$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: zcUZu9LBo+z+dqo6X1OyzMAP5USM6H4cGJD48BNElSY= Subject key identifier: 98:47:BA:49:9C:F1:CA:0E:73:1A:1F:B2:87:71:F3:5F:FE:33:9F:13 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 0196 Signing time: Sat 09 Aug 2025 03:44:49 +0000 Manifest this update: Sat 09 Aug 2025 03:44:48 +0000 Manifest next update: Sat 16 Aug 2025 03:44:48 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: 62GRIRmfWiKQzyLnWA1GUlTO7QvvM58qI9UQhmZlnXU=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Aug 9 03:44:48 2025 GMT Not After : Aug 16 03:44:48 2025 GMT Subject: CN=6896c431-2bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:4c:4f:94:62:18:23:54:5a:1a:98:13:97: 61:35:7a:78:41:67:08:02:20:d5:a6:b9:ce:9f:3b: fc:18:88:6f:e6:c4:f2:11:e7:a8:3c:b8:16:24:5d: a2:c0:48:ed:f8:d2:08:05:f5:14:fc:57:48:d3:26: cb:d7:09:2d:50:0e:46:26:61:93:4b:0b:0f:b9:89: 2b:e1:03:33:a9:9d:52:b5:c2:1c:ad:c2:d2:cd:a1: 23:f0:d7:41:d4:77:86:ba:8e:66:d4:fe:46:1e:dd: f2:e2:37:5c:0b:66:c0:45:26:de:82:57:67:1b:93: 39:52:a4:aa:49:4a:79:df:6d:74:79:da:5c:21:69: 01:83:bf:4c:4a:51:b8:6d:d6:ec:43:c8:53:6b:7a: 08:61:ba:cf:b3:3f:4d:09:25:a9:65:fd:00:ac:44: 87:4a:59:d4:19:23:18:15:1b:72:bd:a4:f7:a9:6f: 83:22:d9:8c:5b:8f:64:ba:bb:85:09:f4:3f:3b:44: 24:55:97:0d:1f:78:85:4c:7b:f7:d4:9b:b4:d0:65: 76:21:df:f2:46:d7:79:30:14:83:2b:c6:2c:33:33: 33:84:9a:35:e8:f2:ef:42:fc:54:85:59:b0:be:e4: 1f:9c:bb:a2:7d:d6:9f:6d:72:c8:0f:2a:82:cc:50: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:47:BA:49:9C:F1:CA:0E:73:1A:1F:B2:87:71:F3:5F:FE:33:9F:13 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:eb:63:51:d5:b0:9c:31:5d:6f:d4:25:f0:18:ef:a9:12:ec: 32:29:db:da:cb:9f:ac:94:71:76:bc:e6:8d:59:f7:6d:03:66: f7:98:c5:bc:e9:7e:17:aa:7c:18:e7:9d:3b:17:2e:4e:8b:e4: a7:f0:d9:a5:f8:98:d3:37:6c:c8:97:ce:3a:1b:2b:d6:e1:0c: bc:ed:b8:c1:e6:9b:72:0d:1e:27:ea:88:b1:b8:ca:3e:e2:a7: cc:cc:e9:6b:6a:c1:30:77:df:70:3f:35:77:45:8e:69:3f:db: 3a:e8:23:57:1b:c5:b7:b6:57:c1:36:3a:d7:65:a8:29:9b:69: ee:52:e0:02:74:fe:95:2a:8e:54:ee:22:3b:e3:28:71:80:c0: 3f:c7:1e:d2:87:ed:24:45:72:40:3e:ff:52:eb:91:b9:c8:6d: 0e:0d:ec:e5:1c:af:83:59:ac:79:22:ab:56:c4:61:68:0b:a6: aa:f2:59:94:85:53:ad:b4:89:6d:fc:2c:f2:55:88:b3:e6:0e: 21:a5:35:1b:05:4d:2a:0f:d3:22:e9:fe:4f:b0:c5:c6:db:67: e3:c7:bf:5a:d3:63:6c:2a:fb:7b:af:d8:79:a5:30:d0:3d:3a: f3:c6:c7:e2:61:4a:7b:80:23:03:21:fa:70:0f:57:a1:13:30: 4f:f4:b4:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUwODA5MDM0NDQ4WhcNMjUwODE2MDM0NDQ4WjAYMRYwFAYD VQQDEw02ODk2YzQzMS0yYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuERMT5RiGCNUWhqYE5dhNXp4QWcIAiDVprnOnzv8GIhv5sTyEeeoPLgWJF2i wEjt+NIIBfUU/FdI0ybL1wktUA5GJmGTSwsPuYkr4QMzqZ1StcIcrcLSzaEj8NdB 1HeGuo5m1P5GHt3y4jdcC2bARSbegldnG5M5UqSqSUp53210edpcIWkBg79MSlG4 bdbsQ8hTa3oIYbrPsz9NCSWpZf0ArESHSlnUGSMYFRtyvaT3qW+DItmMW49kuruF CfQ/O0QkVZcNH3iFTHv31Ju00GV2Id/yRtd5MBSDK8YsMzMzhJo16PLvQvxUhVmw vuQfnLuifdafbXLIDyqCzFCK6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhHukmc 8coOcxofsodx81/+M58TMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB362NR1bCcMV1v1CXwGO+pEuwyKdvay5+slHF2vOaNWfdtA2b3mMW8 6X4XqnwY5507Fy5Oi+Sn8Nml+JjTN2zIl846GyvW4Qy87bjB5ptyDR4n6oixuMo+ 4qfMzOlrasEwd99wPzV3RY5pP9s66CNXG8W3tlfBNjrXZagpm2nuUuACdP6VKo5U 7iI74yhxgMA/xx7Sh+0kRXJAPv9S65G5yG0ODezlHK+DWax5IqtWxGFoC6aq8lmU hVOttIlt/CzyVYiz5g4hpTUbBU0qD9Mi6f5PsMXG22fjx79a02NsKvt7r9h5pTDQ PTrzxsfiYUp7gCMDIfpwD1ehEzBP9LSy -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:17 2025 by rpki-client