$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: 5tvEHQHnYxmNj+aiESAwOEz6dRNV34e4RCVQxsz1M1M= Subject key identifier: 60:2A:5F:64:38:58:59:AF:0E:5D:2D:91:9F:14:8B:74:35:B8:1E:62 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 8F Signing time: Tue 01 Jul 2025 07:19:50 +0000 Manifest this update: Tue 01 Jul 2025 07:19:49 +0000 Manifest next update: Tue 08 Jul 2025 07:19:49 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: CreDXPk9H5Y56L13tPxTX38wlXSjRdsZFHJsm0+JGTo=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: Nw7bdEXIt94l0l1M2JoUcNpjGgfJnBtSbrpDec58/34=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: DTme312dtWhjs1JFg94y153qtB+lMbeMxpbcIu8vIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Jul 1 07:19:49 2025 GMT Not After : Jul 8 07:19:49 2025 GMT Subject: CN=68638c15-498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:b6:aa:c6:62:4b:c7:7b:7a:07:7f:ef:40: 2d:23:82:bd:9e:f2:96:50:d7:fd:2f:c2:28:e1:aa: 39:1e:6c:05:8d:90:00:bd:37:10:10:70:e6:b5:bd: c4:5f:ff:9d:7b:47:4f:f2:52:a0:19:1c:1e:b4:82: c8:22:df:83:25:1d:33:54:a2:b6:e5:73:ac:5b:47: 37:c7:b0:10:03:d2:89:47:91:eb:7b:a5:97:54:eb: 85:f8:6f:e9:56:23:4c:02:e2:0c:bf:5c:12:3b:03: 19:25:0e:a6:6e:13:86:1b:97:44:c2:ca:9c:05:4f: 99:4b:a6:bd:b9:0a:27:8b:c5:bc:5c:13:ce:82:f4: f9:50:36:3a:4f:35:86:d4:69:fd:8a:cc:5d:47:86: 98:cc:ba:a4:49:e8:5a:a8:1e:d5:b8:0b:08:8d:90: b4:f2:0b:dd:85:c1:ea:ef:2a:e9:0e:d7:1a:ca:fb: 5b:99:f4:72:e1:43:1c:2a:3e:53:d9:a1:cf:d8:92: bd:f7:71:44:45:69:4c:4a:81:7c:57:cf:00:8c:55: d8:9e:bf:e7:66:17:a7:a6:ca:49:2c:42:36:99:7a: 46:e1:1f:c9:87:d4:b5:38:62:7e:e0:1b:31:79:57: 4a:61:5c:84:d6:bd:8d:72:fa:ff:23:68:04:0a:94: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2A:5F:64:38:58:59:AF:0E:5D:2D:91:9F:14:8B:74:35:B8:1E:62 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:60:10:96:15:b8:2f:2a:a4:91:9f:1c:61:30:96:8e:b9:ad: 58:24:b0:19:af:e5:3c:ff:b2:f9:e7:ea:54:62:31:5f:53:d9: 76:88:e1:84:e3:17:4f:b4:ea:95:ae:83:dd:ce:84:6b:85:62: cc:34:a3:3a:18:cf:a4:d9:38:34:8e:d7:a7:dd:17:de:30:31: e8:e4:19:cb:3b:e8:38:da:88:34:53:43:4a:38:2e:4a:56:52: cf:fb:6d:01:cf:40:2d:f6:a4:c6:6b:2f:c8:10:fb:10:71:56: a6:e8:f5:41:b2:b7:09:27:4f:3c:fe:98:79:74:0f:3f:3d:15: 18:c2:fc:eb:f4:f9:c0:19:a5:19:78:7a:10:50:16:06:0c:46: 24:a6:f2:49:ea:e4:bb:7a:c1:07:f0:e0:02:fc:0d:c3:83:ed: 1c:89:ed:86:0a:38:c2:04:65:1a:79:62:f4:72:d1:68:c1:86: 81:4a:bb:ca:3c:4d:92:f9:22:8a:5a:43:74:5e:0c:94:15:78: ca:06:f2:45:52:08:ed:1c:51:e5:bc:4f:85:fe:1e:d1:31:34: 52:97:9b:9e:7f:30:8c:f3:d1:6c:58:c5:e8:40:40:3f:cd:bf: 68:ab:c4:53:7c:d1:6f:b5:a1:d9:4b:8d:52:6b:d1:6a:e9:cd: 6c:49:af:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwNzAxMDcxOTQ5WhcNMjUwNzA4MDcxOTQ5WjAYMRYwFAYD VQQDEw02ODYzOGMxNS00OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmq2qsZiS8d7egd/70AtI4K9nvKWUNf9L8Io4ao5HmwFjZAAvTcQEHDmtb3E X/+de0dP8lKgGRwetILIIt+DJR0zVKK25XOsW0c3x7AQA9KJR5Hre6WXVOuF+G/p ViNMAuIMv1wSOwMZJQ6mbhOGG5dEwsqcBU+ZS6a9uQoni8W8XBPOgvT5UDY6TzWG 1Gn9isxdR4aYzLqkSehaqB7VuAsIjZC08gvdhcHq7yrpDtcayvtbmfRy4UMcKj5T 2aHP2JK993FERWlMSoF8V88AjFXYnr/nZhenpspJLEI2mXpG4R/Jh9S1OGJ+4Bsx eVdKYVyE1r2Ncvr/I2gECpTN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAqX2Q4 WFmvDl0tkZ8Ui3Q1uB5iMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXYBCWFbgvKqSRnxxhMJaOua1YJLAZr+U8/7L55+pUYjFfU9l2iOGE 4xdPtOqVroPdzoRrhWLMNKM6GM+k2Tg0jten3RfeMDHo5BnLO+g42og0U0NKOC5K VlLP+20Bz0At9qTGay/IEPsQcVam6PVBsrcJJ088/ph5dA8/PRUYwvzr9PnAGaUZ eHoQUBYGDEYkpvJJ6uS7esEH8OAC/A3Dg+0cie2GCjjCBGUaeWL0ctFowYaBSrvK PE2S+SKKWkN0XgyUFXjKBvJFUgjtHFHlvE+F/h7RMTRSl5uefzCM89FsWMXoQEA/ zb9oq8RTfNFvtaHZS41Sa9Fq6c1sSa+l -----END CERTIFICATE-----Generated at Wed Jul 2 12:47:51 2025 by rpki-client