$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: 6VDAkbhZagEjb96/OhIlsrYslqrzNwgSaIGIDrTXx8I= Subject key identifier: 2D:B1:A0:FC:38:90:3D:AB:B5:EB:9E:42:8A:CA:F5:5A:CB:E7:36:BE Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 0579 Signing time: Wed 02 Jul 2025 23:37:15 +0000 Manifest this update: Wed 02 Jul 2025 23:37:15 +0000 Manifest next update: Wed 09 Jul 2025 23:37:15 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: Odxw6zYTWGRLaE3pcxKfHLS7qmv8horlonqqByRwsI0=) 2: 529F69FCE5CA11EBB98C5577C4F9AE02.roa (hash: yEoo0/2ZbdS1AKMgT4F4l5jk6+ByUwD65kyD3NyUV9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Jul 2 23:37:15 2025 GMT Not After : Jul 9 23:37:15 2025 GMT Subject: CN=6865c2ab-81cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:b2:bb:00:fb:93:c3:cc:fc:c8:af:24:b1: e0:8f:2f:42:08:3d:25:e7:fb:19:d4:3b:ac:a5:8e: 7e:fa:c5:8c:91:b8:32:13:2e:9f:8e:43:57:3d:4e: 3e:6e:61:e8:47:7c:1f:0d:a8:e2:be:61:5d:bb:8b: da:bc:f5:c0:80:8e:3f:41:e0:37:88:50:1c:1c:a0: 58:18:55:7e:9a:5f:d0:5b:cd:0e:5d:a1:98:04:07: 75:56:ac:88:db:56:67:c9:0b:05:f8:33:b2:9a:20: d1:71:f2:08:65:3a:0a:10:04:7b:5f:b6:db:13:f6: fd:e8:90:66:40:6f:59:74:e3:12:a6:32:88:25:71: ff:37:a6:f5:cb:f1:49:fc:c5:96:56:f9:bf:69:2d: c4:b6:04:3a:ee:6a:13:93:3a:f7:e6:d2:0d:b7:61: 5c:43:9a:cd:ce:e4:99:22:cf:07:92:c5:5b:68:4a: 9d:71:3f:c3:c5:01:b5:18:17:ca:cb:76:da:a6:be: 1a:32:b8:d4:4c:db:19:97:00:30:ca:d3:8b:ef:8a: a8:28:47:c7:92:1d:5e:57:5c:e7:96:86:4d:4e:fc: 62:96:83:46:b9:c3:71:a2:92:23:07:f4:d9:cc:d3: de:c8:5b:6e:50:a5:5f:43:e0:4b:02:9d:6b:17:45: 5f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B1:A0:FC:38:90:3D:AB:B5:EB:9E:42:8A:CA:F5:5A:CB:E7:36:BE X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:11:4e:0b:9a:64:8a:f3:31:a4:8b:fc:c1:4c:fe:ec:20:5d: a4:dc:71:d9:ba:74:e8:3a:50:4c:bb:b8:e8:47:15:6f:a3:e5: 79:0f:bf:4d:ed:d5:37:5f:7e:f3:8f:d5:b5:c3:6f:1e:1d:2a: 1c:51:ce:49:d5:bc:45:86:63:1a:9f:2b:7d:9c:51:30:53:d5: 92:c9:cd:d8:41:33:58:6e:c4:73:36:12:f4:34:d6:ce:b0:d5: 05:4f:a9:2d:80:d0:a0:ca:ea:aa:c1:44:43:6d:ae:e5:12:c9: 17:6c:7a:33:e4:c9:46:cc:2d:3d:08:73:53:10:28:b8:2d:34: b6:aa:bf:32:51:c2:87:a2:99:4a:fd:75:c0:71:28:4e:63:9d: ce:b6:01:c4:21:d4:43:0e:1c:ea:f8:8d:d2:3f:1f:22:23:a1: 3a:38:ba:dd:94:f0:29:1d:66:1b:e0:22:c8:94:f6:72:e5:a1: 11:53:bd:74:0e:68:98:03:32:a2:94:77:d1:ca:89:91:99:07: b4:45:a4:94:fd:2b:c4:f6:d9:05:d1:3c:88:1e:25:91:e1:f6: dd:eb:f2:cf:9b:fb:30:69:7d:67:d5:59:18:05:d8:60:0a:bb: a5:f3:fa:54:3c:c8:45:a6:84:36:05:3b:0c:06:26:ae:8b:26: f1:f3:e6:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUwNzAyMjMzNzE1WhcNMjUwNzA5MjMzNzE1WjAYMRYwFAYD VQQDEw02ODY1YzJhYi04MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkayuwD7k8PM/MivJLHgjy9CCD0l5/sZ1DuspY5++sWMkbgyEy6fjkNXPU4+ bmHoR3wfDajivmFdu4vavPXAgI4/QeA3iFAcHKBYGFV+ml/QW80OXaGYBAd1VqyI 21ZnyQsF+DOymiDRcfIIZToKEAR7X7bbE/b96JBmQG9ZdOMSpjKIJXH/N6b1y/FJ /MWWVvm/aS3EtgQ67moTkzr35tINt2FcQ5rNzuSZIs8HksVbaEqdcT/DxQG1GBfK y3bapr4aMrjUTNsZlwAwytOL74qoKEfHkh1eV1znloZNTvxiloNGucNxopIjB/TZ zNPeyFtuUKVfQ+BLAp1rF0Vf0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2xoPw4 kD2rteueQorK9VrL5za+MB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjEU4LmmSK8zGki/zBTP7sIF2k3HHZunToOlBMu7joRxVvo+V5D79N 7dU3X37zj9W1w28eHSocUc5J1bxFhmManyt9nFEwU9WSyc3YQTNYbsRzNhL0NNbO sNUFT6ktgNCgyuqqwURDba7lEskXbHoz5MlGzC09CHNTECi4LTS2qr8yUcKHoplK /XXAcShOY53OtgHEIdRDDhzq+I3SPx8iI6E6OLrdlPApHWYb4CLIlPZy5aERU710 DmiYAzKilHfRyomRmQe0RaSU/SvE9tkF0TyIHiWR4fbd6/LPm/swaX1n1VkYBdhg Crul8/pUPMhFpoQ2BTsMBiauiybx8+YQ -----END CERTIFICATE-----Generated at Fri Jul 4 10:34:42 2025 by rpki-client