$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: mZu4qrisR7ddLujfaI166kPkZieSAeOF5iiXY9c9cmU= Subject key identifier: FD:BF:55:77:17:0D:BD:EC:C8:70:36:E7:7D:FF:4E:A7:D9:AB:07:5F Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 3B Signing time: Sat 23 Aug 2025 07:45:38 +0000 Manifest this update: Sat 23 Aug 2025 07:45:37 +0000 Manifest next update: Sat 30 Aug 2025 07:45:37 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: awI+J/sO2pdSV0zpkN0DVgJdlF2B8huzyMuuUlP2suY=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Aug 23 07:45:37 2025 GMT Not After : Aug 30 07:45:37 2025 GMT Subject: CN=68a971a1-f365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:52:d3:02:d4:c1:13:57:b6:75:a4:68:9d: db:0b:af:e5:50:6c:9b:af:36:e2:a4:ea:02:d1:7e: 02:39:16:32:44:34:47:b5:bf:be:14:69:6b:f0:80: ac:07:e8:06:54:34:8a:4d:7b:c2:18:a8:b1:a7:eb: 81:4c:c2:ab:d6:0e:f8:84:79:34:6c:93:26:39:1b: 19:ae:f8:2c:53:16:29:c0:28:04:fa:1e:67:1d:ca: a3:75:fd:3b:bf:08:20:32:68:ef:41:e5:a6:61:8d: 1b:f1:eb:aa:53:2a:4a:e8:19:d5:58:8e:5b:d0:bd: f0:b3:ae:1d:d4:3b:98:90:f9:4d:aa:7a:c3:ee:db: 1a:e9:6e:7e:91:33:ad:fd:f8:46:58:cd:56:12:e7: 18:e2:f4:19:e4:6c:e3:ec:8a:a8:d6:75:38:bc:23: 69:84:a2:27:c5:eb:1a:6d:e1:8b:99:3c:f6:3c:45: c7:50:90:8b:10:a1:19:1d:0d:94:31:d6:ce:91:6f: 23:1c:7a:ff:0d:3a:c8:41:09:58:64:a9:62:60:51: ac:a0:4d:d8:69:50:9a:e5:2e:d6:de:40:4d:ff:ca: 18:d2:a0:fd:eb:1d:2e:17:e6:63:8d:22:3c:dd:3b: f8:26:ae:9a:83:40:16:50:ca:9c:b0:66:70:eb:26: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BF:55:77:17:0D:BD:EC:C8:70:36:E7:7D:FF:4E:A7:D9:AB:07:5F X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:07:16:e6:14:61:38:6d:ac:5a:98:a9:53:50:61:96:45:c9: 1c:d3:cd:7e:26:f2:44:92:3e:ca:42:ce:ca:23:55:30:3f:4b: b7:c5:57:4a:14:06:bb:b1:59:b4:6b:20:d8:cf:60:44:ea:75: d9:1f:2a:0b:98:08:28:7c:88:b2:c9:56:99:b3:82:ae:63:02: 9f:9f:35:7c:d9:39:fb:98:e6:2d:ae:92:be:41:59:2e:46:41: 47:f0:17:22:74:73:e4:1a:9e:e4:d2:57:e9:4b:86:7e:8a:2e: 65:e1:28:48:c3:1d:7c:c0:51:21:00:31:b1:94:f3:cf:4d:01: 0f:80:c4:31:bf:26:3f:fd:be:fc:64:c3:c0:7b:aa:fa:55:ee: d3:6f:cf:5e:3e:9f:c9:48:12:9c:76:d2:60:1a:d6:03:eb:3a: 85:8f:2a:ab:60:c8:ee:cd:c2:f5:33:2b:4e:dd:1c:8b:da:14: 50:8d:9a:82:25:6f:7f:40:2f:8e:b7:0b:7b:84:43:50:8c:f0: 70:76:61:37:27:38:96:3b:3f:a4:60:a6:b5:ba:ea:ee:e7:eb: 7d:6f:27:bb:f2:6c:ab:c1:a4:86:a1:89:6b:de:ed:ab:d8:07: a9:45:97:18:42:43:af:55:16:72:7c:80:fe:d7:a6:c5:57:45: 24:2e:62:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTA4MjMwNzQ1MzdaFw0yNTA4MzAwNzQ1MzdaMBgxFjAUBgNV BAMTDTY4YTk3MWExLWYzNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPNFLTAtTBE1e2daRondsLr+VQbJuvNuKk6gLRfgI5FjJENEe1v74UaWvwgKwH 6AZUNIpNe8IYqLGn64FMwqvWDviEeTRskyY5Gxmu+CxTFinAKAT6HmcdyqN1/Tu/ CCAyaO9B5aZhjRvx66pTKkroGdVYjlvQvfCzrh3UO5iQ+U2qesPu2xrpbn6RM639 +EZYzVYS5xji9BnkbOPsiqjWdTi8I2mEoifF6xpt4YuZPPY8RcdQkIsQoRkdDZQx 1s6RbyMcev8NOshBCVhkqWJgUaygTdhpUJrlLtbeQE3/yhjSoP3rHS4X5mONIjzd O/gmrpqDQBZQypywZnDrJle9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/b9VdxcN vezIcDbnff9Op9mrB18wHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcHFuYUYThtrFqYqVNQYZZFyRzTzX4m8kSSPspCzsojVTA/S7fFV0oU BruxWbRrINjPYETqddkfKguYCCh8iLLJVpmzgq5jAp+fNXzZOfuY5i2ukr5BWS5G QUfwFyJ0c+QanuTSV+lLhn6KLmXhKEjDHXzAUSEAMbGU889NAQ+AxDG/Jj/9vvxk w8B7qvpV7tNvz14+n8lIEpx20mAa1gPrOoWPKqtgyO7NwvUzK07dHIvaFFCNmoIl b39AL463C3uEQ1CM8HB2YTcnOJY7P6RgprW66u7n631vJ7vybKvBpIahiWve7avY B6lFlxhCQ69VFnJ8gP7XpsVXRSQuYjs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:01 2025 by rpki-client