$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: t7UvklUY6nVWqOzVmNgZs+Cqc55IIXEwNvsuRUDF9eM= Subject key identifier: 2B:94:26:29:07:7E:BA:7E:07:3F:B6:05:86:69:02:32:6D:99:F8:AB Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 0191 Signing time: Fri 27 Jun 2025 03:05:35 +0000 Manifest this update: Fri 27 Jun 2025 03:05:34 +0000 Manifest next update: Fri 04 Jul 2025 03:05:34 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: dv1N0JWsTaiPPSziH+S5D0KM1TBxSRk6TqOgtUVaQas=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: +d1sU0yUiz73D5euMUQlwAefx/2UEcW1zqA4TD64tDI=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: ATF/fdwZLaYvPHUpDvAt6YQCavrO94OcrrVt0+AB3Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Jun 27 03:05:34 2025 GMT Not After : Jul 4 03:05:34 2025 GMT Subject: CN=685e0a7e-de62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:15:89:a0:c3:bf:98:8d:b6:bb:22:34:1c: 64:3b:4b:08:4c:7f:c4:98:78:b8:b2:f2:32:7b:97: 2a:42:4c:9c:6f:8f:7b:77:e3:9a:91:ca:16:a3:ee: 73:a4:be:74:8b:1b:dc:90:45:25:95:fb:41:f5:c8: af:54:2b:a9:01:88:7e:99:47:1f:0d:4e:4f:1a:d5: aa:29:57:b3:98:73:a8:be:46:95:0e:d3:d5:5c:e1: 4d:d6:50:b2:81:b3:48:23:8b:4c:4e:ec:93:24:85: 8b:57:0f:72:28:66:41:3e:27:dd:32:be:84:7e:01: 2c:f8:14:1d:e6:3f:f9:7f:80:d0:8e:9d:d6:a0:14: f6:da:f2:0e:c2:33:04:00:57:25:67:24:0f:fe:db: 43:50:44:c2:0c:73:d7:8b:e7:7b:6e:cc:4e:af:59: bf:bf:d1:d9:96:37:a2:d0:92:0e:1e:80:25:1e:a3: 92:b4:ce:ca:89:4d:a2:e5:98:27:f3:2d:3a:42:51: 6e:fe:7c:20:b5:c5:6c:d5:e1:fe:72:26:b3:c4:cf: 68:bc:2e:17:b7:51:f6:c0:2a:17:38:53:13:dc:d7: 69:69:b9:ba:02:d2:44:85:5e:07:7d:9b:d0:7b:70: 2a:6e:ee:be:bf:fc:84:6a:64:6d:e2:2b:01:8c:c3: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:94:26:29:07:7E:BA:7E:07:3F:B6:05:86:69:02:32:6D:99:F8:AB X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:83:94:9c:19:e4:98:20:86:ae:0a:5e:49:e3:50:04:fe: b4:ce:7b:21:05:ef:e9:1c:0c:90:80:38:74:2e:d9:52:6b:70: ec:df:88:70:dd:cd:2f:59:11:63:bb:73:da:7a:3f:f7:9a:1d: 13:64:f5:50:b3:61:6f:57:81:ff:3e:19:b0:fa:3f:fe:38:d0: cd:20:d8:ff:ee:5f:09:f7:43:fa:fc:d7:59:c8:f7:9f:29:bb: 0b:be:65:61:ed:2b:36:d7:8f:59:25:d0:da:43:0f:3f:65:bb: d7:d3:e9:b6:7b:05:fe:74:55:1f:62:51:f8:cf:ad:be:2f:1e: 64:50:29:69:c7:88:a7:b2:32:b3:83:eb:34:cc:54:a8:ee:63: c8:99:25:65:cd:13:03:c2:73:d9:a0:73:01:09:00:e4:85:ef: ec:8f:dc:b2:74:38:5c:05:39:79:06:7a:e8:d1:7a:92:b7:94: 08:23:82:c1:e3:14:78:6a:1c:89:a9:d1:b8:ef:5e:03:bd:5c: e1:73:5c:ce:67:1d:81:d3:9e:3d:ba:e2:c4:f1:77:76:92:9e: e7:30:8d:0a:5c:e1:07:ce:60:ec:b4:43:f4:1b:dc:dd:5c:22: 0a:f3:b7:51:4b:0a:fa:7f:d6:b3:84:11:6f:db:c9:12:03:34: d9:07:b6:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUwNjI3MDMwNTM0WhcNMjUwNzA0MDMwNTM0WjAYMRYwFAYD VQQDEw02ODVlMGE3ZS1kZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BsViaDDv5iNtrsiNBxkO0sITH/EmHi4svIye5cqQkycb497d+OakcoWo+5z pL50ixvckEUllftB9civVCupAYh+mUcfDU5PGtWqKVezmHOovkaVDtPVXOFN1lCy gbNII4tMTuyTJIWLVw9yKGZBPifdMr6EfgEs+BQd5j/5f4DQjp3WoBT22vIOwjME AFclZyQP/ttDUETCDHPXi+d7bsxOr1m/v9HZljei0JIOHoAlHqOStM7KiU2i5Zgn 8y06QlFu/nwgtcVs1eH+ciazxM9ovC4Xt1H2wCoXOFMT3Ndpabm6AtJEhV4HfZvQ e3Aqbu6+v/yEamRt4isBjMM3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuUJikH frp+Bz+2BYZpAjJtmfirMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCej4OUnBnkmCCGrgpeSeNQBP60znshBe/pHAyQgDh0LtlSa3Ds34hw 3c0vWRFju3Paej/3mh0TZPVQs2FvV4H/Phmw+j/+ONDNINj/7l8J90P6/NdZyPef KbsLvmVh7Ss2149ZJdDaQw8/ZbvX0+m2ewX+dFUfYlH4z62+Lx5kUClpx4insjKz g+s0zFSo7mPImSVlzRMDwnPZoHMBCQDkhe/sj9yydDhcBTl5Bnro0XqSt5QII4LB 4xR4ahyJqdG4714DvVzhc1zOZx2B0549uuLE8Xd2kp7nMI0KXOEHzmDstEP0G9zd XCIK87dRSwr6f9azhBFv28kSAzTZB7Z7 -----END CERTIFICATE-----Generated at Sat Jun 28 23:31:18 2025 by rpki-client