$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: lnyhOby3kT5VONEUyaHD5b2gf7RrMsiZxyG3Nqrf1oA= Subject key identifier: 60:DB:6A:31:3D:79:F5:05:36:59:12:2D:BE:77:5F:5E:F2:34:01:F2 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 7D Signing time: Thu 03 Jul 2025 04:41:45 +0000 Manifest this update: Thu 03 Jul 2025 04:41:44 +0000 Manifest next update: Thu 10 Jul 2025 04:41:44 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: tACqN5dyArW/yJKd/q8HBsOZ0p5LSGwrHAdloy8Rhi0=) 2: D31DA3FAE55311EFA195DC68C4F9AE02.roa (hash: GYS8k9UwWROEU4CPy3zJZbjxwuE5OSbNBFEHxATP3jE=) 3: 1BF014320D5411F09D0E1A4CC4F9AE02.roa (hash: qtTlSykZWAQtBUB9Rat4VpmkVXZoqWdqikbCdbZliz0=) 4: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Jul 3 04:41:44 2025 GMT Not After : Jul 10 04:41:44 2025 GMT Subject: CN=68660a08-aa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:8d:a3:46:f7:a3:2c:cb:d8:93:4a:a0:2f: a5:42:4e:7f:2f:f5:79:e4:3c:c5:df:29:22:d3:7f: 36:bb:c4:68:07:d6:bc:49:61:2e:90:e7:cf:98:34: 6c:96:7e:8b:06:05:c3:e7:88:28:ab:1c:4f:a6:bd: 43:ae:4a:9b:f7:38:ab:16:08:ff:e4:c2:e0:13:53: 3f:71:34:10:ae:06:8e:4f:de:06:1c:63:dc:6c:83: 3f:ca:77:7e:a2:db:07:54:26:4e:46:98:b2:ab:0f: 35:a3:3c:bf:2b:3b:9b:04:f6:38:d9:72:c6:24:e3: 19:5e:a3:8e:1a:1a:35:4e:f2:c8:4b:2c:28:a9:7f: 08:f5:c7:6d:15:64:05:9c:72:e5:80:74:96:eb:34: a8:74:61:dc:d0:ca:e8:fc:c2:5f:44:28:86:81:7c: bb:29:6f:97:c9:2a:38:dd:b1:dc:5d:2d:f7:26:ff: 40:82:94:b5:64:dd:37:22:be:1b:71:db:8b:3b:09: d2:c9:2e:fd:44:bc:c8:dd:80:ba:0a:4c:68:06:5f: 14:3f:e2:d1:3c:da:0f:9f:ae:31:a5:99:29:b3:de: 3b:65:4c:45:2a:34:df:7a:69:af:30:f3:29:ed:31: 18:2c:90:5c:47:29:1f:bc:5f:f0:f1:27:8b:c8:cd: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DB:6A:31:3D:79:F5:05:36:59:12:2D:BE:77:5F:5E:F2:34:01:F2 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:3c:60:c4:a2:84:13:be:b4:19:bc:c1:b1:8c:f2:09:a9: 70:b1:f1:c8:81:cb:a1:03:66:f0:7c:11:6e:5d:09:b2:7b:2e: 16:ca:b2:86:1e:a4:ba:b9:b7:ee:61:a0:9b:ab:fc:ce:8b:71: ba:a2:b9:16:80:ba:c8:6a:25:29:77:0d:f8:0a:68:99:f5:17: 0f:92:0f:41:88:94:56:5b:8b:48:93:46:6a:31:d0:7e:a3:a1: d3:0c:19:7d:5c:64:62:8c:93:a6:ac:39:a0:2a:5e:fe:56:fe: 37:24:fc:5a:9e:28:7f:4a:48:39:81:67:db:b2:df:b5:3d:ce: 65:c6:b0:5c:93:76:49:c0:89:73:58:c1:79:30:46:33:e2:71: c2:b3:34:ea:35:ee:60:5a:dd:97:85:f1:74:7f:0e:4e:ea:1a: fb:27:42:41:d0:dd:bd:83:17:81:3e:11:80:cf:ce:5a:55:ee: 93:ca:f1:4d:06:11:bb:5b:37:78:67:a9:3c:9e:d7:8e:ee:f0: aa:11:a6:8e:c1:c6:d1:98:18:06:9a:c2:1c:4a:28:62:31:22: 14:e8:4c:c5:a4:99:e2:57:8b:33:06:a5:77:d6:cb:af:f0:08: 76:8d:aa:84:77:94:64:59:1b:e2:d4:dc:e1:c7:44:c9:95:00: 39:65:aa:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUwNzAzMDQ0MTQ0WhcNMjUwNzEwMDQ0MTQ0WjAYMRYwFAYD VQQDEw02ODY2MGEwOC1hYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FCNo0b3oyzL2JNKoC+lQk5/L/V55DzF3yki0382u8RoB9a8SWEukOfPmDRs ln6LBgXD54goqxxPpr1Drkqb9zirFgj/5MLgE1M/cTQQrgaOT94GHGPcbIM/ynd+ otsHVCZORpiyqw81ozy/KzubBPY42XLGJOMZXqOOGho1TvLISywoqX8I9cdtFWQF nHLlgHSW6zSodGHc0Mro/MJfRCiGgXy7KW+XySo43bHcXS33Jv9AgpS1ZN03Ir4b cduLOwnSyS79RLzI3YC6CkxoBl8UP+LRPNoPn64xpZkps947ZUxFKjTfemmvMPMp 7TEYLJBcRykfvF/w8SeLyM0uuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDbajE9 efUFNlkSLb53X17yNAHyMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbXzxgxKKEE760GbzBsYzyCalwsfHIgcuhA2bwfBFuXQmyey4WyrKG HqS6ubfuYaCbq/zOi3G6orkWgLrIaiUpdw34CmiZ9RcPkg9BiJRWW4tIk0ZqMdB+ o6HTDBl9XGRijJOmrDmgKl7+Vv43JPxanih/Skg5gWfbst+1Pc5lxrBck3ZJwIlz WMF5MEYz4nHCszTqNe5gWt2XhfF0fw5O6hr7J0JB0N29gxeBPhGAz85aVe6TyvFN BhG7Wzd4Z6k8nteO7vCqEaaOwcbRmBgGmsIcSihiMSIU6EzFpJniV4szBqV31suv 8Ah2jaqEd5RkWRvi1Nzhx0TJlQA5Zaqi -----END CERTIFICATE-----Generated at Thu Jul 3 21:19:38 2025 by rpki-client