$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: BcnuidjwR2NcI8s+eFZEhRMkZFpE/XEQM25CwJCTJxs= Subject key identifier: DE:B6:FE:71:84:FC:E2:A4:C7:1A:38:B7:F9:BE:8B:00:5A:E5:7B:06 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04BE Signing time: Thu 03 Jul 2025 00:12:58 +0000 Manifest this update: Thu 03 Jul 2025 00:12:58 +0000 Manifest next update: Thu 10 Jul 2025 00:12:58 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: 3++Mfx1lM6mzM8+GGNu1P4ZEXS8qFQQ8bmrHyczoPWk=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Jul 3 00:12:58 2025 GMT Not After : Jul 10 00:12:58 2025 GMT Subject: CN=6865cb0a-35f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3e:6c:7b:24:34:85:e7:3d:2a:d2:e2:b1:86: 37:b0:24:16:b4:5a:ec:b7:33:43:d3:a9:ed:95:dd: fa:56:cf:84:ab:02:07:fc:e9:f6:ad:16:b6:25:4b: 83:3b:41:13:35:41:d5:a3:32:7c:84:8d:b4:52:d5: 27:3a:1f:16:37:a3:b7:ad:57:4f:fc:63:71:18:5d: 43:11:f2:15:0d:cb:d2:44:41:a7:9b:ea:61:60:56: 06:d0:b6:cf:70:74:83:0c:4f:a8:2a:c6:32:78:b6: fb:18:bf:66:0f:f8:07:4e:75:c2:ef:82:42:57:a9: 4f:f8:6a:a0:ba:25:4e:4d:ed:04:bc:20:21:e3:54: 63:89:d5:e7:0b:63:98:8c:18:8d:fa:3e:45:0a:ec: 93:98:4d:d6:ed:28:28:f9:33:27:cc:2a:6a:2d:e9: 1c:90:42:e5:73:64:17:23:31:a7:9a:11:d4:3b:a9: 2f:af:73:3c:47:6c:ad:85:a9:25:79:dc:ae:4c:2b: ff:aa:93:db:fe:97:bd:fb:01:24:dc:c2:70:6d:76: f7:f3:30:4c:1e:ce:c2:a8:6b:43:e1:8d:4a:5f:ed: 60:3d:79:22:6d:9b:cc:af:cd:e7:37:0e:5d:e4:af: 37:00:10:fe:a0:aa:65:be:f1:fc:49:e6:58:05:60: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:FE:71:84:FC:E2:A4:C7:1A:38:B7:F9:BE:8B:00:5A:E5:7B:06 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:28:3c:de:4c:9c:f6:93:1c:5f:10:10:34:b3:3c:f3:e9:f8: d9:52:64:25:36:73:d6:cc:36:92:58:46:75:2e:91:e0:ae:88: 4d:ff:a6:0f:40:33:d8:ae:aa:86:fd:54:69:cd:cd:21:12:6d: 99:a9:c8:a4:f8:cb:9b:36:a8:24:c0:56:2d:a0:23:ba:8c:c1: bd:7e:2e:4f:8e:8e:70:41:3b:16:eb:d7:38:16:5f:09:a6:32: fa:c5:a7:57:db:66:97:21:04:6e:c6:64:83:d7:bd:a0:9c:48: 7e:3f:a9:21:dd:62:f3:e4:0c:31:95:86:8a:d6:21:d9:ac:20: 9c:6b:d0:2f:d2:e0:15:87:35:66:c8:80:09:45:eb:02:89:ac: 26:90:18:97:3c:eb:d8:2f:7a:0d:f9:f3:6f:21:94:85:85:ec: 5f:05:74:eb:86:06:3b:00:75:b4:34:1f:94:35:b3:43:e2:6d: 88:49:1a:a1:60:85:c9:ec:81:ca:37:29:28:90:8e:22:54:cd: 5a:13:a1:e2:e1:e6:ca:e8:df:41:b1:30:a6:77:a5:35:b0:ca: 15:c8:bc:36:b0:61:7e:9f:82:85:4a:91:21:c4:6c:06:03:8b: a5:8e:e7:cc:06:ea:91:c4:ac:55:e7:81:6b:8e:4b:7c:3f:da: 2d:27:67:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwNzAzMDAxMjU4WhcNMjUwNzEwMDAxMjU4WjAYMRYwFAYD VQQDEw02ODY1Y2IwYS0zNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z5seyQ0hec9KtLisYY3sCQWtFrstzND06ntld36Vs+EqwIH/On2rRa2JUuD O0ETNUHVozJ8hI20UtUnOh8WN6O3rVdP/GNxGF1DEfIVDcvSREGnm+phYFYG0LbP cHSDDE+oKsYyeLb7GL9mD/gHTnXC74JCV6lP+GqguiVOTe0EvCAh41RjidXnC2OY jBiN+j5FCuyTmE3W7Sgo+TMnzCpqLekckELlc2QXIzGnmhHUO6kvr3M8R2ythakl edyuTCv/qpPb/pe9+wEk3MJwbXb38zBMHs7CqGtD4Y1KX+1gPXkibZvMr83nNw5d 5K83ABD+oKplvvH8SeZYBWDZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN62/nGE /OKkxxo4t/m+iwBa5XsGMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeKDzeTJz2kxxfEBA0szzz6fjZUmQlNnPWzDaSWEZ1LpHgrohN/6YP QDPYrqqG/VRpzc0hEm2Zqcik+MubNqgkwFYtoCO6jMG9fi5Pjo5wQTsW69c4Fl8J pjL6xadX22aXIQRuxmSD172gnEh+P6kh3WLz5AwxlYaK1iHZrCCca9Av0uAVhzVm yIAJResCiawmkBiXPOvYL3oN+fNvIZSFhexfBXTrhgY7AHW0NB+UNbND4m2ISRqh YIXJ7IHKNykokI4iVM1aE6Hi4ebK6N9BsTCmd6U1sMoVyLw2sGF+n4KFSpEhxGwG A4uljufMBuqRxKxV54Frjkt8P9otJ2cp -----END CERTIFICATE-----Generated at Fri Jul 4 15:38:10 2025 by rpki-client