$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: 1WXNdDDOO+oaXc/cjx3vNt2FcckHHOZkz3GHEzJdVX8= Subject key identifier: 62:3C:6C:37:2F:B3:12:66:E5:D3:09:75:54:F2:C5:C3:22:DC:4A:0B Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 34B7 Signing time: Wed 02 Jul 2025 14:44:51 +0000 Manifest this update: Wed 02 Jul 2025 14:44:50 +0000 Manifest next update: Wed 09 Jul 2025 14:44:50 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: vrWE70hAuT2ZAflh11m9YocvcWgEFMdAt3T+gzxE2tM=) 2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: sVPCrnH4ijuCZYxExAGbTpSF6uDYt6PkZ4Y0+gIXmKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Jul 2 14:44:50 2025 GMT Not After : Jul 9 14:44:50 2025 GMT Subject: CN=686545e3-ff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:3c:a3:38:d9:02:12:77:af:b0:37:bf:c0: a0:d5:10:a2:2a:43:65:fa:7e:42:a4:f3:3d:16:20: 73:a1:b8:0b:e4:ed:42:27:fc:03:b9:c3:7d:30:ee: 49:3f:25:2c:a4:04:51:13:50:ed:2b:eb:1e:7f:82: b2:5b:35:1c:92:48:7e:af:f5:2d:72:6c:80:2e:7a: 71:a9:9c:8e:83:0b:ca:7b:d8:81:a9:c8:e4:62:a4: 0b:5e:13:9e:36:1b:81:f6:79:2b:85:fe:64:6c:cc: fb:cd:f8:48:51:b4:46:b9:29:d6:82:d0:fa:09:8f: ff:95:39:1e:6d:32:fb:47:e8:47:e0:7b:6a:a6:c1: 63:19:50:25:b2:82:fe:6f:b3:80:ac:b2:73:38:2f: cb:bd:d6:70:36:b5:eb:92:42:4b:53:34:eb:42:9e: 12:db:70:f1:66:c9:c4:47:1f:e7:cd:aa:34:72:16: 0f:34:04:c0:a0:44:89:ea:3a:b3:96:e4:e8:14:42: c3:39:60:17:b2:b0:0b:93:a5:8a:b8:48:ba:60:97: e1:79:72:1c:e9:de:70:13:27:2e:b7:67:20:e5:fa: 22:d0:62:61:f8:df:1b:55:43:90:9a:1f:57:ef:ff: 9f:09:2d:15:11:74:dd:79:79:e1:5b:f7:da:93:2d: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:6C:37:2F:B3:12:66:E5:D3:09:75:54:F2:C5:C3:22:DC:4A:0B X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:98:da:9e:82:55:79:62:89:e5:c3:7b:08:d7:f7:28:62:f7: 45:b1:b6:03:c4:a7:59:b0:52:93:67:5f:32:5d:c0:64:3c:b3: bb:25:21:6f:7c:09:1e:04:7b:9d:be:3b:3f:06:83:c6:ee:78: b1:8a:90:c9:c8:e7:2c:19:e7:1d:4a:33:ad:eb:d9:1a:b6:d7: f8:7f:47:6b:19:b5:1c:6c:77:e6:cc:69:26:1f:11:c0:f1:76: 99:cd:4f:26:40:7b:0f:61:53:8f:d9:7b:25:ee:ab:8f:06:38: f9:ee:3f:4c:22:d7:67:c6:1a:ed:70:7a:80:fc:b9:f4:d9:07: d5:24:e6:b5:2c:77:9b:d0:25:5b:38:84:74:08:52:d2:19:dd: 3a:3d:09:d3:58:4a:1f:3f:e8:05:ee:0e:1d:89:cf:39:8c:bc: e6:a9:1c:49:4e:2a:c5:1d:5c:0d:bc:3b:66:87:f2:ff:41:8a: e3:8b:aa:a2:94:c1:73:d6:44:1d:6d:b3:c4:d7:cc:6b:1b:5e: d0:ff:9b:bc:0b:de:78:51:34:be:3f:7c:7c:b5:db:a3:90:ee: 2f:b7:cf:0d:e9:06:50:f9:fd:71:6d:1a:4c:fb:c3:c3:cd:27: 7b:07:e0:f7:f4:9e:26:33:82:a2:ed:3f:b3:8f:eb:7e:99:70: ec:e1:32:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUwNzAyMTQ0NDUwWhcNMjUwNzA5MTQ0NDUwWjAYMRYwFAYD VQQDEw02ODY1NDVlMy1mZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4k8ozjZAhJ3r7A3v8Cg1RCiKkNl+n5CpPM9FiBzobgL5O1CJ/wDucN9MO5J PyUspARRE1DtK+sef4KyWzUckkh+r/UtcmyALnpxqZyOgwvKe9iBqcjkYqQLXhOe NhuB9nkrhf5kbMz7zfhIUbRGuSnWgtD6CY//lTkebTL7R+hH4HtqpsFjGVAlsoL+ b7OArLJzOC/LvdZwNrXrkkJLUzTrQp4S23DxZsnERx/nzao0chYPNATAoESJ6jqz luToFELDOWAXsrALk6WKuEi6YJfheXIc6d5wEycut2cg5foi0GJh+N8bVUOQmh9X 7/+fCS0VEXTdeXnhW/faky1UcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI8bDcv sxJm5dMJdVTyxcMi3EoLMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOmNqeglV5Yonlw3sI1/coYvdFsbYDxKdZsFKTZ18yXcBkPLO7JSFv fAkeBHudvjs/BoPG7nixipDJyOcsGecdSjOt69kattf4f0drGbUcbHfmzGkmHxHA 8XaZzU8mQHsPYVOP2Xsl7quPBjj57j9MItdnxhrtcHqA/Ln02QfVJOa1LHeb0CVb OIR0CFLSGd06PQnTWEofP+gF7g4dic85jLzmqRxJTirFHVwNvDtmh/L/QYrji6qi lMFz1kQdbbPE18xrG17Q/5u8C954UTS+P3x8tdujkO4vt88N6QZQ+f1xbRpM+8PD zSd7B+D39J4mM4Ki7T+zj+t+mXDs4TKX -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:09 2025 by rpki-client