$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: e5s47H0vj+IwKU8eKKDZ0YsN59EOURoLUsbIJT3p28s= Subject key identifier: 63:67:77:52:FC:83:83:F0:46:F3:BE:59:93:14:8F:A0:B0:88:60:B6 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 35 Signing time: Thu 03 Jul 2025 07:54:44 +0000 Manifest this update: Thu 03 Jul 2025 07:54:44 +0000 Manifest next update: Thu 10 Jul 2025 07:54:44 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: 6BM1eRGo1HObOs/QIcekm3kDsbUx8LvAZBrLPH924Ac=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Jul 3 07:54:44 2025 GMT Not After : Jul 10 07:54:44 2025 GMT Subject: CN=68663744-0a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:1c:74:d4:d6:e1:e2:d2:f3:47:32:f7:ad: 04:fa:42:1b:6b:30:fd:64:01:16:2e:68:48:b3:f8: 79:83:64:68:f4:17:42:b4:21:84:18:2d:46:61:e9: c3:db:29:d1:63:6f:f3:ca:97:d5:5d:a5:dc:76:ad: ce:00:46:e1:7e:ce:e3:68:e1:57:37:8c:25:92:3b: 97:20:52:7d:fa:a0:45:57:b6:15:18:cf:ac:6b:60: af:ee:ec:3b:b2:5d:91:0e:41:18:c8:e5:af:a0:c9: 7c:f4:a4:c3:f0:13:64:b9:e9:8a:33:30:63:1d:a1: 4c:6a:77:ef:86:fc:fd:ee:6d:bf:21:e5:70:94:05: c3:20:f9:f1:3d:cb:c7:5a:c5:18:03:b6:d4:9f:96: e8:55:48:c0:f5:c4:2c:29:60:36:32:76:7b:33:48: 89:ec:32:fe:59:4c:b9:ce:f1:03:c7:06:91:83:ff: 8a:1c:a5:96:45:7b:ef:65:54:50:07:78:a1:da:be: ca:3d:47:f3:56:2c:5c:28:6c:d2:22:f6:6c:5d:44: ec:a0:38:68:30:38:95:b8:67:7e:83:fe:81:ae:ff: 0a:4b:77:60:49:06:fb:70:a8:90:96:09:10:d3:51: 32:01:cd:a1:b2:78:82:8c:c5:37:d8:57:15:a5:ac: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:67:77:52:FC:83:83:F0:46:F3:BE:59:93:14:8F:A0:B0:88:60:B6 X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:cd:8a:f2:1c:52:84:8e:f2:76:e9:c8:0d:82:67:0d:fa:a7: 5c:9c:0a:99:aa:bf:0d:48:e0:cf:88:a5:5a:be:9d:9f:d6:26: 68:6f:01:0c:c8:d3:ea:05:6c:4f:34:47:4c:f3:cc:41:6a:64: 42:e6:36:e3:96:a2:dc:ff:79:de:4d:50:47:97:b5:4b:fc:80: 89:3d:52:c5:40:43:65:98:70:12:63:a9:ed:83:bc:a3:ca:71: d8:fb:16:43:ab:3d:d5:d6:61:e1:f7:da:cd:7d:7b:8e:fc:71: eb:89:ca:58:cd:e8:6a:15:49:ac:f6:db:f9:89:e6:43:60:c6: 24:d7:46:4a:fd:d6:95:05:a8:31:a6:42:c5:d9:da:b4:b9:51: 14:e6:7f:2e:de:9e:a1:f3:d3:65:0c:22:2c:45:fa:68:99:4e: 33:5d:7f:7a:90:c2:bc:7c:72:f3:2c:75:59:c6:f1:8b:6d:be: c8:37:ff:7c:76:f0:d3:17:f3:65:50:f0:57:2c:75:77:75:5d: 04:cc:40:c4:77:62:18:6a:32:90:99:83:5c:1b:80:e5:13:8f: 50:ad:67:f5:88:fd:cc:a0:10:ce:e6:72:60:9d:14:b1:c1:4b: 8e:03:1c:34:95:16:bf:a9:b3:17:45:f2:13:a1:61:15:e0:de: e1:74:ca:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA3MDMwNzU0NDRaFw0yNTA3MTAwNzU0NDRaMBgxFjAUBgNV BAMTDTY4NjYzNzQ0LTBhNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5yRx01Nbh4tLzRzL3rQT6QhtrMP1kARYuaEiz+HmDZGj0F0K0IYQYLUZh6cPb KdFjb/PKl9Vdpdx2rc4ARuF+zuNo4Vc3jCWSO5cgUn36oEVXthUYz6xrYK/u7Duy XZEOQRjI5a+gyXz0pMPwE2S56YozMGMdoUxqd++G/P3ubb8h5XCUBcMg+fE9y8da xRgDttSfluhVSMD1xCwpYDYydnszSInsMv5ZTLnO8QPHBpGD/4ocpZZFe+9lVFAH eKHavso9R/NWLFwobNIi9mxdROygOGgwOJW4Z36D/oGu/wpLd2BJBvtwqJCWCRDT UTIBzaGyeIKMxTfYVxWlrGFzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY2d3UvyD g/BG875ZkxSPoLCIYLYwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbNivIcUoSO8nbpyA2CZw36p1ycCpmqvw1I4M+IpVq+nZ/WJmhvAQzI 0+oFbE80R0zzzEFqZELmNuOWotz/ed5NUEeXtUv8gIk9UsVAQ2WYcBJjqe2DvKPK cdj7FkOrPdXWYeH32s19e478ceuJyljN6GoVSaz22/mJ5kNgxiTXRkr91pUFqDGm QsXZ2rS5URTmfy7enqHz02UMIixF+miZTjNdf3qQwrx8cvMsdVnG8Yttvsg3/3x2 8NMX82VQ8FcsdXd1XQTMQMR3YhhqMpCZg1wbgOUTj1CtZ/WI/cygEM7mcmCdFLHB S44DHDSVFr+psxdF8hOhYRXg3uF0yp4= -----END CERTIFICATE-----Generated at Thu Jul 3 23:44:45 2025 by rpki-client