$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: 3/qjkHj5uZpux6aQ2SPViskuaq9ho8zlN/AmdgdkKm8= Subject key identifier: B2:A1:9E:78:9A:04:60:82:20:CB:C2:D1:55:22:90:A9:BB:22:A1:9E Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 2969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 2954 Signing time: Wed 02 Jul 2025 15:42:50 +0000 Manifest this update: Wed 02 Jul 2025 15:42:49 +0000 Manifest next update: Wed 09 Jul 2025 15:42:49 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: oBbojb6+gxMM34q92kTcjOuCGPPNu4WtLWei6krzmVA=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: XWmzI2yeMf3apt5DHsKgv60jONcTAI6E+TZgl5OMpW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10601 (0x2969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Jul 2 15:42:49 2025 GMT Not After : Jul 9 15:42:49 2025 GMT Subject: CN=6865537a-6ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:68:5a:d7:fb:83:45:6b:8c:3e:74:c3:ec:e2: a5:4f:1e:46:59:14:fe:5b:8a:18:2d:19:bc:7f:99: 6f:7f:ce:67:13:7b:39:66:ce:3f:d0:9c:bf:be:bd: 00:10:e1:18:24:20:01:64:79:c0:74:7f:40:d1:3d: 45:da:81:ed:a4:6c:b1:d3:7e:5d:0d:94:ec:66:23: 44:45:03:6a:e7:6e:4a:ce:b0:a1:cc:04:57:b5:61: 64:f8:2a:45:b8:8b:ac:2f:8d:68:32:09:60:60:14: 1e:8f:e5:6d:55:d6:22:dc:c4:bf:a9:bd:98:c2:2f: 44:58:43:0a:b0:21:a3:70:0d:86:a1:78:89:7e:28: e2:64:d2:7f:12:ee:13:2b:13:b6:45:59:3c:32:9f: 69:6d:78:6d:3d:de:05:39:7b:78:3e:38:a0:ca:10: 1c:4a:75:b3:60:da:b6:a7:b5:92:8f:16:53:08:a5: 20:42:08:9a:7c:87:68:96:2b:4c:98:47:6a:42:b5: 88:ed:4d:ae:19:c0:12:94:08:6f:ce:a6:92:96:b1: c3:a7:fc:02:04:9f:f1:3d:2a:1f:0f:dc:9d:b9:01: 1e:c5:b2:11:70:48:36:03:8a:b1:17:f7:37:d5:b6: 1a:9e:68:ef:4f:01:2b:7c:c5:fc:ca:03:ed:06:8a: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A1:9E:78:9A:04:60:82:20:CB:C2:D1:55:22:90:A9:BB:22:A1:9E X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7d:9c:31:7c:b1:0a:1d:a1:c8:cf:83:fa:a5:7c:70:06:20: 54:b3:c5:a4:af:ba:b2:d4:d4:50:60:41:2c:3d:18:40:dc:39: bf:f9:d2:0f:22:49:73:56:68:c2:82:dd:c3:85:22:7b:5a:81: bd:55:4b:e9:7e:43:ae:19:ef:46:42:1b:75:1a:72:1d:31:d5: e0:27:2e:6c:94:70:42:0c:74:e7:33:c6:4c:03:1e:00:a4:5b: 1f:cb:d9:b7:c1:f4:10:06:fc:b4:1d:9f:6d:be:51:50:f3:71: ab:b5:41:3c:fb:f5:ed:92:19:48:8c:91:b5:32:63:80:af:0a: 3d:cc:0d:9c:13:1c:73:8f:93:51:34:61:bd:37:70:e2:a0:b1: 2e:55:2c:c9:78:8e:91:7d:ba:68:c2:2c:5a:bd:66:fa:56:20: 64:20:64:8d:24:48:fb:69:30:8c:95:fb:05:cc:5f:29:67:1d: 4c:b2:35:46:bd:58:3b:ac:94:bf:f5:14:8e:0d:57:d7:1b:de: bf:ea:60:96:48:55:aa:7b:40:d4:93:d7:05:f3:79:e1:5e:e0: ab:bf:e4:0d:88:a4:19:c7:1f:b7:1d:24:bb:e3:d9:60:27:cb: 19:95:98:a7:c7:87:ef:1f:c3:d5:d9:1c:05:77:c9:ed:97:c9: f7:4c:ef:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjUwNzAyMTU0MjQ5WhcNMjUwNzA5MTU0MjQ5WjAYMRYwFAYD VQQDEw02ODY1NTM3YS02Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Gha1/uDRWuMPnTD7OKlTx5GWRT+W4oYLRm8f5lvf85nE3s5Zs4/0Jy/vr0A EOEYJCABZHnAdH9A0T1F2oHtpGyx035dDZTsZiNERQNq525KzrChzARXtWFk+CpF uIusL41oMglgYBQej+VtVdYi3MS/qb2Ywi9EWEMKsCGjcA2GoXiJfijiZNJ/Eu4T KxO2RVk8Mp9pbXhtPd4FOXt4PjigyhAcSnWzYNq2p7WSjxZTCKUgQgiafIdolitM mEdqQrWI7U2uGcASlAhvzqaSlrHDp/wCBJ/xPSofD9yduQEexbIRcEg2A4qxF/c3 1bYanmjvTwErfMX8ygPtBooa9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKhnnia BGCCIMvC0VUikKm7IqGeMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHfZwxfLEKHaHIz4P6pXxwBiBUs8Wkr7qy1NRQYEEsPRhA3Dm/+dIP IklzVmjCgt3DhSJ7WoG9VUvpfkOuGe9GQht1GnIdMdXgJy5slHBCDHTnM8ZMAx4A pFsfy9m3wfQQBvy0HZ9tvlFQ83GrtUE8+/XtkhlIjJG1MmOArwo9zA2cExxzj5NR NGG9N3DioLEuVSzJeI6RfbpowixavWb6ViBkIGSNJEj7aTCMlfsFzF8pZx1MsjVG vVg7rJS/9RSODVfXG96/6mCWSFWqe0DUk9cF83nhXuCrv+QNiKQZxx+3HSS749lg J8sZlZinx4fvH8PV2RwFd8ntl8n3TO+c -----END CERTIFICATE-----Generated at Thu Jul 3 06:01:24 2025 by rpki-client