$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: 3COMbxzE9Uhf0G3ESALL1qfDoA1PVOIPL+2Lfyy/UpQ= Subject key identifier: 63:4B:42:1D:DD:CB:04:E5:28:79:04:10:9D:F1:76:B1:84:49:8B:0F Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 10CE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 10C5 Signing time: Sun 10 Aug 2025 17:18:05 +0000 Manifest this update: Sun 10 Aug 2025 17:18:04 +0000 Manifest next update: Sun 17 Aug 2025 17:18:04 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: aDJ40BhVRyjO4BlN00tEC6Er+xbcHHBj6g9/S94Ehi8=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4302 (0x10ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Aug 10 17:18:04 2025 GMT Not After : Aug 17 17:18:04 2025 GMT Subject: CN=6898d44d-af6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:2c:ef:54:56:70:fa:45:01:f4:24:e5:81: de:23:4c:7a:60:5b:71:9a:1b:6c:c9:08:b4:84:dd: b0:46:5f:67:8e:6d:e4:64:47:74:41:5d:58:91:7a: 89:e5:3a:6a:9b:ba:f6:d7:70:bd:30:03:9e:27:23: c0:f5:a3:1b:ec:20:e7:56:c3:a5:56:37:15:b9:7a: 9a:53:64:a2:e4:01:cd:d2:fc:c8:05:81:7b:85:72: 29:3e:30:4d:dd:22:06:67:8e:02:2a:4f:b8:4a:87: 7f:f8:72:8b:da:de:82:84:c8:98:a3:2b:05:f4:42: f4:bc:dd:92:f4:52:6f:4d:b0:76:99:98:eb:0b:cf: d1:f3:ba:ac:34:88:4f:6d:1e:15:a3:36:70:4d:f6: 07:3b:1b:a5:2a:9f:11:32:00:d6:67:5c:1f:7d:63: 2c:d8:8a:eb:9e:fa:63:8c:94:c5:5a:14:88:00:de: 7d:cb:59:4e:f6:f0:dd:cb:03:89:32:09:97:11:4a: 10:5e:e5:a1:7e:bf:79:b1:6b:3e:0a:a3:7d:07:7e: c6:ca:73:7e:a2:11:26:3e:07:76:6a:cc:11:6d:ae: 4c:1b:93:64:d4:21:8f:3a:38:22:88:b3:e8:1d:8c: c0:65:29:00:e3:e1:fe:1e:9e:d8:1c:4a:f6:1f:2c: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4B:42:1D:DD:CB:04:E5:28:79:04:10:9D:F1:76:B1:84:49:8B:0F X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:55:97:61:b2:3f:b9:53:7f:11:f2:a6:21:64:dd:3d:51:2e: 91:88:06:fb:1d:c6:1e:a9:4f:b7:cb:77:dc:58:62:3d:4a:74: e4:03:5e:f4:07:af:15:43:17:b4:e7:48:f3:98:19:52:90:d0: 8a:f0:0d:e7:0d:37:b2:90:d6:78:6b:14:cf:40:28:53:9b:16: e9:d1:d9:d7:ee:18:80:34:f0:b5:9e:f0:e5:f9:a6:6f:b8:ed: b0:26:38:e9:74:42:3d:ce:98:19:9c:6b:1e:5d:ba:be:ba:12: 1d:be:d1:44:1b:04:85:e1:ea:b2:c0:03:9c:7e:13:da:50:7e: d3:fb:a7:b7:bd:52:ec:74:f6:22:92:f9:ca:35:48:33:bc:5d: 66:ee:e3:95:da:e9:6d:b8:01:e8:74:03:1d:64:d8:e0:a6:ce: b2:dd:66:42:26:8f:ea:aa:bb:9b:9a:30:fc:ef:74:45:5f:73: d1:00:d8:95:68:65:fd:33:3b:03:d0:a7:91:a6:bf:84:8f:72: aa:ce:4c:bc:46:4a:d9:51:9b:7e:6e:50:a0:84:6d:94:1c:73: 3c:b0:09:b2:95:a7:89:46:60:32:e9:87:b3:85:1a:fe:a9:ab: 7f:01:ad:4a:61:e7:97:f0:13:6f:22:d5:26:2c:0e:30:4d:a6: cf:8d:20:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwODEwMTcxODA0WhcNMjUwODE3MTcxODA0WjAYMRYwFAYD VQQDEw02ODk4ZDQ0ZC1hZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPIs71RWcPpFAfQk5YHeI0x6YFtxmhtsyQi0hN2wRl9njm3kZEd0QV1YkXqJ 5Tpqm7r213C9MAOeJyPA9aMb7CDnVsOlVjcVuXqaU2Si5AHN0vzIBYF7hXIpPjBN 3SIGZ44CKk+4Sod/+HKL2t6ChMiYoysF9EL0vN2S9FJvTbB2mZjrC8/R87qsNIhP bR4VozZwTfYHOxulKp8RMgDWZ1wffWMs2IrrnvpjjJTFWhSIAN59y1lO9vDdywOJ MgmXEUoQXuWhfr95sWs+CqN9B37GynN+ohEmPgd2aswRba5MG5Nk1CGPOjgiiLPo HYzAZSkA4+H+Hp7YHEr2Hyz3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNLQh3d ywTlKHkEEJ3xdrGESYsPMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAVZdhsj+5U38R8qYhZN09US6RiAb7HcYeqU+3y3fcWGI9SnTkA170 B68VQxe050jzmBlSkNCK8A3nDTeykNZ4axTPQChTmxbp0dnX7hiANPC1nvDl+aZv uO2wJjjpdEI9zpgZnGseXbq+uhIdvtFEGwSF4eqywAOcfhPaUH7T+6e3vVLsdPYi kvnKNUgzvF1m7uOV2ultuAHodAMdZNjgps6y3WZCJo/qqrubmjD873RFX3PRANiV aGX9MzsD0KeRpr+Ej3Kqzky8RkrZUZt+blCghG2UHHM8sAmylaeJRmAy6YezhRr+ qat/Aa1KYeeX8BNvItUmLA4wTabPjSAj -----END CERTIFICATE-----Generated at Mon Aug 11 12:58:31 2025 by rpki-client