$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: HnXol/mI61U39PdX/Wq3BMk3MnOEhkf2VND5ocFYGF4= Subject key identifier: EC:F4:19:34:8C:9D:EB:3C:DD:B8:15:EA:9B:E3:91:3C:84:5D:83:A6 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 049D Signing time: Thu 03 Jul 2025 00:19:14 +0000 Manifest this update: Thu 03 Jul 2025 00:19:14 +0000 Manifest next update: Thu 10 Jul 2025 00:19:14 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: 3g84ALY6IIGVZ/nkUzklXjulbl4qAc8nzaHLtQcQg58=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Jul 3 00:19:14 2025 GMT Not After : Jul 10 00:19:14 2025 GMT Subject: CN=6865cc82-c8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:d6:56:f9:89:ba:d3:d7:a7:c5:9c:6f:44: 4f:f4:c0:01:17:0b:27:4a:4d:ae:d6:58:13:2a:ad: d1:e2:cb:dc:56:76:d4:09:f9:a9:6d:18:b7:60:11: c5:49:a8:50:02:ce:f8:b2:e7:bd:7a:2e:3e:48:22: a2:3f:46:0d:b0:c8:f3:65:a2:46:82:42:49:cb:8c: 92:eb:a3:ce:d5:49:bd:dd:b0:9c:21:80:42:d8:92: 95:c5:fa:d9:f3:ea:4b:74:83:03:07:32:34:73:17: 5b:71:f5:5f:84:1a:56:b5:6a:ce:91:dc:22:d6:3c: b2:0c:4f:39:b8:a1:46:06:4b:4e:b9:48:10:6c:f7: 14:6a:c8:cf:02:ab:46:96:98:f1:58:ad:25:96:db: 54:71:a6:55:44:39:d7:fc:e4:6c:2e:58:11:93:38: 66:6d:8f:be:2e:68:26:6d:67:cd:0d:d9:18:38:78: a4:5f:4f:0e:40:85:99:ec:6a:d1:cd:2c:e0:7f:73: 7f:f3:53:d2:bf:66:11:bf:2b:f4:fb:2a:1d:9c:a4: ff:08:b6:82:3b:97:e9:8e:70:34:bc:fc:6d:71:1a: c1:da:0b:11:71:a1:ae:e4:8e:19:53:0f:cd:74:17: 39:95:af:0a:d1:49:9e:44:f4:2d:c7:81:33:05:6b: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F4:19:34:8C:9D:EB:3C:DD:B8:15:EA:9B:E3:91:3C:84:5D:83:A6 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:96:66:6e:7e:05:f8:ba:90:e0:84:a2:b8:ae:ba:66:67:a4: b5:7d:d7:54:37:98:fc:10:01:b1:86:fc:cb:a8:cd:81:d3:bb: d9:29:bf:4d:01:1b:06:44:2f:3e:41:5f:2c:51:02:7f:56:30: 85:f5:1b:71:6a:53:af:8f:0b:85:f7:58:a7:fb:d8:90:1c:31: 08:b9:7e:9f:6e:5f:3a:44:e8:52:ce:a4:96:1c:7b:e4:28:ea: de:bc:ca:b4:ee:c3:96:53:4d:dc:3f:e1:f8:39:f1:a1:b8:e4: 44:d0:13:a9:19:4e:e3:11:00:a9:6b:b0:5d:07:80:1f:ce:51: 34:2c:a2:57:de:b0:14:ff:0a:51:20:33:be:54:8a:a7:98:5b: d7:11:42:06:81:d6:b5:37:f6:b3:85:ba:87:81:95:cd:92:a6: 02:e4:2b:9d:96:ff:88:6c:75:92:6a:35:80:a3:eb:f8:e9:e8: 4e:30:08:1e:15:c7:de:f2:8f:7c:4f:23:1a:ee:8a:24:ae:8f: 57:1f:7a:21:15:cf:84:e4:96:7b:d2:84:ac:0d:0a:ef:a3:0f: af:25:44:c7:a1:f1:95:da:08:0a:c8:0d:13:f8:c4:8c:7b:6f: 1f:5b:ae:ea:f4:3d:65:0e:44:cc:2f:f2:9b:80:2d:65:50:93: a3:d4:fa:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUwNzAzMDAxOTE0WhcNMjUwNzEwMDAxOTE0WjAYMRYwFAYD VQQDEw02ODY1Y2M4Mi1jOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS7WVvmJutPXp8Wcb0RP9MABFwsnSk2u1lgTKq3R4svcVnbUCfmpbRi3YBHF SahQAs74sue9ei4+SCKiP0YNsMjzZaJGgkJJy4yS66PO1Um93bCcIYBC2JKVxfrZ 8+pLdIMDBzI0cxdbcfVfhBpWtWrOkdwi1jyyDE85uKFGBktOuUgQbPcUasjPAqtG lpjxWK0llttUcaZVRDnX/ORsLlgRkzhmbY++LmgmbWfNDdkYOHikX08OQIWZ7GrR zSzgf3N/81PSv2YRvyv0+yodnKT/CLaCO5fpjnA0vPxtcRrB2gsRcaGu5I4ZUw/N dBc5la8K0UmeRPQtx4EzBWvpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz0GTSM nes83bgV6pvjkTyEXYOmMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKlmZufgX4upDghKK4rrpmZ6S1fddUN5j8EAGxhvzLqM2B07vZKb9N ARsGRC8+QV8sUQJ/VjCF9RtxalOvjwuF91in+9iQHDEIuX6fbl86ROhSzqSWHHvk KOrevMq07sOWU03cP+H4OfGhuORE0BOpGU7jEQCpa7BdB4AfzlE0LKJX3rAU/wpR IDO+VIqnmFvXEUIGgda1N/azhbqHgZXNkqYC5Cudlv+IbHWSajWAo+v46ehOMAge Fcfe8o98TyMa7ookro9XH3ohFc+E5JZ70oSsDQrvow+vJUTHofGV2ggKyA0T+MSM e28fW67q9D1lDkTML/KbgC1lUJOj1Pq9 -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:26 2025 by rpki-client