rW/+XKXiN5mRLTVZ8VcJ1OiydPccLd+Uak=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Aug 23 07:53:11 2025 GMT Not After : Aug 30 07:53:11 2025 GMT Subject: CN=68a97367-93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:1c:99:c8:98:1f:f1:d5:fb:41:1d:97:f3: c0:df:34:23:7e:22:80:c2:bc:f5:5d:a0:d3:56:f4: 98:f4:46:29:1d:12:56:46:e3:07:e7:12:f7:3f:fd: 5d:1f:12:e1:36:89:43:af:49:4d:49:3a:85:1e:4b: 90:3d:94:c1:6e:32:c0:be:a8:7a:50:06:34:e5:c6: 37:d5:6a:f4:f4:ad:61:97:cd:09:55:c7:4c:d6:7d: 78:55:08:89:f8:02:38:5f:ce:bd:77:b3:4b:6f:f1: 41:f2:bf:f4:93:69:4b:c8:e5:d8:b5:b9:6a:e0:12: c3:ec:63:91:bf:26:19:70:a1:2d:4f:02:e8:dd:11: e2:7e:23:f6:62:0a:af:d3:cc:ba:ff:b8:d5:c3:0e: da:2b:56:3a:69:39:8f:a8:56:77:82:96:26:34:cc: 86:db:58:31:06:fc:08:90:ca:df:f3:22:b2:58:bf: 21:59:91:0f:88:aa:fc:d7:6f:4f:cc:18:c3:08:42: 6e:52:00:b0:2a:27:53:14:1a:f2:0b:4b:a4:a7:18: c3:6b:20:d4:b8:70:e4:13:54:c0:2c:dc:24:c3:4e: 37:aa:61:e7:fe:44:ad:43:b6:62:22:07:98:5f:4a: 3c:f2:cb:c3:90:66:64:a6:25:a2:97:3c:4c:85:c9: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:80:34:B0:8F:91:98:FA:98:66:01:00:8A:8E:10:2C:75:0B:FD X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:23:96:ad:2e:2c:cb:81:e5:fb:11:c0:71:3a:39:3c:89:42: 93:68:46:96:3a:8f:ba:5a:fd:f2:5b:74:fc:33:1c:1e:53:d4: 7f:5a:07:8a:d6:9b:b5:eb:57:68:4a:f2:d0:23:a9:6f:5b:8d: ff:43:df:30:a8:6c:f2:70:48:09:74:17:be:79:34:bd:29:cb: f4:3b:1a:f6:af:85:b8:a1:de:e6:50:2a:37:a8:20:e3:e3:bd: 42:5f:07:64:39:62:42:c3:dd:28:26:d2:b2:6e:c0:2c:58:15: cb:1e:c6:f0:44:73:82:d6:48:cf:0a:35:f5:cc:22:83:92:e1: d9:b5:b2:c3:09:d3:ab:47:4b:b7:71:6a:e0:ec:98:2e:d0:61: 94:56:a8:59:6b:df:e0:10:ba:77:c5:cc:ab:6c:fa:eb:7b:1a: 7d:7a:08:fc:50:96:90:52:0e:48:d5:f9:0f:30:fd:2e:47:39: 2e:a2:68:3b:17:2f:0c:bb:00:c9:aa:c4:14:42:52:f0:3a:e6: 3b:98:0d:a5:99:76:30:66:78:ee:74:1c:00:ea:50:6f:8c:75: cd:42:6a:c5:32:c2:c9:37:62:59:2a:9f:90:c6:18:69:1a:63: 88:5a:0a:b9:b1:d7:93:2c:3c:1d:18:63:8a:db:03:ed:71:1a: b1:f6:c9:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTA4MjMwNzUzMTFaFw0yNTA4MzAwNzUzMTFaMBgxFjAUBgNV BAMTDTY4YTk3MzY3LTkzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaLByZyJgf8dX7QR2X88DfNCN+IoDCvPVdoNNW9Jj0RikdElZG4wfnEvc//V0f EuE2iUOvSU1JOoUeS5A9lMFuMsC+qHpQBjTlxjfVavT0rWGXzQlVx0zWfXhVCIn4 Ajhfzr13s0tv8UHyv/STaUvI5di1uWrgEsPsY5G/JhlwoS1PAujdEeJ+I/ZiCq/T zLr/uNXDDtorVjppOY+oVneCliY0zIbbWDEG/AiQyt/zIrJYvyFZkQ+IqvzXb0/M GMMIQm5SALAqJ1MUGvILS6SnGMNrINS4cOQTVMAs3CTDTjeqYef+RK1DtmIiB5hf Sjzyy8OQZmSmJaKXPEyFyR5JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAV+ANLCP kZj6mGYBAIqOECx1C/0wHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAjlq0uLMuB5fsRwHE6OTyJQpNoRpY6j7pa/fJbdPwzHB5T1H9aB4rW m7XrV2hK8tAjqW9bjf9D3zCobPJwSAl0F755NL0py/Q7Gvavhbih3uZQKjeoIOPj vUJfB2Q5YkLD3Sgm0rJuwCxYFcsexvBEc4LWSM8KNfXMIoOS4dm1ssMJ06tHS7dx auDsmC7QYZRWqFlr3+AQunfFzKts+ut7Gn16CPxQlpBSDkjV+Q8w/S5HOS6iaDsX Lwy7AMmqxBRCUvA65juYDaWZdjBmeO50HADqUG+Mdc1CasUywsk3Ylkqn5DGGGka Y4haCrmx15MsPB0YY4rbA+1xGrH2yVk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:45 2025 by rpki-client