$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: avvueg7pbgS10u4489AIX7yTdlhygrdGTi/8axfHsQk= Subject key identifier: 56:E7:C9:C2:C4:A1:01:CE:E3:37:B1:7A:77:44:3F:68:D3:4F:2A:C4 Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 0258 Signing time: Tue 01 Jul 2025 02:31:38 +0000 Manifest this update: Tue 01 Jul 2025 02:31:38 +0000 Manifest next update: Tue 08 Jul 2025 02:31:38 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: 42K7pBRHFUXCq+QLGs8UEu3PYIb9IsJteUgbrpOkidk=) 2: 08B1833C1DE511F08883F35AC4F9AE02.roa (hash: qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=) 3: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: Jul 1 02:31:38 2025 GMT Not After : Jul 8 02:31:38 2025 GMT Subject: CN=6863488a-0b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:3f:d3:cd:40:17:14:5a:56:75:d5:7d:e7: 7e:47:45:b3:a9:1c:05:e3:41:48:e5:e3:77:4e:1f: 44:bb:2a:0e:6b:49:e2:3c:e5:9d:37:88:cc:17:41: e4:cc:8c:d5:97:05:c9:83:ac:d4:26:28:f9:16:3c: 8a:b1:2b:43:b0:19:7b:ce:54:59:7f:3c:a1:42:45: 1f:69:ef:23:43:cf:8b:cb:2c:0a:c8:e9:31:b9:29: ac:84:9c:0a:d0:ae:fb:8f:7a:df:91:53:a0:ac:d6: 77:d4:7c:2a:69:07:44:db:30:fd:a2:60:95:93:4b: b3:73:aa:b7:14:ce:6d:33:c7:d4:3f:e6:3a:1e:f0: 3c:2c:6e:60:44:36:9b:76:1d:e8:8e:d1:04:b6:25: 3a:4f:d0:98:26:5e:e8:a6:76:b0:de:90:17:b0:45: a8:6e:28:4f:e9:a6:7c:cb:e0:f2:d8:a7:dd:e4:e9: 50:d8:8b:dc:ce:df:27:bd:41:8c:4e:63:ca:0d:1f: b8:59:93:f9:4b:4b:b3:33:d4:d3:d2:0f:11:e7:72: 9d:57:6a:90:33:3f:cb:95:47:4f:12:82:0b:05:d8: ba:a3:cb:b7:41:7a:5f:15:6d:65:26:32:0d:d9:5e: 70:d3:07:0b:59:69:e9:a2:71:b2:d3:31:89:96:23: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E7:C9:C2:C4:A1:01:CE:E3:37:B1:7A:77:44:3F:68:D3:4F:2A:C4 X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:18:bf:6f:01:3e:92:f9:00:e5:63:bc:f1:5f:4c:43:d4:95: b9:93:77:e3:52:b5:26:21:d7:4e:91:36:0b:85:9b:81:95:55: 3d:11:9d:e1:d4:b8:9a:26:16:e5:eb:cf:37:c9:38:6c:ed:2a: 73:48:c2:53:3a:64:c2:cb:48:79:4b:b3:bf:07:dc:a9:ab:73: 84:7a:d8:9c:3e:81:1d:25:88:89:fc:1a:34:59:80:e4:1f:6d: c5:9c:a5:30:c8:61:24:35:00:68:9d:4b:c7:17:7b:79:c0:42: 30:35:b0:a9:7f:95:5a:17:a0:c0:04:2c:8b:79:3b:2e:e4:8e: 9e:ef:5e:2b:bb:2b:c0:98:fb:e9:04:28:ab:fa:9f:79:9a:81: e9:b0:14:05:d8:06:87:f3:77:55:fc:30:e4:ad:13:59:8f:c2: 00:17:ec:b6:cb:d9:8e:5a:4a:f2:b5:74:ec:95:7d:35:2a:22: 1d:3e:dd:05:0c:b9:29:30:2f:27:c2:73:69:07:d3:58:d0:27: 14:5d:28:cd:1d:71:59:85:90:4c:ef:ae:c7:80:b7:d3:38:3b: f7:ab:7b:57:bc:b2:43:b4:f5:db:b2:1a:34:67:3e:bf:20:93: 9a:f7:20:56:18:5c:c1:d0:1b:26:2a:89:11:d9:4f:ee:d5:15: b5:e4:fb:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUwNzAxMDIzMTM4WhcNMjUwNzA4MDIzMTM4WjAYMRYwFAYD VQQDEw02ODYzNDg4YS0wYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR0/081AFxRaVnXVfed+R0WzqRwF40FI5eN3Th9EuyoOa0niPOWdN4jMF0Hk zIzVlwXJg6zUJij5FjyKsStDsBl7zlRZfzyhQkUfae8jQ8+LyywKyOkxuSmshJwK 0K77j3rfkVOgrNZ31HwqaQdE2zD9omCVk0uzc6q3FM5tM8fUP+Y6HvA8LG5gRDab dh3ojtEEtiU6T9CYJl7opnaw3pAXsEWobihP6aZ8y+Dy2Kfd5OlQ2Ivczt8nvUGM TmPKDR+4WZP5S0uzM9TT0g8R53KdV2qQMz/LlUdPEoILBdi6o8u3QXpfFW1lJjIN 2V5w0wcLWWnponGy0zGJliM/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbnycLE oQHO4zexendEP2jTTyrEMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6GL9vAT6S+QDlY7zxX0xD1JW5k3fjUrUmIddOkTYLhZuBlVU9EZ3h 1LiaJhbl6883yThs7SpzSMJTOmTCy0h5S7O/B9ypq3OEeticPoEdJYiJ/Bo0WYDk H23FnKUwyGEkNQBonUvHF3t5wEIwNbCpf5VaF6DABCyLeTsu5I6e714ruyvAmPvp BCir+p95moHpsBQF2AaH83dV/DDkrRNZj8IAF+y2y9mOWkrytXTslX01KiIdPt0F DLkpMC8nwnNpB9NY0CcUXSjNHXFZhZBM767HgLfTODv3q3tXvLJDtPXbsho0Zz6/ IJOa9yBWGFzB0BsmKokR2U/u1RW15Pt9 -----END CERTIFICATE-----Generated at Tue Jul 1 18:18:00 2025 by rpki-client