$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: Ubni/XwNN/CBXabKy18RnjhHjfHm1vSL+06bDx/eJ/A= Subject key identifier: BE:52:61:AE:F9:A8:29:73:92:9A:1B:01:88:C8:76:EA:1B:7F:1F:36 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: EC Signing time: Sat 23 Aug 2025 05:31:22 +0000 Manifest this update: Sat 23 Aug 2025 05:31:21 +0000 Manifest next update: Sat 30 Aug 2025 05:31:21 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: BSDtMvHgSTFOYnT4R1bcBhFWpdxCsEpajmU9RZIeZ5Y=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: DqAscZot5tvFIRSwhun0FkboyMxWikjQ2XKpTFYg9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Aug 23 05:31:21 2025 GMT Not After : Aug 30 05:31:21 2025 GMT Subject: CN=68a9522a-a4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:70:d8:6b:74:a0:84:0b:b6:88:b4:b9:b0: f1:95:4f:9c:1c:55:19:bb:5c:5e:c7:6f:34:b5:cc: 0b:cb:7f:11:df:76:58:30:e5:72:b8:9d:14:df:c9: 2a:bb:89:6e:f0:d8:cc:eb:0a:53:ba:96:dd:da:b6: 4b:19:eb:e1:2d:ad:5f:6f:36:1e:6a:81:e6:fb:7d: 28:41:f4:91:6b:0d:ea:4e:f5:2c:93:b0:60:f5:c6: 72:52:60:55:a2:33:ee:ee:c1:6a:6b:ae:66:07:d2: 56:31:8c:41:aa:38:37:32:8c:82:22:03:f0:f3:e7: f9:0b:f7:cb:77:5b:c7:13:8b:bd:26:fe:07:4c:c4: 38:6e:e5:6b:15:b1:ca:39:16:f0:b3:60:03:1c:cb: 7c:fc:79:1f:ea:79:21:2f:32:cf:89:5e:3c:92:4d: ca:ea:86:6a:90:8e:65:38:f6:43:21:66:97:4c:69: dc:e5:4e:37:67:af:c5:4d:fc:c6:24:1f:31:48:61: 50:26:21:71:5a:af:06:27:17:7d:b4:73:75:28:06: d2:54:d9:ad:db:88:86:8b:cc:44:aa:b5:8a:81:c1: 30:7e:ab:72:aa:6a:16:54:63:92:0c:5c:02:22:d1: 26:86:96:d9:3a:db:33:2e:25:b9:33:ba:93:56:0f: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:61:AE:F9:A8:29:73:92:9A:1B:01:88:C8:76:EA:1B:7F:1F:36 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ce:84:1e:4b:b7:89:ca:28:cc:0b:20:bc:b6:7d:5c:dc:a0: 9d:16:a8:ce:b3:97:c8:03:e6:9c:fb:10:ba:ff:15:49:9e:12: cc:73:cb:71:91:f6:aa:9c:37:41:6f:b2:c7:ca:ec:94:15:67: cb:ef:a9:d1:a6:a7:47:3b:46:7a:5d:fa:9b:44:ae:f5:db:e1: 24:f6:ff:d4:fc:78:92:85:c5:50:94:a0:0d:19:e6:f7:0a:dc: 64:c1:13:78:40:b0:4b:4b:e3:9a:94:01:6f:ef:2e:77:3d:12: d0:67:9f:da:a2:ca:7b:bb:4c:3f:00:e7:a4:7d:b8:ae:17:9c: c5:f7:bb:30:75:66:ed:0c:97:58:e4:a1:8d:27:d0:a4:db:4a: f9:95:11:13:15:3c:4c:96:c3:5e:ab:d6:ab:2f:22:fb:99:12: b0:27:bf:6a:82:8f:24:69:e0:64:2b:43:b6:e9:19:35:ff:97: 38:9c:95:40:f2:c6:b1:b9:4c:d8:96:d5:a0:73:e2:f4:39:fc: e2:23:b5:23:d0:72:b7:93:3a:b6:f9:57:83:a6:5f:96:77:1e: 05:0c:64:c8:22:b8:d0:89:42:74:4f:5b:4d:22:e9:3c:78:d1: 78:7b:2a:be:bc:e6:d0:5a:d0:41:f6:b8:07:51:e5:a3:d9:a8: fc:8d:45:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUwODIzMDUzMTIxWhcNMjUwODMwMDUzMTIxWjAYMRYwFAYD VQQDEw02OGE5NTIyYS1hNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtpw2Gt0oIQLtoi0ubDxlU+cHFUZu1xex280tcwLy38R33ZYMOVyuJ0U38kq u4lu8NjM6wpTupbd2rZLGevhLa1fbzYeaoHm+30oQfSRaw3qTvUsk7Bg9cZyUmBV ojPu7sFqa65mB9JWMYxBqjg3MoyCIgPw8+f5C/fLd1vHE4u9Jv4HTMQ4buVrFbHK ORbws2ADHMt8/Hkf6nkhLzLPiV48kk3K6oZqkI5lOPZDIWaXTGnc5U43Z6/FTfzG JB8xSGFQJiFxWq8GJxd9tHN1KAbSVNmt24iGi8xEqrWKgcEwfqtyqmoWVGOSDFwC ItEmhpbZOtszLiW5M7qTVg9zBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5SYa75 qClzkpobAYjIduobfx82MB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwzoQeS7eJyijMCyC8tn1c3KCdFqjOs5fIA+ac+xC6/xVJnhLMc8tx kfaqnDdBb7LHyuyUFWfL76nRpqdHO0Z6XfqbRK712+Ek9v/U/HiShcVQlKANGeb3 CtxkwRN4QLBLS+OalAFv7y53PRLQZ5/aosp7u0w/AOekfbiuF5zF97swdWbtDJdY 5KGNJ9Ck20r5lRETFTxMlsNeq9arLyL7mRKwJ79qgo8kaeBkK0O26Rk1/5c4nJVA 8saxuUzYltWgc+L0OfziI7Uj0HK3kzq2+VeDpl+Wdx4FDGTIIrjQiUJ0T1tNIuk8 eNF4eyq+vObQWtBB9rgHUeWj2aj8jUWt -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:29 2025 by rpki-client