$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: bk4+/5cznGJWAiAYOqg48N0bj74PkIWB/uebgt6cPu8= Subject key identifier: AD:F0:6C:11:FB:1D:6F:35:39:45:20:D2:CC:CB:2F:A6:50:FE:B3:4D Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 9C Signing time: Tue 01 Jul 2025 07:01:22 +0000 Manifest this update: Tue 01 Jul 2025 07:01:22 +0000 Manifest next update: Tue 08 Jul 2025 07:01:22 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: wNi3HV3qWOFBz9ILyeSyEy5TtS0NmfxP5veqUmS0Qtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Jul 1 07:01:22 2025 GMT Not After : Jul 8 07:01:22 2025 GMT Subject: CN=686387c2-30a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:b5:c5:e4:6a:ed:d6:69:d6:8f:82:27:1d: 67:12:ca:4c:4d:06:09:5b:11:2f:67:7a:a9:e1:33: d6:4b:ef:ad:15:bf:6f:f1:3c:55:06:76:77:6d:42: 99:63:87:38:40:d0:a6:9a:95:35:d7:90:54:f5:cc: 62:e5:a8:07:8c:df:9a:8f:88:e2:fa:92:40:f9:f4: 56:72:ed:a0:fa:ae:d3:2e:da:c7:9e:66:6e:7a:7f: a1:bd:c6:de:ba:8f:f1:35:4f:5d:ec:b9:7b:ac:dd: 61:36:d1:10:04:11:40:16:e1:c8:8d:e5:fb:24:5d: 15:df:25:20:b8:09:df:ed:9f:d5:80:5a:2a:4b:55: 29:74:9e:8b:25:99:16:ff:43:f7:35:9b:da:8a:33: 82:73:23:71:db:19:65:e2:ef:9b:54:06:3b:77:29: ba:c4:55:ec:fe:fd:7e:d5:0a:1e:9e:75:cc:16:00: d0:e4:17:f6:02:03:03:50:95:1e:70:da:6c:c6:37: b5:22:4e:ec:31:29:47:6c:fd:26:c8:bf:ff:3d:84: af:e3:19:e6:a2:27:e0:02:6a:d2:e2:bb:c1:af:2f: 15:a2:da:dc:2a:60:f1:bc:11:89:1f:f9:5c:4a:af: 53:63:fe:83:f8:b0:8f:d2:23:b1:0b:4e:f9:72:06: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F0:6C:11:FB:1D:6F:35:39:45:20:D2:CC:CB:2F:A6:50:FE:B3:4D X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:cd:6b:13:96:67:2a:f0:00:52:d5:8a:ea:0d:4d:94:aa: 3f:83:b5:7b:16:de:f0:1d:39:16:71:b9:01:fc:ce:8a:f3:e9: 68:f7:2a:f7:c0:24:66:b5:4c:a7:f3:52:f1:b3:2e:42:f5:69: 47:7c:d4:aa:02:b5:08:10:0c:78:06:28:0a:96:4a:6e:ef:a3: df:71:f5:4e:84:09:9c:b1:6a:09:75:ba:bd:89:16:91:6a:92: 3c:c8:19:74:5c:de:a9:21:4a:3c:9d:ba:a0:b9:b5:3f:ef:1b: 78:91:65:72:1f:1e:c3:fc:77:4b:4c:c6:c1:61:0c:6a:6d:c4: ec:c9:19:ff:37:6f:6d:aa:58:0f:af:49:c6:9c:2e:34:35:34: c7:3e:a1:ae:68:51:5f:a5:7d:67:5a:50:ea:2e:d5:81:d9:80: a1:c5:95:d0:6d:54:83:df:6e:b1:91:09:59:61:e9:e0:7b:14: 53:ec:02:b9:59:1e:98:54:90:65:13:88:98:78:06:59:57:58: 25:87:5a:35:09:9d:ff:bd:c6:bf:40:6c:90:1c:7a:55:f1:1d: b7:21:f4:5c:67:80:e3:02:01:ae:b1:c1:b6:84:96:b1:1b:a3: b3:41:27:a3:46:b5:62:33:83:c0:5d:ac:58:88:29:32:af:27: 00:0e:a1:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUwNzAxMDcwMTIyWhcNMjUwNzA4MDcwMTIyWjAYMRYwFAYD VQQDEw02ODYzODdjMi0zMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJC1xeRq7dZp1o+CJx1nEspMTQYJWxEvZ3qp4TPWS++tFb9v8TxVBnZ3bUKZ Y4c4QNCmmpU115BU9cxi5agHjN+aj4ji+pJA+fRWcu2g+q7TLtrHnmZuen+hvcbe uo/xNU9d7Ll7rN1hNtEQBBFAFuHIjeX7JF0V3yUguAnf7Z/VgFoqS1UpdJ6LJZkW /0P3NZvaijOCcyNx2xll4u+bVAY7dym6xFXs/v1+1QoennXMFgDQ5Bf2AgMDUJUe cNpsxje1Ik7sMSlHbP0myL//PYSv4xnmoifgAmrS4rvBry8VotrcKmDxvBGJH/lc Sq9TY/6D+LCP0iOxC075cgY9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3wbBH7 HW81OUUg0szLL6ZQ/rNNMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj5s1rE5ZnKvAAUtWK6g1NlKo/g7V7Ft7wHTkWcbkB/M6K8+lo9yr3 wCRmtUyn81Lxsy5C9WlHfNSqArUIEAx4BigKlkpu76PfcfVOhAmcsWoJdbq9iRaR apI8yBl0XN6pIUo8nbqgubU/7xt4kWVyHx7D/HdLTMbBYQxqbcTsyRn/N29tqlgP r0nGnC40NTTHPqGuaFFfpX1nWlDqLtWB2YChxZXQbVSD326xkQlZYengexRT7AK5 WR6YVJBlE4iYeAZZV1glh1o1CZ3/vca/QGyQHHpV8R23IfRcZ4DjAgGuscG2hJax G6OzQSejRrViM4PAXaxYiCkyrycADqGD -----END CERTIFICATE-----Generated at Tue Jul 1 18:06:07 2025 by rpki-client