$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: BUxexE7fEGCjneaouyCnD36jLOqxVpROC52oVYz2WAg= Subject key identifier: 38:A9:FD:70:BD:32:27:50:01:EC:FC:19:88:9E:A2:41:61:EC:BB:E1 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0A51 Signing time: Wed 02 Jul 2025 20:57:01 +0000 Manifest this update: Wed 02 Jul 2025 20:57:00 +0000 Manifest next update: Wed 09 Jul 2025 20:57:00 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: RmMyo0d7ccaisVV1BfTepY6tDWQc64jigqSdGgqJ77E=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Jul 2 20:57:00 2025 GMT Not After : Jul 9 20:57:00 2025 GMT Subject: CN=68659d1d-e4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5b:a6:a4:35:85:5d:93:43:27:19:f3:79:94: e8:e8:c4:80:a3:f3:60:01:a1:81:03:c6:18:93:04: 42:39:fd:5d:f1:e1:d4:6a:de:54:4f:be:59:27:e0: 87:e8:a0:28:67:3b:3d:6e:b4:06:e8:8e:3a:02:f1: 3e:ed:cb:f8:4b:54:df:6c:de:29:a1:a8:ac:c7:0d: 23:0b:57:08:f5:ae:7f:21:b4:fa:92:ca:a0:a2:1d: dd:d3:49:de:db:20:61:f8:8e:03:1e:04:2e:5c:1d: 6c:11:38:60:ce:fb:a3:13:95:0a:01:ad:de:b0:c0: 92:ef:ce:83:ca:21:01:70:c8:e3:81:3a:c4:5e:ca: f9:86:d3:05:54:b4:bb:d0:3a:50:46:d5:5c:8b:65: 37:6c:b3:29:ef:4b:5e:ab:37:e9:b3:b7:54:57:10: b1:3f:2b:16:bd:68:2c:c1:31:d9:54:db:05:aa:4d: e5:e2:68:d3:39:6e:81:5b:7e:62:75:25:ae:97:e5: 49:a1:97:58:1f:99:c6:0d:9f:6f:dc:f6:29:95:08: ec:28:51:ea:6f:bc:09:01:3b:4b:66:c1:f1:8e:56: 3c:85:f4:41:34:a6:21:2f:dd:d6:3d:df:30:ca:c6: 3a:b9:06:2f:fe:ed:c6:29:61:88:38:b2:fe:4d:e1: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:FD:70:BD:32:27:50:01:EC:FC:19:88:9E:A2:41:61:EC:BB:E1 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:be:31:d3:92:aa:cf:b8:5f:9e:9b:64:1e:55:8f:1d:78: 9e:37:17:c0:15:2c:0c:e5:0e:99:47:15:24:6b:53:ce:5e:b3: 91:23:f2:92:3b:25:3d:6f:9a:c2:b8:5d:cc:04:7a:b1:bf:1c: 6d:9b:8a:ba:f6:95:33:93:71:ee:10:14:a3:83:a0:3b:9d:0d: cb:99:99:8a:60:4f:f6:d2:fc:b2:07:b1:3c:4a:27:b2:bc:4a: e1:f1:5c:55:93:a1:5e:03:da:0c:9c:ac:8e:b7:67:d9:3a:1d: 60:3c:77:d5:7a:42:b5:a1:32:37:97:f4:1c:4d:5c:86:74:9e: a8:71:94:a8:f0:90:2a:30:ef:52:fb:b7:a3:57:05:1f:46:69: f9:0f:5b:ce:98:f7:19:bd:f5:80:cf:ce:5c:fc:12:f7:9d:a7: 25:99:22:5e:4a:66:2d:4d:01:7d:bf:cf:0e:ae:c8:96:cc:42: f4:ec:1c:0b:00:d6:aa:da:8b:34:ed:c4:d2:d4:02:ca:99:8b: b4:ef:af:f0:35:00:1f:c6:83:09:2f:35:2e:0b:25:80:c7:c3: 94:34:a0:e2:21:64:c6:e5:74:ba:e3:e2:6d:3c:1d:cd:86:89: 74:76:2d:65:2a:5d:8c:ac:e8:d7:07:bd:b4:43:d8:1f:7e:8f: 34:10:f8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwNzAyMjA1NzAwWhcNMjUwNzA5MjA1NzAwWjAYMRYwFAYD VQQDEw02ODY1OWQxZC1lNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lumpDWFXZNDJxnzeZTo6MSAo/NgAaGBA8YYkwRCOf1d8eHUat5UT75ZJ+CH 6KAoZzs9brQG6I46AvE+7cv4S1TfbN4poaisxw0jC1cI9a5/IbT6ksqgoh3d00ne 2yBh+I4DHgQuXB1sEThgzvujE5UKAa3esMCS786DyiEBcMjjgTrEXsr5htMFVLS7 0DpQRtVci2U3bLMp70teqzfps7dUVxCxPysWvWgswTHZVNsFqk3l4mjTOW6BW35i dSWul+VJoZdYH5nGDZ9v3PYplQjsKFHqb7wJATtLZsHxjlY8hfRBNKYhL93WPd8w ysY6uQYv/u3GKWGIOLL+TeEEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDip/XC9 MidQAez8GYieokFh7LvhMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEW74x05Kqz7hfnptkHlWPHXieNxfAFSwM5Q6ZRxUka1POXrORI/KS OyU9b5rCuF3MBHqxvxxtm4q69pUzk3HuEBSjg6A7nQ3LmZmKYE/20vyyB7E8Siey vErh8VxVk6FeA9oMnKyOt2fZOh1gPHfVekK1oTI3l/QcTVyGdJ6ocZSo8JAqMO9S +7ejVwUfRmn5D1vOmPcZvfWAz85c/BL3naclmSJeSmYtTQF9v88OrsiWzEL07BwL ANaq2os07cTS1ALKmYu076/wNQAfxoMJLzUuCyWAx8OUNKDiIWTG5XS64+JtPB3N hol0di1lKl2MrOjXB720Q9gffo80EPi7 -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:06 2025 by rpki-client