$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: oRcEcinUgXvaldXEsfbu0T7ZgHoVClAOdPJuPChJU+w= Subject key identifier: 28:FE:B7:3F:ED:AC:79:CD:22:92:AB:82:9C:67:BF:ED:5B:81:54:15 Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 2A Signing time: Sat 09 Aug 2025 08:14:51 +0000 Manifest this update: Sat 09 Aug 2025 08:14:50 +0000 Manifest next update: Sat 16 Aug 2025 08:14:50 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: 09m0SzfdIO1DA0gGC+KCPY38pjYuL+EHymKv2OguLcI=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Aug 9 08:14:50 2025 GMT Not After : Aug 16 08:14:50 2025 GMT Subject: CN=6897037b-b51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:62:1d:f4:7a:39:bc:c1:68:83:dc:41:f7: ce:2e:5a:0a:c5:a8:83:85:fa:80:5f:f1:ce:2d:12: 20:7e:22:43:01:88:87:22:41:0a:d6:2b:64:58:c5: 53:1f:3a:b0:81:0c:e6:59:b6:e7:9a:59:13:b9:4b: 4f:6e:2e:2b:3e:c8:6d:0f:f0:3f:17:a6:4a:2b:a1: e5:81:98:06:48:77:8d:80:6d:4f:8b:f7:02:7e:33: 93:af:60:6f:c6:39:44:c7:8a:dd:63:4c:31:6c:b6: fd:5d:1d:02:5a:86:9e:f2:87:51:f5:84:6a:8c:85: 6a:01:2b:71:b4:2d:f2:1f:e9:c8:e7:3e:a9:81:26: cb:26:6f:22:2e:2b:8d:6b:78:48:23:29:2d:a1:94: e0:1b:33:a5:c8:5f:e6:37:ea:91:4c:21:2f:9b:87: ff:09:f4:b0:86:f9:b4:b1:28:0f:46:75:94:b4:45: 0f:95:44:07:8b:86:95:13:9a:d0:b1:78:93:a3:49: 24:0c:ba:f4:d7:81:fa:1d:77:a2:fa:d0:73:54:43: 40:a6:04:8d:a4:30:57:fe:78:5b:f3:1d:47:4e:71: 2f:2c:a1:2e:fd:e7:50:29:ac:38:11:16:9a:67:02: eb:f3:36:f6:ad:84:74:43:30:46:57:8c:f6:0e:c4: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:B7:3F:ED:AC:79:CD:22:92:AB:82:9C:67:BF:ED:5B:81:54:15 X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4f:7d:83:7d:45:65:a0:a6:37:5b:2d:4a:38:da:16:89:35: 7b:72:35:9e:70:8d:13:db:9f:39:c8:aa:25:e6:f2:d9:ec:2d: 22:a7:d2:db:e7:fe:12:3f:47:6e:df:84:33:6e:96:35:00:7f: f5:01:76:3a:7c:e1:dc:3d:6c:ec:8e:0e:5b:54:e1:c7:19:e3: 6d:f3:99:ea:6c:ef:bb:40:b7:e2:6c:5a:d0:3a:f8:43:12:05: 5c:00:8f:7f:85:75:ff:1c:45:ee:0f:17:30:1f:61:f7:00:c8: 94:34:5d:5b:86:c5:a4:38:fe:b7:96:a3:46:a6:a1:68:fa:36: 8c:29:ea:e2:61:aa:b9:e9:85:d7:7d:db:46:44:98:b8:a2:ae: 58:bd:fc:b6:be:c8:48:2a:33:ef:ec:21:65:d6:50:fb:63:e6: 35:a0:01:77:23:da:ad:2b:72:48:32:0b:70:62:b4:6a:c7:14: 85:9f:28:ff:1d:3b:29:e6:69:e9:cd:93:cd:f6:ab:38:a9:82: 55:fe:27:fb:cb:66:17:7f:01:6e:01:a9:fe:83:21:0f:4e:19: cf:6c:be:6b:dc:62:ab:57:96:66:b8:3c:20:23:bb:11:a0:9a: 78:d2:4a:c1:da:c3:fe:12:95:14:6a:35:9d:63:2b:bf:bc:23: 5b:de:4c:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTA4MDkwODE0NTBaFw0yNTA4MTYwODE0NTBaMBgxFjAUBgNV BAMTDTY4OTcwMzdiLWI1MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyX2Id9Ho5vMFog9xB984uWgrFqIOF+oBf8c4tEiB+IkMBiIciQQrWK2RYxVMf OrCBDOZZtueaWRO5S09uLis+yG0P8D8XpkoroeWBmAZId42AbU+L9wJ+M5OvYG/G OUTHit1jTDFstv1dHQJahp7yh1H1hGqMhWoBK3G0LfIf6cjnPqmBJssmbyIuK41r eEgjKS2hlOAbM6XIX+Y36pFMIS+bh/8J9LCG+bSxKA9GdZS0RQ+VRAeLhpUTmtCx eJOjSSQMuvTXgfodd6L60HNUQ0CmBI2kMFf+eFvzHUdOcS8soS7951AprDgRFppn AuvzNvathHRDMEZXjPYOxKi1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKP63P+2s ec0ikquCnGe/7VuBVBUwHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ5PfYN9RWWgpjdbLUo42haJNXtyNZ5wjRPbnznIqiXm8tnsLSKn0tvn /hI/R27fhDNuljUAf/UBdjp84dw9bOyODltU4ccZ423zmeps77tAt+JsWtA6+EMS BVwAj3+Fdf8cRe4PFzAfYfcAyJQ0XVuGxaQ4/reWo0amoWj6Nowp6uJhqrnphdd9 20ZEmLiirli9/La+yEgqM+/sIWXWUPtj5jWgAXcj2q0rckgyC3BitGrHFIWfKP8d OynmaenNk832qzipglX+J/vLZhd/AW4Bqf6DIQ9OGc9svmvcYqtXlma4PCAjuxGg mnjSSsHaw/4SlRRqNZ1jK7+8I1veTPI= -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:04 2025 by rpki-client