$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: erAUUuzIpNrEQ2OO3mPZX79Vwzjs8FGThx0zsgQ+Aw0= Subject key identifier: 77:23:04:C7:A0:F2:E8:79:D5:8E:EB:8C:05:30:CF:45:8E:3F:30:98 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: AE Signing time: Tue 05 Aug 2025 06:36:48 +0000 Manifest this update: Tue 05 Aug 2025 06:36:47 +0000 Manifest next update: Tue 12 Aug 2025 06:36:47 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: ObKMBS4lQ7AqCVbougGrILp+Xw4jmp7EQ+0TwdtEz4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Aug 5 06:36:47 2025 GMT Not After : Aug 12 06:36:47 2025 GMT Subject: CN=6891a67f-4198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:5d:00:d0:38:97:39:58:99:e4:b3:8e:50: 6b:be:c4:7e:ee:9a:4e:e8:f9:07:61:43:cc:b2:1f: 9a:85:93:bd:b5:f8:72:4e:51:89:7c:b8:3f:7c:4a: f6:fa:82:2e:62:1a:ba:5e:73:82:be:81:38:9c:69: e6:e9:42:ad:1f:85:51:bc:88:bd:e5:f6:b5:8a:2a: a4:c6:61:53:70:ed:9f:45:44:23:5f:c0:4e:e6:6e: 97:f4:98:be:bd:0b:22:a6:83:76:a4:ef:ca:ff:c2: a5:de:aa:5d:b5:4d:1b:30:97:ca:11:c4:e0:86:7d: c1:70:87:25:5e:35:c9:a5:e2:b6:84:f6:f3:80:b9: 3e:f0:9f:0b:eb:2d:ce:b2:80:ad:d6:dc:5b:69:4e: f3:7e:5b:dc:ee:5a:48:ea:b3:eb:68:8c:5b:b2:d5: 00:fe:c0:e1:c3:ff:b2:29:69:57:41:1f:61:03:f9: 8d:68:f9:bb:e8:7b:d5:94:ad:2c:91:62:e3:3a:0e: 27:77:e9:04:84:7e:d0:5d:0c:f6:ad:9a:67:f7:20: 72:24:17:dc:a8:ba:16:e2:03:d4:85:55:2c:66:a5: 08:e1:a3:2a:e7:17:09:11:d6:9f:11:6c:ba:40:04: f1:b1:50:04:8a:cf:e5:99:25:cb:3f:fa:09:3c:e3: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:23:04:C7:A0:F2:E8:79:D5:8E:EB:8C:05:30:CF:45:8E:3F:30:98 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:f8:f7:13:4c:c7:be:c0:23:5e:03:4f:2e:2d:81:42:a9: 4a:da:dd:58:1a:7e:08:a6:b4:22:93:7c:7b:d0:e8:7b:93:49: f0:42:87:25:9b:dc:4a:ef:2e:e1:75:22:1d:b1:24:43:19:51: d1:2a:fd:c1:46:ff:8b:90:c3:42:68:70:90:41:eb:47:92:e9: a0:83:7c:8d:6e:0f:a7:cb:fb:0d:d8:47:85:f5:d8:76:ca:ab: 1c:81:e2:c2:c7:5c:6f:f8:6a:a3:1a:79:be:ad:4f:a4:ca:80: 2e:b9:2e:f5:24:dc:50:09:ae:84:9d:0e:44:e0:f9:61:8c:df: 94:3b:16:e0:27:5a:88:d5:c1:96:4c:86:ea:5f:9c:b0:1b:d2: da:52:de:99:70:b7:4c:28:e8:ae:d5:e4:d2:cf:92:c6:7f:ce: 4a:10:07:57:82:ea:c1:14:61:e7:e3:60:74:22:fe:ad:56:fa: 58:e7:9e:c6:06:66:94:e1:fe:3e:ac:ed:79:22:7e:e8:b3:55: f8:2d:db:b8:bc:92:2f:61:e8:48:4f:ad:d5:65:9c:9e:f4:c6: f4:19:16:f4:11:e8:3d:9e:5e:e5:4a:5d:bb:67:79:30:31:53: 53:5c:04:96:86:0a:d5:dd:44:41:ee:f2:e4:8b:63:3d:90:67: fe:ea:48:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUwODA1MDYzNjQ3WhcNMjUwODEyMDYzNjQ3WjAYMRYwFAYD VQQDEw02ODkxYTY3Zi00MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT5dANA4lzlYmeSzjlBrvsR+7ppO6PkHYUPMsh+ahZO9tfhyTlGJfLg/fEr2 +oIuYhq6XnOCvoE4nGnm6UKtH4VRvIi95fa1iiqkxmFTcO2fRUQjX8BO5m6X9Ji+ vQsipoN2pO/K/8Kl3qpdtU0bMJfKEcTghn3BcIclXjXJpeK2hPbzgLk+8J8L6y3O soCt1txbaU7zflvc7lpI6rPraIxbstUA/sDhw/+yKWlXQR9hA/mNaPm76HvVlK0s kWLjOg4nd+kEhH7QXQz2rZpn9yByJBfcqLoW4gPUhVUsZqUI4aMq5xcJEdafEWy6 QATxsVAEis/lmSXLP/oJPONevwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcjBMeg 8uh51Y7rjAUwz0WOPzCYMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV6Pj3E0zHvsAjXgNPLi2BQqlK2t1YGn4IprQik3x70Oh7k0nwQocl m9xK7y7hdSIdsSRDGVHRKv3BRv+LkMNCaHCQQetHkumgg3yNbg+ny/sN2EeF9dh2 yqscgeLCx1xv+GqjGnm+rU+kyoAuuS71JNxQCa6EnQ5E4PlhjN+UOxbgJ1qI1cGW TIbqX5ywG9LaUt6ZcLdMKOiu1eTSz5LGf85KEAdXgurBFGHn42B0Iv6tVvpY557G BmaU4f4+rO15In7os1X4Ldu4vJIvYehIT63VZZye9Mb0GRb0Eeg9nl7lSl27Z3kw MVNTXASWhgrV3URB7vLki2M9kGf+6kic -----END CERTIFICATE-----Generated at Thu Aug 7 05:09:30 2025 by rpki-client