$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: re1JXwIYTK8tvZJUOpZ7gnaQ0AgvanBg25k7nnIKQ5E= Subject key identifier: 9D:12:96:93:9B:D8:E9:B9:79:50:7E:7D:B5:18:F3:72:CB:87:65:90 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 0895 Signing time: Wed 06 Aug 2025 20:53:07 +0000 Manifest this update: Wed 06 Aug 2025 20:53:06 +0000 Manifest next update: Wed 13 Aug 2025 20:53:06 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: xAlSRiE72EaeJEPUtJQ4XKO/jLuPEOsG9Xt43u3JzyE=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Yvl58W31jTaXrFpKwLiylkuL3NEb2f8QrSD0rbbSX2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Aug 6 20:53:06 2025 GMT Not After : Aug 13 20:53:06 2025 GMT Subject: CN=6893c0b2-e7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:c6:0b:85:42:91:30:28:6a:82:eb:e7:30: 69:a7:76:b8:c2:0d:23:c7:63:66:9e:99:c7:87:8f: 37:fc:69:3a:b0:80:f3:9c:c8:6c:29:9d:26:83:64: 16:22:a6:04:a6:38:45:93:58:dc:80:3c:47:a6:88: be:c7:4a:d2:c3:17:34:d0:78:e4:25:ca:b6:b1:53: 46:58:5e:40:5b:63:c7:a7:58:fb:dd:d6:2c:ea:d4: ab:1b:ad:0f:74:8f:f1:23:7b:c9:9b:d5:da:a7:45: 62:22:13:a7:a9:50:66:17:59:54:27:5b:eb:dc:d3: 3d:2d:13:29:08:70:40:67:38:d2:db:9c:5f:3b:82: f8:65:53:f9:5d:fc:b6:54:9f:9c:2a:7f:68:4b:4c: ee:93:12:5a:05:96:6b:f9:b1:7f:ed:4d:b9:c7:bf: 00:d3:ff:26:b3:46:0a:c2:6a:91:b4:c0:df:a4:a8: a6:75:ed:11:bf:74:06:6f:40:2a:46:82:62:58:1d: 60:b6:4d:e2:56:95:6f:a3:54:54:eb:c9:90:54:12: 39:4f:9f:17:14:5f:67:f5:be:fd:72:d5:b0:45:25: 6c:49:41:ac:7b:a6:9c:d6:75:43:fd:84:bc:81:3a: bc:db:71:38:84:e3:c4:a8:33:49:a7:73:52:17:6f: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:96:93:9B:D8:E9:B9:79:50:7E:7D:B5:18:F3:72:CB:87:65:90 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:c6:5f:20:a4:c0:17:05:b2:65:31:62:e2:9e:7b:2d:b1:ef: f5:a5:03:2f:65:25:5d:48:ed:51:f2:c4:38:8d:79:ef:d8:82: 45:14:ee:76:4e:a6:74:45:44:79:dd:88:d7:a8:19:ff:87:ab: 47:77:fd:a7:9a:25:70:7b:fc:ee:c2:75:fb:59:24:78:9f:c2: 9a:7c:34:0f:da:a3:5e:e3:77:1a:aa:a3:ed:88:fd:f7:36:4a: 5c:01:43:3c:82:97:4a:c7:a7:da:35:06:d2:32:22:7f:bd:b0: 79:7d:b0:ba:2e:6b:d3:a0:91:55:87:f5:e6:e6:b4:b0:a0:d5: ad:1e:3f:33:57:c1:94:a9:11:dd:9e:d8:c9:41:9b:92:be:88: ee:3a:b3:61:5d:23:31:9b:b4:88:31:04:ec:b0:88:73:7d:9e: 49:8e:14:4c:a3:4e:91:a2:88:a2:0f:d1:ec:36:84:a6:a8:2e: 2b:30:57:bc:38:b8:51:39:c2:bb:1f:d8:1c:47:06:67:3c:d1: e9:8f:ce:bb:01:6b:8e:d8:97:91:58:cc:b9:a1:7d:cc:d9:2e: e0:c1:3f:64:c4:a8:f4:f7:78:aa:15:d6:58:55:b4:bd:90:1b: 24:45:88:c0:0c:76:3c:54:e3:4d:bc:16:c2:d2:19:df:5d:09: e3:b0:23:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUwODA2MjA1MzA2WhcNMjUwODEzMjA1MzA2WjAYMRYwFAYD VQQDEw02ODkzYzBiMi1lN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqTGC4VCkTAoaoLr5zBpp3a4wg0jx2NmnpnHh483/Gk6sIDznMhsKZ0mg2QW IqYEpjhFk1jcgDxHpoi+x0rSwxc00HjkJcq2sVNGWF5AW2PHp1j73dYs6tSrG60P dI/xI3vJm9Xap0ViIhOnqVBmF1lUJ1vr3NM9LRMpCHBAZzjS25xfO4L4ZVP5Xfy2 VJ+cKn9oS0zukxJaBZZr+bF/7U25x78A0/8ms0YKwmqRtMDfpKimde0Rv3QGb0Aq RoJiWB1gtk3iVpVvo1RU68mQVBI5T58XFF9n9b79ctWwRSVsSUGse6ac1nVD/YS8 gTq823E4hOPEqDNJp3NSF2+/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0SlpOb 2Om5eVB+fbUY83LLh2WQMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUxl8gpMAXBbJlMWLinnstse/1pQMvZSVdSO1R8sQ4jXnv2IJFFO52 TqZ0RUR53YjXqBn/h6tHd/2nmiVwe/zuwnX7WSR4n8KafDQP2qNe43caqqPtiP33 NkpcAUM8gpdKx6faNQbSMiJ/vbB5fbC6LmvToJFVh/Xm5rSwoNWtHj8zV8GUqRHd ntjJQZuSvojuOrNhXSMxm7SIMQTssIhzfZ5JjhRMo06RooiiD9HsNoSmqC4rMFe8 OLhROcK7H9gcRwZnPNHpj867AWuO2JeRWMy5oX3M2S7gwT9kxKj093iqFdZYVbS9 kBskRYjADHY8VONNvBbC0hnfXQnjsCOv -----END CERTIFICATE-----Generated at Thu Aug 7 05:13:02 2025 by rpki-client