$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json) Hash identifier: sHt/Z2ao+nErdw2nY60/mwN3/L6Uzoz0GpjO5nGWF2A= Subject key identifier: EB:AF:6C:06:9F:9F:15:65:25:00:13:AF:61:C6:27:8F:E1:C1:1F:E7 Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft Manifest number: 03CC Signing time: Sat 09 Aug 2025 01:08:35 +0000 Manifest this update: Sat 09 Aug 2025 01:08:34 +0000 Manifest next update: Sat 16 Aug 2025 01:08:34 +0000 Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: xgAUlYjU3WbCbimhbQX0R9DOYxos0QNugMxoQ0zf6iQ=) 2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: eviaeNHpTyeX/nwMhD0qRHeqmHQSy0IY0Lvxy4hMeV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Aug 9 01:08:34 2025 GMT Not After : Aug 16 01:08:34 2025 GMT Subject: CN=68969f93-0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bd:de:e8:d0:7e:91:7d:3d:88:26:91:a0:55: 36:4c:72:b1:c0:35:4c:5c:09:50:a4:66:16:80:cb: 80:a1:3c:c8:f8:0f:74:a8:4b:7e:9a:19:54:74:69: 0b:8d:f1:f0:e3:1a:52:f6:82:cf:e3:0d:18:af:03: 67:70:5a:62:7c:70:91:55:d1:89:c6:18:bb:26:77: 09:1c:14:3b:8c:8d:59:37:c2:5b:e3:a3:de:4c:66: 55:2e:d8:15:18:ef:a2:a1:5f:b9:db:64:c1:42:80: 1a:8a:3e:dd:55:e2:d0:a3:14:73:01:00:89:ea:b7: da:39:44:b1:77:37:c9:9b:f6:e3:16:25:91:30:6d: 9f:c9:5f:a7:39:52:24:41:b7:a6:ff:87:21:79:bf: c2:14:bd:d8:da:a4:25:3c:b2:05:8c:84:66:77:90: aa:95:57:13:48:eb:44:f4:c5:dc:2f:3c:a1:61:9b: 1b:1b:4a:6e:2a:2a:62:dc:3a:07:1c:f7:ce:97:fe: 41:d5:13:87:42:2a:ac:31:f3:58:c6:45:51:24:64: 28:dd:bb:4b:52:12:50:26:ff:fd:b6:24:d3:bf:54: d7:fa:32:68:7c:a3:37:b3:29:67:41:79:c4:23:f1: a5:20:82:5f:ca:2b:06:f9:a6:cb:76:89:6c:75:2f: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AF:6C:06:9F:9F:15:65:25:00:13:AF:61:C6:27:8F:E1:C1:1F:E7 X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:24:ca:4b:0e:d8:49:c7:4a:18:1b:17:d6:39:d6:5a:0d: 44:80:4b:ba:04:1b:84:74:0b:b2:e4:74:35:ff:d2:57:f2:84: 30:20:89:91:3b:77:78:3b:54:cc:79:19:97:1c:5e:05:92:9b: 48:e8:72:94:18:a7:81:e3:0f:30:20:81:09:b3:7f:d1:e9:91: 4f:2d:0c:39:93:99:25:e1:0d:28:27:67:0d:fe:3a:cd:ce:f9: b3:ae:d4:5e:7f:71:b8:4e:f6:a9:86:c9:00:2a:a5:96:e3:e9: df:47:3f:67:08:fa:80:14:15:92:e0:21:fa:f1:34:87:9f:02: 96:ae:22:bd:2a:b0:67:51:fe:03:c2:11:58:f6:04:d5:0d:e3: 20:98:07:ad:07:9b:e3:b4:ba:e2:6d:83:eb:64:8e:02:66:f9: b7:37:61:ef:93:f1:82:e3:5f:c6:75:7d:3a:a8:70:dd:b3:19: 86:d6:77:3b:2b:e0:d6:8d:30:33:8a:06:56:4d:d7:2a:86:d7: 8c:ec:a0:19:33:68:6b:95:03:b0:74:e9:ee:d6:1d:d8:6a:d3: 60:97:d2:60:77:d8:ee:16:26:54:32:ac:21:83:c8:61:f1:13: 1b:de:2b:18:16:44:ae:27:dd:95:af:30:42:74:56:d3:11:81: 94:c0:c9:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjUwODA5MDEwODM0WhcNMjUwODE2MDEwODM0WjAYMRYwFAYD VQQDEw02ODk2OWY5My0wYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+b3e6NB+kX09iCaRoFU2THKxwDVMXAlQpGYWgMuAoTzI+A90qEt+mhlUdGkL jfHw4xpS9oLP4w0YrwNncFpifHCRVdGJxhi7JncJHBQ7jI1ZN8Jb46PeTGZVLtgV GO+ioV+522TBQoAaij7dVeLQoxRzAQCJ6rfaOUSxdzfJm/bjFiWRMG2fyV+nOVIk Qbem/4cheb/CFL3Y2qQlPLIFjIRmd5CqlVcTSOtE9MXcLzyhYZsbG0puKipi3DoH HPfOl/5B1ROHQiqsMfNYxkVRJGQo3btLUhJQJv/9tiTTv1TX+jJofKM3sylnQXnE I/GlIIJfyisG+abLdolsdS/E8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuvbAaf nxVlJQATr2HGJ4/hwR/nMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh X1JMTFg2UGtpRjM4MkZBRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLvCTKSw7YScdKGBsX1jnWWg1EgEu6BBuEdAuy5HQ1/9JX8oQwIImR O3d4O1TMeRmXHF4FkptI6HKUGKeB4w8wIIEJs3/R6ZFPLQw5k5kl4Q0oJ2cN/jrN zvmzrtRef3G4TvaphskAKqWW4+nfRz9nCPqAFBWS4CH68TSHnwKWriK9KrBnUf4D whFY9gTVDeMgmAetB5vjtLribYPrZI4CZvm3N2Hvk/GC41/GdX06qHDdsxmG1nc7 K+DWjTAzigZWTdcqhteM7KAZM2hrlQOwdOnu1h3YatNgl9Jgd9juFiZUMqwhg8hh 8RMb3isYFkSuJ92VrzBCdFbTEYGUwMmH -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:59 2025 by rpki-client