$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: 85nEsPKVmkmvtm39b628gic9426YfG/xi2b8sd+p710= Subject key identifier: F9:42:1B:F7:36:0B:3A:A7:A2:AC:90:86:CC:E7:77:CE:0B:EF:98:99 Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 17 Signing time: Thu 03 Jul 2025 08:14:21 +0000 Manifest this update: Thu 03 Jul 2025 08:14:20 +0000 Manifest next update: Thu 10 Jul 2025 08:14:20 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: 1BL2ogbtImjOTKIO3/PfIqQF30vwOo0SpypN+0NXKaQ=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Jul 3 08:14:20 2025 GMT Not After : Jul 10 08:14:20 2025 GMT Subject: CN=68663bdd-fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:19:17:90:e8:db:64:aa:db:3b:c9:01:fd: 59:39:bf:ce:63:31:6d:85:f1:11:2b:e6:11:a9:bd: bb:55:4b:46:cf:06:af:91:9e:2c:1f:c2:ba:03:ef: 91:c0:b9:3f:fa:3d:d9:ac:33:ab:eb:ab:83:08:e3: 44:01:21:04:2e:e7:fc:43:05:67:5a:ec:e5:74:2f: 31:c3:d6:a9:2b:00:45:a6:10:5d:48:35:6c:30:e7: 10:e5:90:5f:49:80:4e:35:2b:fa:d6:00:6d:57:d0: 8f:9c:36:30:8a:8a:7f:db:bc:d1:e1:6a:e6:fb:33: 59:87:73:05:ec:29:48:30:7a:0d:09:1d:36:d9:ef: bc:fa:41:0d:2e:f2:37:e4:d5:12:2e:12:4e:18:31: 22:6b:cb:d2:24:98:32:9b:3d:97:a9:c4:ee:49:ce: 60:88:28:6b:0c:e1:b7:72:02:4b:ee:eb:0b:9a:70: d8:55:78:b9:ed:13:da:0a:b0:b4:d3:e1:ad:d1:ba: e5:63:13:c8:38:46:09:18:7e:0d:7b:35:49:3b:f6: e5:53:f7:82:22:60:7d:92:9a:42:85:c8:57:ec:3c: b7:ea:cd:7b:55:44:5e:79:30:31:a4:57:2f:d6:9b: 61:64:ee:bc:c6:3a:52:21:7c:6c:8c:b4:ad:70:9e: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:1B:F7:36:0B:3A:A7:A2:AC:90:86:CC:E7:77:CE:0B:EF:98:99 X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4e:f8:82:b3:3a:27:99:5e:bf:f1:bd:6b:c1:b1:f9:85:8c: 0f:87:f6:bf:6f:53:87:7e:fd:3a:6d:87:4b:e3:33:41:9e:72: ed:d6:14:f6:06:38:2e:c8:82:d2:b9:1f:bf:7b:80:6a:77:d0: 13:00:14:8f:12:da:4d:3a:b6:bb:2e:67:94:93:14:fd:7b:22: 28:09:23:aa:ba:10:0e:51:57:da:fa:7f:1c:c8:db:27:47:74: d0:2d:c8:e1:f4:9f:38:c7:b4:34:5d:21:60:05:d5:41:d0:17: 48:ac:5c:d4:b9:48:11:8a:09:f4:40:3e:8f:13:94:ea:e3:7d: d9:c0:fe:32:52:97:3f:7d:75:be:a2:98:2c:61:b5:1a:6e:e6: ae:87:c8:10:9e:d6:e3:81:e2:c7:9e:e5:a3:64:03:8f:14:89: 4f:cd:e3:42:f5:e8:49:af:52:1a:35:61:ed:0a:45:7a:33:2f: 24:58:6f:a9:b9:16:00:8a:de:6c:ae:4a:54:f7:a0:11:49:6f: 6a:fa:1b:05:6b:14:e6:89:fb:33:6e:1d:06:ca:87:16:9b:78: 38:9e:57:a6:97:76:94:6e:47:73:57:47:6e:23:94:e6:d5:b6: 2a:4d:9a:38:ac:10:22:a5:15:53:62:b7:6f:d2:47:7c:3d:7e: 1e:2f:a0:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTA3MDMwODE0MjBaFw0yNTA3MTAwODE0MjBaMBgxFjAUBgNV BAMTDTY4NjYzYmRkLWZkNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaOhkXkOjbZKrbO8kB/Vk5v85jMW2F8REr5hGpvbtVS0bPBq+RniwfwroD75HA uT/6PdmsM6vrq4MI40QBIQQu5/xDBWda7OV0LzHD1qkrAEWmEF1INWww5xDlkF9J gE41K/rWAG1X0I+cNjCKin/bvNHhaub7M1mHcwXsKUgweg0JHTbZ77z6QQ0u8jfk 1RIuEk4YMSJry9IkmDKbPZepxO5JzmCIKGsM4bdyAkvu6wuacNhVeLntE9oKsLTT 4a3RuuVjE8g4RgkYfg17NUk79uVT94IiYH2SmkKFyFfsPLfqzXtVRF55MDGkVy/W m2Fk7rzGOlIhfGyMtK1wnkLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+UIb9zYL OqeirJCGzOd3zgvvmJkwHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5O+IKzOieZXr/xvWvBsfmFjA+H9r9vU4d+/Tpth0vjM0Gecu3WFPYG OC7IgtK5H797gGp30BMAFI8S2k06trsuZ5STFP17IigJI6q6EA5RV9r6fxzI2ydH dNAtyOH0nzjHtDRdIWAF1UHQF0isXNS5SBGKCfRAPo8TlOrjfdnA/jJSlz99db6i mCxhtRpu5q6HyBCe1uOB4see5aNkA48UiU/N40L16EmvUho1Ye0KRXozLyRYb6m5 FgCK3myuSlT3oBFJb2r6GwVrFOaJ+zNuHQbKhxabeDieV6aXdpRuR3NXR24jlObV tipNmjisECKlFVNit2/SR3w9fh4voNc= -----END CERTIFICATE-----Generated at Thu Jul 3 22:59:59 2025 by rpki-client