$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: hZjQ+X8F1jkc+QEDVC7zZFrkIvSUFhynu+jM9xQtRBU= Subject key identifier: 74:DC:AB:FF:75:15:51:A2:18:5F:50:23:47:4D:5F:B7:DD:E0:39:AF Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 013C Signing time: Tue 05 Aug 2025 04:58:37 +0000 Manifest this update: Tue 05 Aug 2025 04:58:37 +0000 Manifest next update: Tue 12 Aug 2025 04:58:37 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: RzD4DVNNDBLeewu8PVKujm16g+1IcCr/uzLb8Hb80vw=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Aug 5 04:58:37 2025 GMT Not After : Aug 12 04:58:37 2025 GMT Subject: CN=68918f7d-ab01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:72:64:31:f5:f4:68:28:1f:10:92:11:17: ee:04:e9:ce:93:da:65:a6:43:30:1a:67:87:49:87: 03:1e:45:af:84:61:90:e9:b5:79:5b:f2:5e:12:23: 34:07:4c:30:09:06:2e:b1:d6:9d:3f:87:05:0d:ee: 34:d3:e7:d0:64:ad:09:00:78:e1:90:02:3f:f2:9b: 35:27:77:10:67:71:be:90:a9:34:68:d4:ca:23:42: d8:2b:ce:36:20:79:39:ea:8d:32:2f:ce:fc:b2:45: c9:fe:ad:f6:16:d5:eb:7c:ec:1d:e6:8a:dc:b4:01: a3:75:92:b3:62:c0:37:60:41:00:dd:62:e4:d5:43: 23:bd:09:c9:10:83:a8:08:bd:e2:3e:d2:71:f8:1e: 46:26:6b:59:b1:15:1f:f6:7b:ff:d8:b5:d2:46:92: 78:90:e4:9c:35:3d:0a:1a:2c:0e:17:0a:f9:1e:37: 00:4a:17:70:64:35:c3:1a:af:07:1e:a4:41:08:6b: bb:d7:23:8f:08:e2:99:03:19:9e:8e:d2:15:79:e9: 12:4a:cd:13:18:ed:58:4c:1d:f6:a5:14:a6:91:18: 8d:18:e2:d9:53:e0:e0:d3:ba:2f:d4:cc:a8:75:c8: ec:48:af:4d:aa:45:c7:c8:9e:f1:5d:7d:82:24:ab: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:AB:FF:75:15:51:A2:18:5F:50:23:47:4D:5F:B7:DD:E0:39:AF X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:96:9b:17:e5:99:73:bc:b6:05:18:9d:13:28:7f:e2:bb:ad: 06:7d:f7:23:fa:e1:93:50:11:9a:f4:d9:83:07:f4:56:b8:22: b8:8a:61:c7:ae:d3:0e:be:4f:01:a6:a6:18:26:eb:07:e2:4e: 12:a6:66:32:30:28:bb:72:21:93:eb:36:cc:40:e4:f2:72:d9: 7d:69:a6:1b:42:42:84:79:0b:18:96:5f:0a:11:8b:a4:24:4f: f3:8c:6a:49:26:94:97:c3:c8:2e:d5:ab:7c:13:86:05:3f:5d: d2:8a:ed:5a:83:5f:46:c4:15:b9:a2:58:1e:df:79:54:2f:1c: 52:7c:e7:ac:b7:33:0d:56:5d:0a:63:c9:eb:3d:6b:53:af:e5: 32:13:49:fb:b6:5a:4a:ba:05:16:0a:ab:7e:9f:d0:3a:3d:1e: c8:73:ac:4e:e1:f5:c7:7d:1f:d7:ad:19:2e:27:40:46:0f:3b: 68:de:52:fd:a5:e5:d5:9c:31:8c:bf:1e:1e:23:1c:f6:d6:64: 9a:74:40:4e:7f:21:08:60:7f:fc:b3:19:89:3a:8c:93:d3:c0: b5:1f:97:8b:d9:24:55:ba:09:79:38:97:e2:29:0f:6d:1f:0a: 32:90:db:f7:d6:10:86:65:3a:36:b1:de:f0:98:82:a7:0e:9b: cb:71:30:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUwODA1MDQ1ODM3WhcNMjUwODEyMDQ1ODM3WjAYMRYwFAYD VQQDEw02ODkxOGY3ZC1hYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIpyZDH19GgoHxCSERfuBOnOk9plpkMwGmeHSYcDHkWvhGGQ6bV5W/JeEiM0 B0wwCQYusdadP4cFDe400+fQZK0JAHjhkAI/8ps1J3cQZ3G+kKk0aNTKI0LYK842 IHk56o0yL878skXJ/q32FtXrfOwd5orctAGjdZKzYsA3YEEA3WLk1UMjvQnJEIOo CL3iPtJx+B5GJmtZsRUf9nv/2LXSRpJ4kOScNT0KGiwOFwr5HjcAShdwZDXDGq8H HqRBCGu71yOPCOKZAxmejtIVeekSSs0TGO1YTB32pRSmkRiNGOLZU+Dg07ov1Myo dcjsSK9NqkXHyJ7xXX2CJKvOGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTcq/91 FVGiGF9QI0dNX7fd4DmvMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAclpsX5ZlzvLYFGJ0TKH/iu60Gffcj+uGTUBGa9NmDB/RWuCK4imHH rtMOvk8BpqYYJusH4k4SpmYyMCi7ciGT6zbMQOTyctl9aaYbQkKEeQsYll8KEYuk JE/zjGpJJpSXw8gu1at8E4YFP13Siu1ag19GxBW5olge33lULxxSfOestzMNVl0K Y8nrPWtTr+UyE0n7tlpKugUWCqt+n9A6PR7Ic6xO4fXHfR/XrRkuJ0BGDzto3lL9 peXVnDGMvx4eIxz21mSadEBOfyEIYH/8sxmJOoyT08C1H5eL2SRVugl5OJfiKQ9t HwoykNv31hCGZTo2sd7wmIKnDpvLcTBW -----END CERTIFICATE-----Generated at Wed Aug 6 11:08:35 2025 by rpki-client