$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json) Hash identifier: p4ggVwsfhCjwuW1OQqjcaXKz0xVfN2CWDMMdPVKutOQ= Subject key identifier: D3:F1:10:0E:F1:12:3A:7B:22:4A:8E:10:E7:B5:43:C0:C4:82:71:83 Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft Manifest number: 04E8 Signing time: Wed 13 Aug 2025 00:11:37 +0000 Manifest this update: Wed 13 Aug 2025 00:11:37 +0000 Manifest next update: Wed 20 Aug 2025 00:11:37 +0000 Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: JXVrnu/webwvWEFlgsWQ+PD2yp7hQeIFkKHw0LQVoIY=) 2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: XOTWPX30EoXJqKV6109bwG+UksO95BBHigXDmFEItd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Validity Not Before: Aug 13 00:11:37 2025 GMT Not After : Aug 20 00:11:37 2025 GMT Subject: CN=689bd839-1ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:42:43:99:e1:c3:49:7d:06:93:b7:55:c4: 71:12:e5:e7:2d:1c:3a:e5:ae:41:1e:88:16:88:cb: 73:c1:c3:1c:c2:07:3f:b7:d6:2e:55:53:64:9f:ed: d6:62:c3:08:99:00:c3:12:8d:43:62:1c:34:5d:27: 84:e4:b0:9e:e7:bb:c7:70:10:f1:55:69:2d:21:cc: 69:c6:ea:a1:6b:f9:2d:ab:d7:54:dd:31:59:c9:fe: 2d:50:63:9d:1d:c5:f6:5f:cb:41:93:40:99:8c:85: 6a:f3:93:ae:1c:15:e0:0e:08:cd:7f:ce:9c:e0:b5: 7d:a4:81:41:c4:64:bb:6e:3f:74:75:48:49:d1:e5: c0:49:a9:23:81:38:c2:d2:75:65:db:97:c6:c1:dc: ca:30:58:3a:43:74:57:e5:72:57:22:77:2a:35:50: 41:f3:6d:c2:fc:7e:c5:b9:32:ea:57:41:14:35:9e: 4e:59:6a:e3:ed:e9:27:6b:8e:ce:09:37:2a:a2:21: 3f:ef:4c:49:83:da:fe:02:88:04:04:5a:be:b3:8c: da:e9:bb:5c:53:da:9b:0a:dd:d4:55:91:95:f0:80: 97:1b:f7:b1:14:d8:e6:53:ab:1a:c1:6d:a1:d0:83: b8:39:a3:2a:c4:0b:cc:0a:47:42:83:6f:88:0e:64: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:10:0E:F1:12:3A:7B:22:4A:8E:10:E7:B5:43:C0:C4:82:71:83 X509v3 Authority Key Identifier: keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8c:6e:32:2d:d3:b6:7f:a6:99:a4:48:24:df:da:d3:4f:c2: 5c:44:20:d4:22:63:99:c2:d8:bd:0f:98:6f:ba:1d:43:38:41: be:02:d5:99:8f:80:d6:2b:e4:c8:8b:b3:ad:52:97:35:e6:ab: bf:de:37:ed:26:b1:d7:06:57:2c:da:38:7e:ec:9d:0e:97:bd: c1:47:3c:a0:e9:2d:3f:a6:5b:29:ba:24:8d:89:19:86:e4:5d: 3a:43:8f:f2:7b:d4:7d:d4:16:57:5b:33:68:f7:51:ca:72:3a: 5e:96:14:e3:d9:95:b1:19:6d:af:b0:22:74:dc:2a:3d:9d:1b: b9:ac:d3:89:05:eb:49:41:bd:fc:70:5c:5e:db:ea:54:27:70: 28:ac:39:2e:09:bc:ec:89:83:d1:60:40:e4:a8:8f:27:32:1d: 7a:9e:ac:46:7c:a0:c8:ba:20:04:ee:34:80:a7:94:68:07:ec: 99:c6:e7:8f:47:5d:00:0e:f4:48:a3:60:37:95:fa:7d:ad:ff: b1:74:6d:c6:d1:28:43:02:86:17:a8:19:98:d2:5a:8a:f2:16: 1d:8a:c6:e5:9e:69:0f:d7:24:28:c7:38:28:d3:71:9c:f6:5a: 45:bb:23:37:cb:9c:53:cc:71:a1:f5:3e:6b:fc:ca:ef:85:78: a2:ff:2b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD OEMxRTM5NTYwHhcNMjUwODEzMDAxMTM3WhcNMjUwODIwMDAxMTM3WjAYMRYwFAYD VQQDEw02ODliZDgzOS0xZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDxCQ5nhw0l9BpO3VcRxEuXnLRw65a5BHogWiMtzwcMcwgc/t9YuVVNkn+3W YsMImQDDEo1DYhw0XSeE5LCe57vHcBDxVWktIcxpxuqha/ktq9dU3TFZyf4tUGOd HcX2X8tBk0CZjIVq85OuHBXgDgjNf86c4LV9pIFBxGS7bj90dUhJ0eXASakjgTjC 0nVl25fGwdzKMFg6Q3RX5XJXIncqNVBB823C/H7FuTLqV0EUNZ5OWWrj7ekna47O CTcqoiE/70xJg9r+AogEBFq+s4za6btcU9qbCt3UVZGV8ICXG/exFNjmU6sawW2h 0IO4OaMqxAvMCkdCg2+IDmQZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPxEA7x Ejp7IkqOEOe1Q8DEgnGDMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4 MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEE2Mi8xRkE5NkRBMDI4MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJv VVdjcWdTT2QwWV9Jd2VPVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6jG4yLdO2f6aZpEgk39rTT8JcRCDUImOZwti9D5hvuh1DOEG+AtWZ j4DWK+TIi7OtUpc15qu/3jftJrHXBlcs2jh+7J0Ol73BRzyg6S0/plspuiSNiRmG 5F06Q4/ye9R91BZXWzNo91HKcjpelhTj2ZWxGW2vsCJ03Co9nRu5rNOJBetJQb38 cFxe2+pUJ3AorDkuCbzsiYPRYEDkqI8nMh16nqxGfKDIuiAE7jSAp5RoB+yZxueP R10ADvRIo2A3lfp9rf+xdG3G0ShDAoYXqBmY0lqK8hYdisblnmkP1yQoxzgo03Gc 9lpFuyM3y5xTzHGh9T5r/MrvhXii/yuA -----END CERTIFICATE-----Generated at Wed Aug 13 02:50:23 2025 by rpki-client