$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: 7KOz+x9rgZz0iQESArdS8nIUccdqt1FksRnkd00m8H8= Subject key identifier: CE:33:01:75:E9:64:B2:8A:96:9F:C5:A9:9F:DD:3D:AE:EE:AD:55:B2 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 0645 Signing time: Wed 02 Jul 2025 22:57:29 +0000 Manifest this update: Wed 02 Jul 2025 22:57:28 +0000 Manifest next update: Wed 09 Jul 2025 22:57:28 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: nbprzMEFigLHxqcOgLb2CdmEhG+OBPXAx8u3Du7FgaM=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Jul 2 22:57:28 2025 GMT Not After : Jul 9 22:57:28 2025 GMT Subject: CN=6865b958-7ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:a7:95:19:40:44:69:26:5d:04:a7:b9:db: 7b:1e:0a:58:19:02:22:61:2f:b4:ab:1f:86:94:67: 77:76:ae:31:d6:f5:35:08:54:a8:78:fc:7d:f6:1d: 30:a3:85:2c:7b:23:8f:da:be:aa:0b:6b:c1:f1:15: 53:25:2e:9e:17:93:47:78:57:4f:22:b0:93:41:4f: 3c:ef:21:52:cd:33:1a:e4:b3:f4:13:f4:1e:cb:0f: 98:4c:8d:84:fe:ed:0e:65:a1:c4:cd:bc:57:27:c7: dc:1c:eb:e4:50:b0:28:4a:bd:f3:70:5f:d2:eb:d3: 55:f8:61:81:5b:22:79:76:30:7d:a1:a6:25:11:2a: ee:ee:aa:80:15:b6:aa:ba:1b:bc:99:48:75:69:3d: 47:f7:3b:0d:ec:5e:35:d7:a4:0d:62:9b:84:b2:91: e5:7b:d0:59:4e:30:21:c7:0f:03:ba:7c:ea:f1:af: 3a:83:22:61:58:73:24:12:15:55:ae:ff:64:d6:20: aa:aa:2e:82:11:3a:31:5a:74:3b:04:20:50:a2:82: 31:c8:c5:ff:21:97:ba:79:10:56:09:6f:13:ae:4a: 29:d6:f4:50:42:a1:38:31:0b:ba:2b:24:14:aa:8e: c8:fd:91:0b:52:c6:27:79:1f:1a:17:9c:b8:c5:11: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:01:75:E9:64:B2:8A:96:9F:C5:A9:9F:DD:3D:AE:EE:AD:55:B2 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:59:fe:74:18:d7:9f:29:10:6f:cb:05:5a:b3:96:8f:c8:ce: d7:e1:23:a7:9e:4b:dd:68:54:a6:da:dc:26:21:94:8c:a1:91: dc:8c:1e:c8:3a:27:2d:a4:a2:86:a5:d9:b2:4f:7a:b1:94:1b: 6c:d8:f4:37:2e:dc:5b:90:33:da:53:7e:ca:b0:df:8b:79:d7: d2:84:a8:bb:c6:a7:bf:58:6f:cb:d6:08:61:a8:4d:7a:2a:ca: f6:84:2e:e6:e9:68:0c:bd:58:fc:eb:ec:52:0b:2f:e0:4f:cb: 18:d6:9a:ae:7a:0b:46:9f:d6:0b:28:a6:fa:ae:fb:9a:96:d7: 5a:e8:c0:98:94:c2:04:a3:bd:4b:75:68:32:1f:87:00:52:80: 7a:aa:32:18:6f:4f:0f:15:8f:f8:42:32:dd:a5:bf:82:f4:69: 00:eb:da:dd:d2:49:54:7b:b4:17:d3:a9:2f:64:7d:3a:65:57: 1a:da:56:23:44:57:6e:0f:15:e3:ce:22:2c:56:2d:ca:7f:40: 85:e6:f0:f1:ca:22:9e:a1:c9:f0:9d:52:2b:9a:44:27:13:3c: 2c:f3:65:e8:01:64:c1:40:47:b5:a8:a0:73:06:5b:41:29:bc: e6:31:d7:97:99:a8:82:ff:ad:a3:54:36:fb:55:25:40:12:b9: fb:51:6d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwNzAyMjI1NzI4WhcNMjUwNzA5MjI1NzI4WjAYMRYwFAYD VQQDEw02ODY1Yjk1OC03ZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEKnlRlARGkmXQSnudt7HgpYGQIiYS+0qx+GlGd3dq4x1vU1CFSoePx99h0w o4UseyOP2r6qC2vB8RVTJS6eF5NHeFdPIrCTQU887yFSzTMa5LP0E/Qeyw+YTI2E /u0OZaHEzbxXJ8fcHOvkULAoSr3zcF/S69NV+GGBWyJ5djB9oaYlESru7qqAFbaq uhu8mUh1aT1H9zsN7F4116QNYpuEspHle9BZTjAhxw8Dunzq8a86gyJhWHMkEhVV rv9k1iCqqi6CEToxWnQ7BCBQooIxyMX/IZe6eRBWCW8Trkop1vRQQqE4MQu6KyQU qo7I/ZELUsYneR8aF5y4xRFX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4zAXXp ZLKKlp/FqZ/dPa7urVWyMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWf50GNefKRBvywVas5aPyM7X4SOnnkvdaFSm2twmIZSMoZHcjB7I OictpKKGpdmyT3qxlBts2PQ3LtxbkDPaU37KsN+LedfShKi7xqe/WG/L1ghhqE16 Ksr2hC7m6WgMvVj86+xSCy/gT8sY1pquegtGn9YLKKb6rvualtda6MCYlMIEo71L dWgyH4cAUoB6qjIYb08PFY/4QjLdpb+C9GkA69rd0klUe7QX06kvZH06ZVca2lYj RFduDxXjziIsVi3Kf0CF5vDxyiKeocnwnVIrmkQnEzws82XoAWTBQEe1qKBzBltB KbzmMdeXmaiC/62jVDb7VSVAErn7UW1D -----END CERTIFICATE-----Generated at Thu Jul 3 09:28:11 2025 by rpki-client