$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: Ku3b8xR/2aeP5ZSojTYkM1OyQbYk/LcXqVuBwrV1a1k= Subject key identifier: 59:56:4E:0B:A1:92:3D:8B:20:21:9D:F2:00:E2:1B:CA:3D:63:06:23 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 0A2C Signing time: Sun 10 Aug 2025 19:46:53 +0000 Manifest this update: Sun 10 Aug 2025 19:46:53 +0000 Manifest next update: Sun 17 Aug 2025 19:46:53 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: Tvoe3w+su/E6EqPyGzcMkpZCpmnZqJ5caQepv3mAn9c=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) 3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: oDjyKM5SNuLjv6Hcd551F4doAQus0w8X4mHseINWIyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Aug 10 19:46:53 2025 GMT Not After : Aug 17 19:46:53 2025 GMT Subject: CN=6898f72d-416d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:64:27:88:bd:04:71:ba:5f:95:25:3d:8a:59: 78:94:fb:f3:63:0f:5a:9c:b8:58:b5:2f:91:38:7e: f1:18:e8:32:e1:87:8b:76:b9:67:3b:c4:7a:04:77: 39:18:d5:bc:39:85:14:b7:83:56:8f:9f:f6:f3:5c: 6b:68:9f:da:03:15:9a:39:2f:6c:7a:de:ab:e7:cc: 02:49:fc:d2:65:b3:b9:0b:95:4c:9f:ba:c0:fd:a0: c0:41:51:1b:46:9f:38:99:c7:96:36:82:f8:03:a2: 02:94:80:91:f3:9d:65:a9:a8:46:f2:e7:3b:8c:d9: 47:bd:a4:f4:66:7a:b8:31:b2:b6:a4:a8:89:c3:c1: dd:40:12:b9:fa:29:3d:9a:c4:d8:f6:6c:46:72:5d: eb:7a:3b:aa:04:b3:7e:88:8d:29:32:69:16:68:f4: d6:84:d2:7b:cd:c0:72:27:58:85:d1:df:01:cc:1b: 28:9e:86:b2:26:5f:41:6e:a9:d0:14:1a:fb:ad:be: 16:43:e0:88:7f:36:ee:bf:05:df:ac:f1:e2:7f:10: 96:a0:54:b4:28:58:7d:09:4e:2d:cf:bc:ae:9c:eb: 44:2f:8b:18:a8:af:86:46:9b:b8:4a:f8:09:4a:98: 0a:29:f7:12:fd:c8:45:c0:86:5c:b8:8f:4e:82:f9: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:4E:0B:A1:92:3D:8B:20:21:9D:F2:00:E2:1B:CA:3D:63:06:23 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:dd:c4:b2:2c:38:8f:db:d0:d5:01:5a:21:6e:c7:10:8f:48: 3d:86:c0:95:6e:59:2a:0f:9e:78:f7:26:e0:68:3a:99:32:17: b6:53:3e:f1:d9:55:c7:1b:d1:ad:d2:11:de:a3:07:3c:da:d5: 14:01:99:f4:b7:97:5f:df:a5:fe:3a:81:89:e4:83:0a:db:1d: 1b:86:85:27:ce:aa:a5:e1:14:c8:3c:da:7e:25:2d:88:cd:21: 03:99:03:95:7a:ce:89:62:e6:d0:c8:9c:63:b3:16:72:aa:5e: 8f:53:ce:c7:c4:8d:d5:ef:b0:79:f4:bf:74:6e:92:ce:09:9e: 4a:2c:c6:2c:5d:21:e1:cc:c9:ea:3b:39:91:01:e2:64:d4:db: 4d:9c:a8:7e:b8:9b:95:cd:5c:14:0f:c8:36:48:9b:a0:f6:47: 81:3c:78:af:02:e8:f5:03:3e:41:3a:22:d2:a5:cf:87:ea:d7: 48:fe:f8:28:24:d3:b2:6e:6f:bb:e3:80:50:56:93:92:ef:9c: ac:22:26:a5:8a:77:b9:3b:1f:25:3e:1c:f1:3e:5e:70:8d:45: 73:2c:5f:59:35:7e:9e:4b:27:df:64:a4:ee:6b:7d:7e:90:42: 65:9b:b5:73:cc:90:12:20:b3:01:60:02:08:34:41:82:96:8a: 05:9b:64:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUwODEwMTk0NjUzWhcNMjUwODE3MTk0NjUzWjAYMRYwFAYD VQQDEw02ODk4ZjcyZC00MTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mQniL0EcbpflSU9ill4lPvzYw9anLhYtS+ROH7xGOgy4YeLdrlnO8R6BHc5 GNW8OYUUt4NWj5/281xraJ/aAxWaOS9set6r58wCSfzSZbO5C5VMn7rA/aDAQVEb Rp84mceWNoL4A6IClICR851lqahG8uc7jNlHvaT0Znq4MbK2pKiJw8HdQBK5+ik9 msTY9mxGcl3rejuqBLN+iI0pMmkWaPTWhNJ7zcByJ1iF0d8BzBsonoayJl9BbqnQ FBr7rb4WQ+CIfzbuvwXfrPHifxCWoFS0KFh9CU4tz7yunOtEL4sYqK+GRpu4SvgJ SpgKKfcS/chFwIZcuI9OgvmcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlWTguh kj2LICGd8gDiG8o9YwYjMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj3cSyLDiP29DVAVohbscQj0g9hsCVblkqD5549ybgaDqZMhe2Uz7x 2VXHG9Gt0hHeowc82tUUAZn0t5df36X+OoGJ5IMK2x0bhoUnzqql4RTIPNp+JS2I zSEDmQOVes6JYubQyJxjsxZyql6PU87HxI3V77B59L90bpLOCZ5KLMYsXSHhzMnq OzmRAeJk1NtNnKh+uJuVzVwUD8g2SJug9keBPHivAuj1Az5BOiLSpc+H6tdI/vgo JNOybm+744BQVpOS75ysIialine5Ox8lPhzxPl5wjUVzLF9ZNX6eSyffZKTua31+ kEJlm7VzzJASILMBYAIINEGClooFm2TC -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:10 2025 by rpki-client