$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: 2vUVE4I4AdUqa5KO+g0WU8eMoUDfZ2NQo3XHx/dUMts= Subject key identifier: 03:29:E1:8D:55:83:47:B4:4E:04:1D:D5:14:47:72:02:8A:12:1B:83 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0C8E Signing time: Sun 10 Aug 2025 18:20:19 +0000 Manifest this update: Sun 10 Aug 2025 18:20:18 +0000 Manifest next update: Sun 17 Aug 2025 18:20:18 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: BQ5es8xVYdAsOohiFkXviBYYgocxAdl1AfPzY3OuIGQ=) 2: E8F85ED4EC5811EFA9B9C618C4F9AE02.roa (hash: ykoz29uCG/11xDnxQBhHvrkmfn5Ejy8eSvfC/XRGcV0=) 3: 47DADED8EC5211EFBF551F6DC4F9AE02.roa (hash: Ns3EqlAuypXsdC/A5rNqIcQNoK/ntkU/96rQkctaiRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Aug 10 18:20:18 2025 GMT Not After : Aug 17 18:20:18 2025 GMT Subject: CN=6898e2e3-d395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:d1:e1:4b:85:b9:d4:82:37:3a:41:dc:de: f1:1f:c9:18:d4:fd:ce:77:df:0d:43:24:28:a4:58: 92:04:93:ed:0b:9d:9f:d6:9b:e8:c2:00:28:1a:c1: 1b:13:6e:38:d0:6b:e4:0d:74:41:f9:5d:97:38:f4: ce:32:93:3b:9b:ca:9b:f5:c4:3b:87:96:84:07:04: 9f:1e:e7:41:50:f7:95:5f:bf:f2:ec:3d:d5:04:af: eb:bf:ad:96:f9:f1:83:5e:b8:34:49:f0:cf:7d:c5: 00:2f:75:e3:5d:e6:19:2d:92:bb:4e:af:04:a1:72: 7f:ef:9b:e9:76:18:86:15:b3:8f:25:c5:b5:35:ed: bd:25:11:59:1c:25:a6:70:44:26:dc:54:05:09:a3: e9:32:ef:b5:27:e1:b1:e7:4f:29:fa:34:de:52:7c: a8:eb:2e:48:bb:35:93:2b:67:c2:98:fc:2c:d8:bc: 8a:24:d1:a5:a7:e2:a0:0c:c1:5e:b9:92:93:59:a9: 95:eb:a8:f8:0d:c4:70:93:51:29:3a:25:34:2d:21: eb:77:22:1b:f7:59:b1:91:d0:a4:94:61:3e:8a:4c: 3a:04:96:8d:71:ce:c1:27:e9:94:53:3c:07:50:ca: 73:8d:36:c1:14:b0:86:04:23:50:4a:0e:67:48:27: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:E1:8D:55:83:47:B4:4E:04:1D:D5:14:47:72:02:8A:12:1B:83 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2a:2c:2d:9f:0e:9b:73:2c:2c:59:93:b7:6e:bd:b3:c2:68: 6a:d7:7b:65:f3:87:fd:46:b8:0e:5c:a3:2a:8f:6d:a9:9d:91: 5e:76:3c:d5:5c:f3:48:ca:5a:d8:58:e1:c9:fb:25:d4:58:bc: ca:53:f7:36:bc:53:5d:98:5c:b0:5b:71:05:82:e7:d6:c5:29: df:8b:cd:d7:ee:09:80:d1:22:ce:c1:bb:cf:94:27:6c:72:0a: 16:68:30:bb:ba:dc:71:53:52:85:f9:3d:4a:08:91:9f:00:20: 85:b5:f9:80:35:ab:be:d2:4e:b9:26:38:ee:ad:42:13:db:3c: 57:ae:c7:0e:ee:d5:00:bb:fd:7f:17:3f:e1:c3:2d:d6:fe:27: 78:cd:32:ff:75:3c:ce:af:ab:09:f9:83:fa:64:49:43:1a:09: f0:63:61:b1:dd:42:97:aa:da:dd:f8:bf:3c:f0:49:1f:93:f5: 11:3a:ad:8e:24:bd:3d:d1:43:00:7b:ef:0d:b8:be:a9:8c:90: e6:66:2d:bf:0a:b6:0e:c8:cd:43:6c:5f:8a:4d:51:a3:ca:71: 10:a0:04:80:38:19:b3:00:26:31:3f:52:0f:d0:69:c5:27:4c: d4:3f:57:ff:5d:d5:a8:8f:94:d1:df:f7:7e:25:18:77:60:2e: a5:2b:69:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUwODEwMTgyMDE4WhcNMjUwODE3MTgyMDE4WjAYMRYwFAYD VQQDEw02ODk4ZTJlMy1kMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnfR4UuFudSCNzpB3N7xH8kY1P3Od98NQyQopFiSBJPtC52f1pvowgAoGsEb E2440GvkDXRB+V2XOPTOMpM7m8qb9cQ7h5aEBwSfHudBUPeVX7/y7D3VBK/rv62W +fGDXrg0SfDPfcUAL3XjXeYZLZK7Tq8EoXJ/75vpdhiGFbOPJcW1Ne29JRFZHCWm cEQm3FQFCaPpMu+1J+Gx508p+jTeUnyo6y5IuzWTK2fCmPws2LyKJNGlp+KgDMFe uZKTWamV66j4DcRwk1EpOiU0LSHrdyIb91mxkdCklGE+ikw6BJaNcc7BJ+mUUzwH UMpzjTbBFLCGBCNQSg5nSCdEhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMp4Y1V g0e0TgQd1RRHcgKKEhuDMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfKiwtnw6bcywsWZO3br2zwmhq13tl84f9RrgOXKMqj22pnZFedjzV XPNIylrYWOHJ+yXUWLzKU/c2vFNdmFywW3EFgufWxSnfi83X7gmA0SLOwbvPlCds cgoWaDC7utxxU1KF+T1KCJGfACCFtfmANau+0k65JjjurUIT2zxXrscO7tUAu/1/ Fz/hwy3W/id4zTL/dTzOr6sJ+YP6ZElDGgnwY2Gx3UKXqtrd+L888Ekfk/UROq2O JL090UMAe+8NuL6pjJDmZi2/CrYOyM1DbF+KTVGjynEQoASAOBmzACYxP1IP0GnF J0zUP1f/XdWoj5TR3/d+JRh3YC6lK2n5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:36:30 2025 by rpki-client