$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: IQLJIeNv9R+f+VbLf4PUQORR6j+AbUYhyuKn9o0QXPA= Subject key identifier: 2A:25:60:02:EE:07:67:A6:6B:B2:81:B7:99:01:4B:9B:24:88:5E:E6 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01EE Signing time: Fri 08 Aug 2025 16:31:28 +0000 Manifest this update: Fri 08 Aug 2025 16:31:28 +0000 Manifest next update: Fri 15 Aug 2025 16:31:28 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: O8K7+VQa4HV7Dfj8Utkot41UfsFvNVuMeIgFQgCPvwI=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Aug 8 16:31:28 2025 GMT Not After : Aug 15 16:31:28 2025 GMT Subject: CN=68962660-b068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:d6:32:bf:1f:73:16:a1:15:40:9a:76:c0: 59:93:44:b2:dc:40:b4:25:78:22:69:c7:0d:51:6a: 11:d8:8c:69:cf:cb:e6:a5:41:3b:77:40:06:e5:5c: 78:99:dc:56:93:13:c4:22:dc:c8:b2:1c:8b:37:67: 84:84:96:7a:37:18:2c:f5:d4:3b:da:7e:ab:ee:db: a2:42:e5:e2:a7:c2:eb:dd:03:c8:48:97:b4:b4:43: 49:db:c9:f8:1a:9d:d9:1c:b9:e5:b3:c2:3c:85:01: d1:ba:0d:91:fc:8f:35:65:25:0c:f2:ba:17:7b:3e: 54:c8:a7:88:4c:60:83:36:56:79:22:f1:53:1e:43: 3f:af:03:64:86:f7:ea:fc:33:13:40:f9:b5:8c:69: bd:cb:15:84:42:d7:c6:a2:60:25:d8:7c:15:c3:5a: d7:f0:4a:ff:82:ee:fa:66:af:c7:2e:8b:0e:42:9c: 04:49:f9:73:01:98:af:a7:a6:9c:af:8b:38:d6:85: 91:41:8e:f0:60:95:0d:81:97:7e:b7:9e:07:fa:71: c5:65:c2:4b:b5:5e:c5:2c:d3:be:29:b9:b2:47:6d: 85:23:56:a6:21:99:52:e7:c5:ec:90:85:eb:60:cf: 33:ee:06:00:f7:37:f6:6d:f5:c9:aa:c7:d7:e1:58: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:25:60:02:EE:07:67:A6:6B:B2:81:B7:99:01:4B:9B:24:88:5E:E6 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ce:5d:8b:72:6b:a8:a9:7f:5e:de:67:9c:3d:ab:b6:a4:4e: 21:06:9a:c0:97:05:5a:13:f0:fb:59:4f:5f:74:ff:04:ae:15: 32:39:d8:ea:7f:7a:03:45:eb:70:69:a5:e1:99:be:10:00:36: a4:d8:e7:f7:a1:4c:f2:cb:cd:6c:60:41:11:8e:4d:ac:dd:b9: 8f:62:30:84:ce:9e:33:42:15:0a:c6:ab:b8:33:62:83:35:87: 5b:53:52:b2:a5:53:24:a7:59:b7:03:b4:22:d2:91:c1:34:7f: 47:65:fb:d7:93:cf:76:90:8e:9c:03:b0:ed:84:86:4b:45:33: eb:71:d0:bb:ab:6f:39:8a:cc:a7:ad:da:27:60:46:28:07:9d: d7:c1:e4:4c:83:62:1f:bc:f9:32:07:9b:c1:4b:ff:02:5c:33: 6c:f3:6f:7f:e3:85:7e:74:0c:9a:3a:8e:4d:6d:b6:18:43:d6: c7:6a:5f:f7:e5:a8:00:93:71:12:45:42:55:a1:98:e2:45:9d: 35:c0:20:37:12:7e:27:94:8f:26:6d:01:2c:92:c5:0c:d8:ae: d5:b6:f6:11:a1:f6:5d:cc:94:0a:9b:fe:51:be:a5:f8:40:ae: ce:37:28:ef:bf:5e:04:60:d1:26:7c:1a:28:fa:59:1d:58:fc: 5e:78:f5:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwODA4MTYzMTI4WhcNMjUwODE1MTYzMTI4WjAYMRYwFAYD VQQDEw02ODk2MjY2MC1iMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvzWMr8fcxahFUCadsBZk0Sy3EC0JXgiaccNUWoR2Ixpz8vmpUE7d0AG5Vx4 mdxWkxPEItzIshyLN2eEhJZ6Nxgs9dQ72n6r7tuiQuXip8Lr3QPISJe0tENJ28n4 Gp3ZHLnls8I8hQHRug2R/I81ZSUM8roXez5UyKeITGCDNlZ5IvFTHkM/rwNkhvfq /DMTQPm1jGm9yxWEQtfGomAl2HwVw1rX8Er/gu76Zq/HLosOQpwESflzAZivp6ac r4s41oWRQY7wYJUNgZd+t54H+nHFZcJLtV7FLNO+KbmyR22FI1amIZlS58XskIXr YM8z7gYA9zf2bfXJqsfX4ViJ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFColYALu B2ema7KBt5kBS5skiF7mMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCizl2LcmuoqX9e3mecPau2pE4hBprAlwVaE/D7WU9fdP8ErhUyOdjq f3oDRetwaaXhmb4QADak2Of3oUzyy81sYEERjk2s3bmPYjCEzp4zQhUKxqu4M2KD NYdbU1KypVMkp1m3A7Qi0pHBNH9HZfvXk892kI6cA7DthIZLRTPrcdC7q285isyn rdonYEYoB53XweRMg2IfvPkyB5vBS/8CXDNs829/44V+dAyaOo5NbbYYQ9bHal/3 5agAk3ESRUJVoZjiRZ01wCA3En4nlI8mbQEsksUM2K7VtvYRofZdzJQKm/5RvqX4 QK7ONyjvv14EYNEmfBoo+lkdWPxeePX8 -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:15 2025 by rpki-client