$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: Rth+U08NDgfVFSzfwqNbes/KWhqBR1GyJxBb+xAxjxM= Subject key identifier: 76:28:A5:F0:BA:E8:91:CF:D6:32:AD:2B:77:46:FA:6F:15:34:D2:91 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 01E1 Signing time: Tue 01 Jul 2025 03:04:57 +0000 Manifest this update: Tue 01 Jul 2025 03:04:56 +0000 Manifest next update: Tue 08 Jul 2025 03:04:56 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: mhlngOPzEMMYAMkQQ2xZB7q3pCWHjrn4MzXCu5O/MxU=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Jul 1 03:04:56 2025 GMT Not After : Jul 8 03:04:56 2025 GMT Subject: CN=68635058-a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:5e:2f:f2:68:2a:3e:7a:5e:55:90:0b:45: 07:2e:9a:e1:c7:14:13:08:29:c4:38:49:63:f2:39: e9:c8:da:da:ec:32:46:c0:28:b7:f8:69:c6:78:a8: 79:6e:ce:fd:8f:7b:c6:ec:a4:dd:98:bf:4a:8f:0c: bd:59:0d:89:a5:00:57:65:93:e2:1a:cb:35:13:af: 43:92:6e:b5:73:58:f5:a0:d5:46:7c:a0:44:fc:67: a2:a0:78:9b:ec:ad:7f:f6:d9:c1:7f:55:09:c8:ff: 82:d1:83:34:70:61:f9:2b:50:ab:f9:ad:8e:b7:82: 73:c9:11:4d:df:b9:f7:ec:73:c6:ac:e0:a8:e3:5a: 97:69:ab:c8:77:eb:0f:e3:97:e0:c5:45:00:25:8e: 58:bd:b1:a2:a8:17:5b:0f:a4:08:7b:f4:fe:a5:3c: dc:8c:ad:bb:93:b4:9e:47:8a:80:84:e0:96:c9:a1: c8:90:f5:33:90:15:a9:2a:18:47:c0:0c:29:74:e4: de:57:17:dc:3d:8d:9f:bc:41:d2:9c:b4:0e:e9:aa: ad:ec:8b:3b:1d:6e:67:da:07:4a:6f:69:ae:76:c4: 6f:dd:8e:d0:90:83:d3:6c:b0:70:3d:20:eb:e8:b1: 5f:52:37:f1:da:d2:7b:76:ce:52:81:d5:b6:ee:b2: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:A5:F0:BA:E8:91:CF:D6:32:AD:2B:77:46:FA:6F:15:34:D2:91 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:13:f0:b9:9c:38:b4:92:e7:a1:d8:9b:34:32:e7:e4:62:ca: 6c:d1:af:38:05:36:02:ff:62:be:fa:8b:3a:8a:57:05:f9:44: ee:96:3c:0e:48:2a:e2:52:2c:9d:64:da:d1:54:6d:be:64:8e: 78:21:b6:0f:de:3b:cf:0a:24:f4:53:87:bd:e9:f0:cd:4d:44: 0c:6f:3f:a9:11:b3:ff:41:72:80:51:c8:c7:3d:55:5d:7d:97: 5e:42:b7:60:41:14:f5:4d:c7:56:ca:07:22:7f:af:8f:98:3a: ae:97:ab:93:22:8f:02:9e:97:ff:6f:ff:cc:7e:99:9f:62:7f: 67:0d:4b:e6:1c:e3:cd:5c:bb:27:3d:3d:6b:19:de:07:d9:e2: a7:ba:dc:9f:03:2e:9b:0b:5e:13:f9:ac:26:25:24:24:48:8d: 2c:fe:de:d2:09:67:8a:fb:28:f1:a6:82:26:87:cb:07:c1:c4: 0f:6e:42:b5:0d:45:2f:3b:cf:b1:a5:98:c0:01:54:dc:a9:ee: 9b:ae:94:93:22:a5:ee:85:c2:45:33:cc:95:94:47:9c:92:82: 72:93:c9:e2:72:77:1d:f1:c8:67:93:3b:ee:2c:9f:bc:39:47: 37:af:82:c9:ca:74:a6:df:e9:bf:d0:ca:01:1d:61:05:79:7f: a5:40:7b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwNzAxMDMwNDU2WhcNMjUwNzA4MDMwNDU2WjAYMRYwFAYD VQQDEw02ODYzNTA1OC1hODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00VeL/JoKj56XlWQC0UHLprhxxQTCCnEOElj8jnpyNra7DJGwCi3+GnGeKh5 bs79j3vG7KTdmL9Kjwy9WQ2JpQBXZZPiGss1E69Dkm61c1j1oNVGfKBE/GeioHib 7K1/9tnBf1UJyP+C0YM0cGH5K1Cr+a2Ot4JzyRFN37n37HPGrOCo41qXaavId+sP 45fgxUUAJY5YvbGiqBdbD6QIe/T+pTzcjK27k7SeR4qAhOCWyaHIkPUzkBWpKhhH wAwpdOTeVxfcPY2fvEHSnLQO6aqt7Is7HW5n2gdKb2mudsRv3Y7QkIPTbLBwPSDr 6LFfUjfx2tJ7ds5SgdW27rKxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYopfC6 6JHP1jKtK3dG+m8VNNKRMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnE/C5nDi0kueh2Js0MufkYsps0a84BTYC/2K++os6ilcF+UTuljwO SCriUiydZNrRVG2+ZI54IbYP3jvPCiT0U4e96fDNTUQMbz+pEbP/QXKAUcjHPVVd fZdeQrdgQRT1TcdWygcif6+PmDqul6uTIo8Cnpf/b//MfpmfYn9nDUvmHOPNXLsn PT1rGd4H2eKnutyfAy6bC14T+awmJSQkSI0s/t7SCWeK+yjxpoImh8sHwcQPbkK1 DUUvO8+xpZjAAVTcqe6brpSTIqXuhcJFM8yVlEeckoJyk8nicncd8chnkzvuLJ+8 OUc3r4LJynSm3+m/0MoBHWEFeX+lQHtP -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:12 2025 by rpki-client