$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: udRTg3UADtiUBAWzMpn1bsPMKhVeU5lMa671/UiWVwA= Subject key identifier: 60:6E:D4:B8:22:FD:26:A1:F9:12:FC:3C:E9:2C:C8:0A:6F:AD:86:9E Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: CF Signing time: Tue 01 Jul 2025 06:16:16 +0000 Manifest this update: Tue 01 Jul 2025 06:16:15 +0000 Manifest next update: Tue 08 Jul 2025 06:16:15 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: Y5UPlWYivz1uuyFX3Dhw2EZULppXcqqbQ/8n6nSMr6U=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: Eb8AfFxkY2lunIzmPfp9ZyHAYk+RBb0a8BG4v3YCxDc=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: Bg47WQyQqPO6vhS9f39oGO32kv0x8D/332r6YxTMVPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Jul 1 06:16:15 2025 GMT Not After : Jul 8 06:16:15 2025 GMT Subject: CN=68637d2f-1f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:1c:72:b2:45:13:c9:a3:5c:90:35:8b:79: a2:90:e9:6c:1b:80:7e:93:3d:b2:ef:97:e6:6e:5e: e9:bd:3d:ce:a3:f2:07:7f:bb:5a:1b:fe:41:c8:8f: d7:12:f5:e2:20:6b:d4:56:4b:75:d3:e1:47:55:ac: 85:b1:54:33:94:83:91:86:b7:f6:de:57:97:cf:f1: 32:aa:ef:8f:cc:c1:96:b7:8b:ca:c6:12:74:30:9b: 27:7a:2d:fc:78:fd:1e:64:23:da:05:17:71:7f:e8: 18:f2:a4:a0:53:52:86:a9:fc:31:f2:fb:85:56:fb: fc:1b:bd:4b:45:aa:2f:90:25:88:a5:2d:a2:28:1d: ed:7e:c3:84:7d:94:a6:79:12:0d:3f:3f:e2:5d:aa: e3:c4:34:fb:0f:47:7b:77:0e:1f:a7:30:de:32:1f: be:49:6e:76:04:67:1d:76:cc:b3:96:21:1b:cf:92: 0d:75:7e:08:15:e1:a3:d2:58:83:79:6b:da:07:55: 0d:15:ba:58:ca:00:db:04:a7:c7:9f:76:6c:0a:58: 21:74:19:32:a1:7f:5a:69:01:1f:03:8e:71:66:94: f1:48:6a:74:df:97:97:55:c4:5b:ac:86:69:fc:c2: 04:73:0b:34:8e:db:b4:34:df:7f:71:17:a4:7d:fb: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6E:D4:B8:22:FD:26:A1:F9:12:FC:3C:E9:2C:C8:0A:6F:AD:86:9E X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e0:ae:0b:2f:17:e0:19:91:06:50:4c:07:ff:1a:6d:a8:32: 34:60:4d:2f:10:e6:a0:11:4c:db:4e:68:d3:68:fb:b1:e9:45: a7:5b:e5:f4:00:65:0b:ce:e3:ac:38:cb:d9:90:73:8b:f1:55: bc:4f:ba:cd:1a:2d:17:b6:08:48:e3:48:9c:e0:db:cd:c3:fc: 9d:ad:c6:9f:56:54:37:33:a1:01:b2:c3:82:c6:75:2d:b8:5c: b5:6f:9e:fa:17:fc:1f:e6:92:1d:e2:ee:b5:3b:6d:94:19:7f: da:3c:a5:9d:c7:e2:0c:3d:d0:80:9b:ba:18:e9:32:39:32:9b: ca:f3:12:ec:6c:a6:25:10:27:f9:72:62:0f:01:72:50:00:4d: f0:61:22:5e:38:28:20:9a:f4:c7:94:0d:07:b1:4b:4f:c2:a9: 31:5a:08:c0:6d:6b:dc:3f:6d:dc:10:9c:fd:e3:ad:b7:c0:63: 23:41:74:d7:51:a9:0f:c2:e6:05:6e:24:67:03:7d:92:46:fb: f8:a0:44:b7:ff:19:0c:bb:60:c1:ab:9c:56:aa:48:53:c3:8d: 99:9d:3d:cd:90:a4:70:bb:5b:f9:1c:d1:4a:2c:8f:11:a2:3e: c5:c3:79:11:8e:69:05:19:09:54:21:71:97:34:21:60:5b:93: 28:99:3c:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUwNzAxMDYxNjE1WhcNMjUwNzA4MDYxNjE1WjAYMRYwFAYD VQQDEw02ODYzN2QyZi0xZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sUccrJFE8mjXJA1i3mikOlsG4B+kz2y75fmbl7pvT3Oo/IHf7taG/5ByI/X EvXiIGvUVkt10+FHVayFsVQzlIORhrf23leXz/Eyqu+PzMGWt4vKxhJ0MJsnei38 eP0eZCPaBRdxf+gY8qSgU1KGqfwx8vuFVvv8G71LRaovkCWIpS2iKB3tfsOEfZSm eRINPz/iXarjxDT7D0d7dw4fpzDeMh++SW52BGcddsyzliEbz5INdX4IFeGj0liD eWvaB1UNFbpYygDbBKfHn3ZsClghdBkyoX9aaQEfA45xZpTxSGp035eXVcRbrIZp /MIEcws0jtu0NN9/cRekffsYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBu1Lgi /Sah+RL8POksyApvrYaeMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR4K4LLxfgGZEGUEwH/xptqDI0YE0vEOagEUzbTmjTaPux6UWnW+X0 AGULzuOsOMvZkHOL8VW8T7rNGi0XtghI40ic4NvNw/ydrcafVlQ3M6EBssOCxnUt uFy1b576F/wf5pId4u61O22UGX/aPKWdx+IMPdCAm7oY6TI5MpvK8xLsbKYlECf5 cmIPAXJQAE3wYSJeOCggmvTHlA0HsUtPwqkxWgjAbWvcP23cEJz94623wGMjQXTX UakPwuYFbiRnA32SRvv4oES3/xkMu2DBq5xWqkhTw42ZnT3NkKRwu1v5HNFKLI8R oj7Fw3kRjmkFGQlUIXGXNCFgW5MomTyh -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:33 2025 by rpki-client