$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: seUdk5equ9dcPhU1WwtaVg8SGAsODvsirPzQKF5j3q8= Subject key identifier: B0:8D:5D:89:FD:10:F0:E9:F1:F2:5C:ED:2F:22:8E:B3:BA:7F:05:FD Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 32 Signing time: Tue 05 Aug 2025 08:16:47 +0000 Manifest this update: Tue 05 Aug 2025 08:16:47 +0000 Manifest next update: Tue 12 Aug 2025 08:16:47 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: 6BRNnJCCOPdGZK9k7qRc12BAdohBO29oGOjr2sg+2qw=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Aug 5 08:16:47 2025 GMT Not After : Aug 12 08:16:47 2025 GMT Subject: CN=6891bdef-df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:e2:b2:fc:c9:e9:c0:6d:be:48:ba:dc:12: 4d:89:6f:ed:8c:03:f0:62:8b:4f:1e:e7:a7:3d:20: fb:3e:a0:21:4d:16:57:f5:c3:00:ef:14:a3:bd:f2: de:1a:21:87:b3:ff:10:38:68:c1:a1:54:a8:af:99: 4f:a4:65:60:12:30:c5:2e:fd:d2:9f:a5:bf:24:9f: a7:d8:54:01:4b:6b:33:46:f7:ee:87:9c:a4:4d:0b: d4:f1:f9:d5:bd:ef:20:38:5f:1b:00:36:8d:be:3b: 72:1f:37:24:2c:98:72:c1:76:61:82:ec:c4:f4:55: 14:cf:17:96:37:82:b0:d1:23:1c:1d:26:e4:94:57: 9e:6c:02:07:3e:24:15:89:f9:09:dd:8f:23:51:c1: c4:40:b7:c4:51:b5:b6:6b:f2:39:d3:ec:09:1d:fc: 66:c1:b4:42:fb:8f:96:c9:56:56:a9:ef:cb:bd:52: 8a:f4:26:ea:23:6b:19:ad:4c:d0:44:a6:d7:50:38: 4d:38:a4:6d:1a:5a:85:3e:ba:46:ab:36:09:17:e1: 8e:f8:21:7c:d9:3f:0e:1f:37:e2:0c:68:e2:0e:78: 47:90:7f:11:24:7c:d3:ac:14:4d:41:4f:1d:3d:a3: c1:4b:b8:1d:68:a9:69:17:8e:49:a0:e3:eb:a7:09: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8D:5D:89:FD:10:F0:E9:F1:F2:5C:ED:2F:22:8E:B3:BA:7F:05:FD X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:09:b6:45:5e:76:ab:64:94:84:b0:d1:1c:61:c3:e7:46:8a: 4d:70:fb:69:07:83:aa:4b:a2:50:3e:53:a9:d8:05:c2:03:08: 30:91:7e:b5:94:60:37:c8:e1:48:4d:de:8c:f1:72:fe:8a:57: b8:19:9a:eb:41:e2:03:8c:60:7d:dc:8c:83:13:b7:d9:36:7f: b6:e7:c5:37:94:89:42:32:92:dd:43:c3:b3:66:ce:e4:f0:f9: 92:f6:5d:24:24:be:fc:27:f0:04:b2:fc:ff:40:90:ca:8e:64: e1:fa:7b:5c:57:12:34:f0:ba:f2:a6:1f:76:35:25:de:dc:02: bd:ac:83:6a:16:07:82:69:1e:da:df:81:ec:f2:37:9d:39:0e: c2:49:84:ed:80:d1:87:eb:44:e2:9b:1c:bd:30:5f:07:b7:aa: 55:fb:93:6d:a4:01:3c:51:8b:17:c9:c3:99:6e:ae:c4:7e:1b: 04:ae:cb:11:7d:35:19:d7:90:bc:16:59:70:7d:39:09:3a:f3: 82:87:82:0d:b2:00:8b:33:df:67:23:10:e8:9c:f2:2c:87:f8: f9:25:af:42:6a:0d:72:9d:c4:89:9a:53:6a:01:77:67:51:4f: 31:4f:1c:c7:3b:bf:60:d1:41:3a:26:34:3d:89:0d:5b:48:16: bd:7c:f7:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTA4MDUwODE2NDdaFw0yNTA4MTIwODE2NDdaMBgxFjAUBgNV BAMTDTY4OTFiZGVmLWRmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ueKy/MnpwG2+SLrcEk2Jb+2MA/Bii08e56c9IPs+oCFNFlf1wwDvFKO98t4a IYez/xA4aMGhVKivmU+kZWASMMUu/dKfpb8kn6fYVAFLazNG9+6HnKRNC9Tx+dW9 7yA4XxsANo2+O3IfNyQsmHLBdmGC7MT0VRTPF5Y3grDRIxwdJuSUV55sAgc+JBWJ +QndjyNRwcRAt8RRtbZr8jnT7Akd/GbBtEL7j5bJVlap78u9Uor0JuojaxmtTNBE ptdQOE04pG0aWoU+ukarNgkX4Y74IXzZPw4fN+IMaOIOeEeQfxEkfNOsFE1BTx09 o8FLuB1oqWkXjkmg4+unCcM/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsI1dif0Q 8Onx8lztLyKOs7p/Bf0wHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0JtkVedqtklISw0Rxhw+dGik1w+2kHg6pLolA+U6nYBcIDCDCRfrWU YDfI4UhN3ozxcv6KV7gZmutB4gOMYH3cjIMTt9k2f7bnxTeUiUIykt1Dw7NmzuTw +ZL2XSQkvvwn8ASy/P9AkMqOZOH6e1xXEjTwuvKmH3Y1Jd7cAr2sg2oWB4JpHtrf gezyN505DsJJhO2A0YfrROKbHL0wXwe3qlX7k22kATxRixfJw5lursR+GwSuyxF9 NRnXkLwWWXB9OQk684KHgg2yAIsz32cjEOic8iyH+Pklr0JqDXKdxImaU2oBd2dR TzFPHMc7v2DRQTomND2JDVtIFr1896w= -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:15 2025 by rpki-client