$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json) Hash identifier: XGXmg0H20hGV8C9sj+Kh0fjxXb7B5BMOpxiZfTgxSAw= Subject key identifier: 2B:5F:9F:3E:CE:3D:E8:22:08:4E:F1:5D:1B:6D:A4:63:22:A1:C4:C1 Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft Manifest number: 08E2 Signing time: Sat 02 Aug 2025 23:12:26 +0000 Manifest this update: Sat 02 Aug 2025 23:12:26 +0000 Manifest next update: Sat 09 Aug 2025 23:12:26 +0000 Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: hz4lyWwyMPOZw0HT9HKaH8inahBBKQ6jeinNkJcJpg4=) 2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=) 3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: Aug 2 23:12:26 2025 GMT Not After : Aug 9 23:12:26 2025 GMT Subject: CN=688e9b5a-dfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:7a:f2:6b:6d:12:b8:ed:e9:60:59:00:0d: 62:85:af:ff:45:02:55:02:66:80:ae:ea:5e:b2:9b: 11:91:e1:07:81:9c:70:ed:d0:de:d2:20:04:5b:19: 19:27:a7:11:68:e3:20:ba:6a:7b:c7:ab:f4:b8:f0: fa:51:ed:c4:05:0f:dc:1b:f4:7a:57:84:08:82:d0: 2d:dd:a4:f0:fe:e3:08:a5:6b:6e:42:1b:50:16:6b: c5:84:2d:c8:85:34:f0:2f:5a:e5:f4:2b:98:9e:d5: c8:d0:6d:df:90:ca:ec:53:ab:ca:3b:37:f3:b8:dd: 23:b3:fb:28:be:e5:c6:5b:cb:08:e9:fe:49:9d:27: 14:a8:d6:42:9c:cd:0a:4e:00:51:e4:0b:e9:f1:61: 16:71:a2:fc:4c:b9:62:e9:32:65:3e:2e:cf:3f:75: 4d:38:3d:39:a6:a8:77:32:79:43:61:c0:ab:03:f9: 66:81:bf:2f:05:f9:89:3d:e4:89:44:e7:75:2d:8d: 51:23:11:aa:59:85:09:f4:92:7f:cb:56:99:06:48: 5a:b5:25:18:af:1f:f3:3f:be:5f:7e:1c:de:18:6f: 49:98:35:6c:98:65:42:1d:43:0a:65:77:9a:93:4e: 61:4c:34:ea:18:05:2d:e4:32:e5:cb:93:9d:96:51: 4e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5F:9F:3E:CE:3D:E8:22:08:4E:F1:5D:1B:6D:A4:63:22:A1:C4:C1 X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:d3:72:f7:a9:da:8c:1e:04:8d:8b:7b:4e:a6:a0:4f:7d: 44:ec:19:73:b8:ee:a6:66:a4:64:f4:5a:20:45:92:6c:9c:e4: df:65:cd:da:60:99:9c:ae:cc:eb:6b:94:77:68:eb:58:e8:f9: cf:25:b3:f8:01:c2:d0:09:8b:eb:f8:c2:45:47:19:18:34:78: 15:24:76:81:c7:64:7e:9b:f3:d8:4d:38:ac:09:31:a4:c5:30: c5:af:d4:c3:ba:6c:a7:80:b4:a4:c6:d0:32:c4:ee:63:75:c1: 68:e8:f0:c2:ac:d6:ab:77:0c:d2:94:67:28:71:59:c1:43:af: 19:3a:a9:f3:64:0d:98:72:91:d7:94:a1:d9:80:77:ea:f3:75: 8a:48:13:a2:a9:5a:c1:f9:2b:2f:a7:07:75:ae:70:24:1c:02: 24:f7:ec:b0:bd:ef:04:c1:d7:3d:5e:bc:cc:ab:26:98:e6:d6: 8f:5c:c5:b1:d9:39:a3:c9:e5:b3:1c:f2:4f:2b:96:f2:01:71: 12:be:d9:18:2e:93:fe:12:bc:2c:ad:03:87:b0:6a:4d:9e:be: c4:c2:b6:73:d4:3b:37:a7:7e:c1:f1:d3:3f:1a:40:60:b1:9b: 3f:db:ce:06:c7:c6:39:2c:ed:74:c0:b0:4a:db:89:da:35:1a: 57:ac:74:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjUwODAyMjMxMjI2WhcNMjUwODA5MjMxMjI2WjAYMRYwFAYD VQQDEw02ODhlOWI1YS1kZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37J68mttErjt6WBZAA1iha//RQJVAmaArupespsRkeEHgZxw7dDe0iAEWxkZ J6cRaOMgump7x6v0uPD6Ue3EBQ/cG/R6V4QIgtAt3aTw/uMIpWtuQhtQFmvFhC3I hTTwL1rl9CuYntXI0G3fkMrsU6vKOzfzuN0js/sovuXGW8sI6f5JnScUqNZCnM0K TgBR5Avp8WEWcaL8TLli6TJlPi7PP3VNOD05pqh3MnlDYcCrA/lmgb8vBfmJPeSJ ROd1LY1RIxGqWYUJ9JJ/y1aZBkhatSUYrx/zP75ffhzeGG9JmDVsmGVCHUMKZXea k05hTDTqGAUt5DLly5OdllFOnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtfnz7O PegiCE7xXRttpGMiocTBMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95 TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJdNy96najB4EjYt7TqagT31E7BlzuO6mZqRk9FogRZJsnOTfZc3a YJmcrszra5R3aOtY6PnPJbP4AcLQCYvr+MJFRxkYNHgVJHaBx2R+m/PYTTisCTGk xTDFr9TDumyngLSkxtAyxO5jdcFo6PDCrNardwzSlGcocVnBQ68ZOqnzZA2YcpHX lKHZgHfq83WKSBOiqVrB+Ssvpwd1rnAkHAIk9+ywve8Ewdc9XrzMqyaY5taPXMWx 2TmjyeWzHPJPK5byAXESvtkYLpP+ErwsrQOHsGpNnr7EwrZz1Ds3p37B8dM/GkBg sZs/284Gx8Y5LO10wLBK24naNRpXrHSo -----END CERTIFICATE-----Generated at Mon Aug 4 10:59:08 2025 by rpki-client