$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: y7oJf184QKySMWhs8uwRBznQXf16G6yJ3TVBUblA0Rw= Subject key identifier: 1B:E3:38:BB:E8:8E:31:5E:78:74:B9:3C:11:EA:6F:FA:BD:0C:91:1C Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: E1 Signing time: Tue 05 Aug 2025 05:58:05 +0000 Manifest this update: Tue 05 Aug 2025 05:58:04 +0000 Manifest next update: Tue 12 Aug 2025 05:58:04 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: oNSxxJ5thlP0QmYW77BCJW3zQYqD2phn8b5RXntEG14=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: tx39yOwcQZ3gBtGd5caOM0xSqxEQGuym5ewcqSlNEPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Aug 5 05:58:04 2025 GMT Not After : Aug 12 05:58:04 2025 GMT Subject: CN=68919d6c-646f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:ed:48:ac:32:2c:f1:8b:4c:65:5c:f0:aa: 02:e8:50:ff:ad:5f:a0:ba:9e:47:a9:bf:3b:5a:54: 13:10:db:64:11:e3:7b:12:69:d7:93:e0:ec:3a:c8: cb:4f:9a:ea:98:ae:dc:f2:61:76:17:4f:3d:74:de: 85:9e:72:b7:94:99:61:ae:da:56:52:b0:9a:d2:06: ed:15:94:e9:30:47:6a:16:b0:b5:0e:f3:f3:6d:80: d0:3c:fe:d3:89:13:40:6f:47:d4:83:5c:7f:7f:36: 19:aa:5d:8f:e2:13:3f:1b:07:f5:a0:ee:f9:ad:7e: 03:51:41:9f:01:2c:c5:c9:1a:d0:9b:47:ed:05:e5: 00:d3:bc:3a:00:a1:c5:56:08:33:7c:35:35:3d:8c: ee:4b:53:a3:3f:dd:74:fe:f5:b3:fe:82:55:67:0c: dd:6a:de:b0:8c:21:e3:f5:21:7c:42:28:cd:9a:b0: 89:41:d8:c4:71:8b:e9:7e:27:12:c7:8a:0a:f7:28: 0b:5f:0d:df:52:77:41:93:5a:84:0f:3c:b0:0b:8c: 1f:a6:f4:b0:f3:ef:84:e9:f6:79:53:3c:cd:14:89: eb:37:79:1a:c2:e2:21:1d:c9:d9:d7:dc:75:6b:72: 7e:32:9c:7e:b6:e1:5e:74:c3:ad:50:24:ac:10:bb: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E3:38:BB:E8:8E:31:5E:78:74:B9:3C:11:EA:6F:FA:BD:0C:91:1C X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:97:1a:7d:f1:17:52:32:58:cf:73:e3:38:47:42:18:c9:8a: 0d:29:53:be:56:82:b2:9e:a0:b1:10:a5:44:7c:dd:13:ea:3e: e4:eb:71:80:16:67:c6:2b:cf:01:e3:8e:61:e5:fe:d9:08:cc: bb:56:cf:45:98:cd:0c:b8:a7:ba:bf:b8:22:82:2c:c5:c2:28: a0:7a:70:e7:96:7a:1a:14:36:35:83:f0:50:81:ef:37:52:23: bf:80:92:1a:ea:53:ae:e0:5e:d9:c0:1c:19:25:35:98:98:4c: a7:95:63:8d:53:1e:9b:bc:8f:fa:78:cb:ab:f5:70:13:fb:64: a4:81:d3:6d:c8:4d:f8:58:04:c5:70:de:fe:6a:98:42:fa:0b: 07:38:9e:2a:bd:31:1a:7b:3c:c4:5f:1c:82:4f:03:0e:16:02: 05:c0:7e:09:e8:21:3b:76:5e:26:12:eb:98:06:4b:80:49:e8: 11:35:fe:a7:b3:6c:47:3c:57:1e:6c:e3:a9:20:29:c1:6d:8b: 41:e5:27:48:7d:e2:0c:b6:8e:40:e9:1a:2d:c9:9b:1a:8b:a3: 6d:b5:b1:c3:5e:30:19:d4:e2:cb:aa:75:16:07:f0:ed:e9:ac: dd:00:a2:78:d3:6a:5f:30:a8:99:24:fa:d1:bf:3c:aa:d9:57: ff:0c:0a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUwODA1MDU1ODA0WhcNMjUwODEyMDU1ODA0WjAYMRYwFAYD VQQDEw02ODkxOWQ2Yy02NDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwULtSKwyLPGLTGVc8KoC6FD/rV+gup5Hqb87WlQTENtkEeN7EmnXk+DsOsjL T5rqmK7c8mF2F089dN6FnnK3lJlhrtpWUrCa0gbtFZTpMEdqFrC1DvPzbYDQPP7T iRNAb0fUg1x/fzYZql2P4hM/Gwf1oO75rX4DUUGfASzFyRrQm0ftBeUA07w6AKHF VggzfDU1PYzuS1OjP910/vWz/oJVZwzdat6wjCHj9SF8QijNmrCJQdjEcYvpficS x4oK9ygLXw3fUndBk1qEDzywC4wfpvSw8++E6fZ5UzzNFInrN3kawuIhHcnZ19x1 a3J+Mpx+tuFedMOtUCSsELvecQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvjOLvo jjFeeHS5PBHqb/q9DJEcMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3lxp98RdSMljPc+M4R0IYyYoNKVO+VoKynqCxEKVEfN0T6j7k63GA FmfGK88B445h5f7ZCMy7Vs9FmM0MuKe6v7gigizFwiigenDnlnoaFDY1g/BQge83 UiO/gJIa6lOu4F7ZwBwZJTWYmEynlWONUx6bvI/6eMur9XAT+2SkgdNtyE34WATF cN7+aphC+gsHOJ4qvTEaezzEXxyCTwMOFgIFwH4J6CE7dl4mEuuYBkuASegRNf6n s2xHPFcebOOpICnBbYtB5SdIfeIMto5A6RotyZsai6NttbHDXjAZ1OLLqnUWB/Dt 6azdAKJ402pfMKiZJPrRvzyq2Vf/DAoY -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:34 2025 by rpki-client