$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: wh6X32hxaoS1sxhEHKsB/OOW+SFWtvxMRoeNXNgO13g= Subject key identifier: 39:B5:20:A9:57:C2:FB:1C:60:E4:70:AE:50:80:37:FB:2B:0A:BC:D2 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34CA Signing time: Fri 08 Aug 2025 14:30:47 +0000 Manifest this update: Fri 08 Aug 2025 14:30:46 +0000 Manifest next update: Fri 15 Aug 2025 14:30:46 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: rUnaAiakjbk+7HVpvWwp7rqAnvK+NLNClyneQEYssFA=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Aug 8 14:30:46 2025 GMT Not After : Aug 15 14:30:46 2025 GMT Subject: CN=68960a16-8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:9f:61:cb:57:77:b2:6d:c4:8a:d7:57:53: 90:ee:b3:23:dc:1b:86:aa:39:af:f3:66:b8:b5:6b: ab:8b:15:bc:9d:ad:f4:c8:80:f5:50:67:fc:8b:2e: 14:39:1a:5d:36:d4:7c:74:ba:52:e1:a5:c9:ab:87: 3c:e5:ca:be:a9:f9:1c:af:b3:f5:43:bd:d5:56:2d: 39:ed:a9:77:4b:7b:2d:bb:80:84:30:82:31:d8:83: cf:31:8b:18:67:0f:a2:2b:2a:24:b8:4d:3e:79:96: be:23:ae:ed:a9:35:eb:ed:21:ca:a8:db:5d:e4:c8: 05:d9:e2:87:73:1f:34:58:f6:11:0a:b3:c9:9b:ce: 43:93:7e:ff:58:13:70:61:32:5a:d2:e2:60:bf:21: 10:c4:4b:fd:32:50:9c:ea:66:53:29:36:67:9e:4f: 42:d0:79:68:37:f9:17:4f:d5:b2:f4:1d:a1:f5:d0: 0a:b9:6c:a4:38:10:a0:20:b4:28:3c:74:ca:1c:34: 0d:a3:8f:bd:8d:f4:04:5d:d4:84:50:c1:c7:48:af: 15:4a:80:65:0e:18:cb:93:9e:64:99:e7:92:67:e9: f0:d4:65:15:f2:56:77:c9:eb:33:18:e9:bb:da:e3: c3:1d:95:df:b9:e4:fe:18:8b:3c:68:b6:8d:fb:36: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B5:20:A9:57:C2:FB:1C:60:E4:70:AE:50:80:37:FB:2B:0A:BC:D2 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:45:b7:75:33:f1:7c:e3:98:32:20:6e:3c:e9:c2:71:79: fb:1a:9f:30:63:cf:f5:22:41:7d:eb:53:08:5f:38:27:e9:0d: 5e:b7:42:44:12:31:0e:f8:fd:cf:e1:bf:50:cc:f2:16:e3:fc: 38:ba:68:77:ac:3f:bb:fa:ca:2d:25:2c:d1:93:49:30:b1:63: e5:89:28:58:9b:6f:64:ef:65:6a:d3:9c:b3:fd:dc:e7:a7:61: eb:2c:0d:3b:ef:19:64:4e:e4:8c:b3:df:77:7a:65:dc:8f:48: e1:a0:b6:7a:13:e9:e8:40:16:bc:9b:3e:17:bf:31:c5:dc:08: c6:31:e4:71:6a:bb:ef:20:93:6c:8f:98:2a:0a:fa:a4:c1:30: 6d:c3:46:ab:2e:12:a5:66:48:c1:ab:00:96:4a:1b:d2:63:21: 2d:1c:0a:36:31:5e:94:3e:a1:53:21:f9:4e:47:50:74:a7:6a: 1c:4d:0e:9b:ef:96:aa:42:32:b4:80:9c:bb:f3:fc:7c:c4:c8: c3:36:c2:86:5c:64:ea:06:f1:1b:4a:e1:5c:e8:6a:fb:98:6c: 36:66:79:ca:0a:8f:7c:57:d4:82:fb:f0:6e:d7:37:df:0c:08: 7d:50:c4:06:2a:bf:25:86:d8:a3:c7:b9:02:b7:00:f4:90:fa: fa:b4:85:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwODA4MTQzMDQ2WhcNMjUwODE1MTQzMDQ2WjAYMRYwFAYD VQQDEw02ODk2MGExNi04ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4GfYctXd7JtxIrXV1OQ7rMj3BuGqjmv82a4tWurixW8na30yID1UGf8iy4U ORpdNtR8dLpS4aXJq4c85cq+qfkcr7P1Q73VVi057al3S3stu4CEMIIx2IPPMYsY Zw+iKyokuE0+eZa+I67tqTXr7SHKqNtd5MgF2eKHcx80WPYRCrPJm85Dk37/WBNw YTJa0uJgvyEQxEv9MlCc6mZTKTZnnk9C0HloN/kXT9Wy9B2h9dAKuWykOBCgILQo PHTKHDQNo4+9jfQEXdSEUMHHSK8VSoBlDhjLk55kmeeSZ+nw1GUV8lZ3yeszGOm7 2uPDHZXfueT+GIs8aLaN+zb/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm1IKlX wvscYORwrlCAN/srCrzSMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbm0W3dTPxfOOYMiBuPOnCcXn7Gp8wY8/1IkF961MIXzgn6Q1et0JE EjEO+P3P4b9QzPIW4/w4umh3rD+7+sotJSzRk0kwsWPliShYm29k72Vq05yz/dzn p2HrLA077xlkTuSMs993emXcj0jhoLZ6E+noQBa8mz4XvzHF3AjGMeRxarvvIJNs j5gqCvqkwTBtw0arLhKlZkjBqwCWShvSYyEtHAo2MV6UPqFTIflOR1B0p2ocTQ6b 75aqQjK0gJy78/x8xMjDNsKGXGTqBvEbSuFc6Gr7mGw2ZnnKCo98V9SC+/Bu1zff DAh9UMQGKr8lhtijx7kCtwD0kPr6tIVs -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:19 2025 by rpki-client