$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: Avy0eUAd1YDZsNLRUD4BmRXTM1PAtwmNVm5mWSvkfm8= Subject key identifier: D7:9A:FA:A2:D6:36:AC:1A:76:B2:16:BD:16:61:BF:3D:16:70:E3:DE Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 1F Signing time: Sun 29 Jun 2025 06:52:52 +0000 Manifest this update: Sun 29 Jun 2025 06:52:51 +0000 Manifest next update: Sun 06 Jul 2025 06:52:51 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: vWrzFLc4iz2rMlmyzRaUj2gq5QsQqQyu2x8UFoBjHYE=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Jun 29 06:52:51 2025 GMT Not After : Jul 6 06:52:51 2025 GMT Subject: CN=6860e2c3-0a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:21:0a:ff:99:b3:37:71:a6:6c:22:bf:01: c6:c9:f4:b5:7d:f6:7c:d4:e4:ef:86:b4:a9:11:0d: 1c:94:87:c1:1e:bf:29:ee:b2:0a:47:0e:f4:d6:6d: 69:88:d5:9d:c7:fa:0b:3f:3e:8d:66:0f:4f:63:42: b0:d5:53:b8:be:4f:01:24:cb:73:d3:27:c0:55:26: 3d:7f:f8:91:1e:f2:8a:6c:73:f3:0b:5c:34:f0:fe: eb:e0:27:d3:d3:de:f0:1f:41:de:7a:d4:04:28:bc: f1:62:99:04:3f:e2:3f:76:04:9e:2d:85:5d:bf:52: f3:67:06:91:db:ba:e1:e3:a0:ab:70:fe:26:ee:39: 66:c1:f6:04:4e:00:34:87:ec:40:b1:9a:8c:83:3e: d0:85:f6:16:54:de:f3:8a:c5:66:70:bd:89:33:05: a3:35:de:fe:43:b7:53:23:25:b4:30:bf:48:d7:e5: fc:53:83:de:d0:d4:85:09:60:d9:59:2e:67:b6:b5: 3a:e1:de:9a:e3:20:f5:01:68:11:e6:6e:27:8e:d1: 1b:ee:f0:f8:b4:86:b5:c6:49:8c:6f:0e:01:f1:4a: 92:df:6a:6f:e0:82:99:7f:05:8e:ab:5f:e4:d6:86: 2e:3b:1c:d2:26:d9:56:66:f8:59:07:84:1a:b4:6b: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9A:FA:A2:D6:36:AC:1A:76:B2:16:BD:16:61:BF:3D:16:70:E3:DE X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:42:9d:f1:5b:4e:61:e2:8b:94:ad:40:32:dc:db:67:24:b9: b7:e6:67:01:22:c2:62:ba:ac:df:e4:70:2e:fa:03:a0:f8:6f: 44:f1:85:87:31:a7:d3:3d:64:8e:ce:b6:15:ff:58:51:0f:3d: ef:c5:51:66:e8:96:15:6b:93:d4:08:66:df:7d:6e:e5:14:78: dd:a5:0b:c8:5a:d3:a9:dc:14:e6:ae:dd:e2:19:ce:7c:3f:ac: 8b:5e:7f:5d:a8:46:9c:99:fc:a8:d6:d5:70:d8:93:f1:db:e8: bf:73:6a:84:51:a9:04:ad:c1:43:d1:b8:d1:f3:e9:25:61:fa: a9:e5:d6:80:db:f7:f5:1a:c8:54:46:10:64:4f:93:35:19:7f: 38:2f:d3:c1:1b:41:6f:f3:bf:1c:d0:06:a9:34:05:56:2c:46: 91:1d:2e:80:da:47:a4:9b:33:c5:2a:00:7b:65:ba:10:25:11: a8:0f:1d:e6:fb:8d:64:dc:4e:86:04:a0:3e:e5:65:ee:d2:42: a2:a6:ad:55:f1:6a:7f:50:39:47:de:15:17:98:15:3c:79:23: 84:0e:f1:f8:47:e1:a6:fd:79:76:d3:01:bd:d5:6f:2e:99:48: 03:a0:5b:05:23:02:b5:7e:9f:0a:35:6f:36:c4:db:01:70:db: 1e:4e:6b:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTA2MjkwNjUyNTFaFw0yNTA3MDYwNjUyNTFaMBgxFjAUBgNV BAMTDTY4NjBlMmMzLTBhMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDvSEK/5mzN3GmbCK/AcbJ9LV99nzU5O+GtKkRDRyUh8EevynusgpHDvTWbWmI 1Z3H+gs/Po1mD09jQrDVU7i+TwEky3PTJ8BVJj1/+JEe8opsc/MLXDTw/uvgJ9PT 3vAfQd561AQovPFimQQ/4j92BJ4thV2/UvNnBpHbuuHjoKtw/ibuOWbB9gROADSH 7ECxmoyDPtCF9hZU3vOKxWZwvYkzBaM13v5Dt1MjJbQwv0jX5fxTg97Q1IUJYNlZ Lme2tTrh3prjIPUBaBHmbieO0Rvu8Pi0hrXGSYxvDgHxSpLfam/ggpl/BY6rX+TW hi47HNIm2VZm+FkHhBq0a85lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU15r6otY2 rBp2sha9FmG/PRZw494wHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFCnfFbTmHii5StQDLc22ckubfmZwEiwmK6rN/kcC76A6D4b0TxhYcx p9M9ZI7OthX/WFEPPe/FUWbolhVrk9QIZt99buUUeN2lC8ha06ncFOau3eIZznw/ rItef12oRpyZ/KjW1XDYk/Hb6L9zaoRRqQStwUPRuNHz6SVh+qnl1oDb9/UayFRG EGRPkzUZfzgv08EbQW/zvxzQBqk0BVYsRpEdLoDaR6SbM8UqAHtluhAlEagPHeb7 jWTcToYEoD7lZe7SQqKmrVXxan9QOUfeFReYFTx5I4QO8fhH4ab9eXbTAb3Vby6Z SAOgWwUjArV+nwo1bzbE2wFw2x5Oaxs= -----END CERTIFICATE-----Generated at Sun Jun 29 20:39:37 2025 by rpki-client