$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: aYwLQSfPHz56lbqWzEF6B1ov2iMGmz63X4u+MyYvS0w= Subject key identifier: CA:7B:BD:E3:83:75:F2:B2:D0:3C:CE:C4:06:E3:A6:A0:C4:FE:33:03 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0359 Signing time: Thu 07 Aug 2025 01:33:47 +0000 Manifest this update: Thu 07 Aug 2025 01:33:46 +0000 Manifest next update: Thu 14 Aug 2025 01:33:46 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: fidWj4uSLYZXpxNprTzCCSfz+ZArMfQzifnhqVGQFYM=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Aug 7 01:33:46 2025 GMT Not After : Aug 14 01:33:46 2025 GMT Subject: CN=6894027a-169f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:5b:ba:31:a6:a4:3c:c1:47:75:24:32:9f: b8:ad:25:a4:1c:ab:fe:d2:6c:fb:de:a7:82:77:91: 28:fb:d4:46:e6:c6:27:9d:21:b5:41:af:dd:30:ca: 62:76:89:34:07:61:7e:c8:82:32:6f:0a:42:9b:93: ff:86:0e:d3:45:b8:7c:d6:61:4d:f0:8e:3f:ee:44: 71:eb:27:eb:3a:dd:c1:95:19:7b:5f:4f:e9:6f:33: 90:cf:b9:c8:01:17:7e:75:f4:0c:0f:cf:a2:e1:c1: 55:3f:3d:50:f8:73:8a:eb:ca:f5:ba:5c:ed:0f:7a: 21:c0:6f:a4:1c:05:67:2e:bc:87:40:62:66:1e:40: 52:c2:24:12:66:e1:b4:81:bd:7c:6d:b9:04:29:1a: ec:35:1b:e6:eb:12:7c:11:7d:34:7d:8f:52:ba:36: dc:ed:b0:14:07:cb:df:90:8c:c3:03:b1:55:a6:62: be:59:58:88:52:30:c9:7f:fa:42:51:c1:4a:81:8c: 7c:b6:0d:a1:c4:74:39:1f:7c:5b:06:98:8d:f9:05: af:b5:3c:7f:5a:e9:53:0a:1e:a5:b4:5a:f1:1b:6d: e0:7c:ab:25:e3:11:6e:e0:24:b6:52:9c:fe:c4:16: 4e:e9:d4:82:5c:1d:df:7e:00:07:72:62:15:2d:81: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:BD:E3:83:75:F2:B2:D0:3C:CE:C4:06:E3:A6:A0:C4:FE:33:03 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:98:82:7e:c2:f1:82:3e:01:12:2a:aa:90:f4:68:6f:34:72: 98:41:8c:50:12:15:00:2d:a1:dd:54:eb:c1:82:21:ec:3b:31: fe:c7:9b:ef:80:be:f6:af:c6:c7:77:f2:8d:12:3c:f4:dd:6d: ef:33:49:78:27:5e:85:a3:5b:06:ad:f4:3d:1f:d7:f1:6e:33: ce:80:d2:83:fe:64:bc:13:37:50:39:eb:d3:03:46:4a:4f:d0: 53:ee:be:03:55:4c:3d:fe:1a:8f:08:4d:47:80:82:7d:b8:ca: 44:dc:25:cb:9c:90:db:ec:5f:79:36:e8:b1:49:67:51:25:4e: 2e:62:0c:65:fb:ff:03:88:51:29:e7:f4:4f:3d:d5:bd:49:67: 51:5b:e1:10:c9:6b:0b:24:4a:0b:26:4b:09:d8:c4:44:5f:02: f1:4f:0b:96:53:69:d6:68:9d:33:4e:85:15:7f:8d:3e:93:76: dd:1a:0d:a7:2e:b1:e9:83:12:7e:d2:09:cc:64:ea:5a:ba:d6: 37:c4:aa:74:0d:93:71:41:b9:40:5a:5f:c6:c4:d1:ee:05:8f: 41:c7:26:0a:18:7b:fd:cd:a7:53:9e:5e:b0:9d:da:a9:01:13: fb:6b:14:22:d3:f8:65:8a:e7:24:6f:12:18:c7:d2:02:23:7b: 85:61:fe:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwODA3MDEzMzQ2WhcNMjUwODE0MDEzMzQ2WjAYMRYwFAYD VQQDEw02ODk0MDI3YS0xNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0BbujGmpDzBR3UkMp+4rSWkHKv+0mz73qeCd5Eo+9RG5sYnnSG1Qa/dMMpi dok0B2F+yIIybwpCm5P/hg7TRbh81mFN8I4/7kRx6yfrOt3BlRl7X0/pbzOQz7nI ARd+dfQMD8+i4cFVPz1Q+HOK68r1ulztD3ohwG+kHAVnLryHQGJmHkBSwiQSZuG0 gb18bbkEKRrsNRvm6xJ8EX00fY9Sujbc7bAUB8vfkIzDA7FVpmK+WViIUjDJf/pC UcFKgYx8tg2hxHQ5H3xbBpiN+QWvtTx/WulTCh6ltFrxG23gfKsl4xFu4CS2Upz+ xBZO6dSCXB3ffgAHcmIVLYFSCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp7veOD dfKy0DzOxAbjpqDE/jMDMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkmIJ+wvGCPgESKqqQ9GhvNHKYQYxQEhUALaHdVOvBgiHsOzH+x5vv gL72r8bHd/KNEjz03W3vM0l4J16Fo1sGrfQ9H9fxbjPOgNKD/mS8EzdQOevTA0ZK T9BT7r4DVUw9/hqPCE1HgIJ9uMpE3CXLnJDb7F95NuixSWdRJU4uYgxl+/8DiFEp 5/RPPdW9SWdRW+EQyWsLJEoLJksJ2MREXwLxTwuWU2nWaJ0zToUVf40+k3bdGg2n LrHpgxJ+0gnMZOpautY3xKp0DZNxQblAWl/GxNHuBY9BxyYKGHv9zadTnl6wndqp ARP7axQi0/hliuckbxIYx9ICI3uFYf7u -----END CERTIFICATE-----Generated at Fri Aug 8 00:07:50 2025 by rpki-client