$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: RzJd125Yhw88v4DQGJ65YbuyBBFbt9uUkjhNUIo2OjE= Subject key identifier: 96:04:11:1E:06:94:18:37:2F:A6:E5:51:FE:4F:28:AE:80:FE:64:AA Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 017F Signing time: Tue 01 Jul 2025 04:08:16 +0000 Manifest this update: Tue 01 Jul 2025 04:08:15 +0000 Manifest next update: Tue 08 Jul 2025 04:08:15 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: XcZZeGnybforC8KHBDtCmoFIcX66+b5y1crc8GRvT7I=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: IHKKhIw85fk9s47CrpZDKzzYoR/RN4XUlJphLrYmJyk=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: P7EwycxEH4BjaRzRhYFgj1fovDv1DxA8C+5endacXNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Jul 1 04:08:15 2025 GMT Not After : Jul 8 04:08:15 2025 GMT Subject: CN=68635f2f-ac9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:ec:6f:0b:a3:d2:f6:36:66:92:01:92:2e: 14:e8:cd:49:44:ed:0f:68:b0:14:2f:d8:2d:cc:68: 60:87:ac:1d:76:99:b4:d4:26:f4:55:9e:a2:0d:6d: 25:39:0d:16:5b:0f:b9:7a:40:7b:20:c4:78:b8:c6: 6d:0c:24:5d:1b:c9:5e:5a:e3:90:a8:35:7c:99:f9: ab:98:dd:d3:bf:db:b5:cb:bc:e1:b6:b3:c5:7c:43: e1:11:5b:9d:7c:ec:26:00:1d:c5:7c:5e:62:8c:9f: 4a:f7:aa:1e:ca:8d:10:06:11:7a:13:44:5e:4b:2b: 2a:e6:c4:8f:e5:f1:f5:fb:08:c9:89:9b:4a:86:a5: 76:9f:68:d1:28:2c:6f:f9:3a:c0:d0:e1:d8:bd:52: 7c:08:2d:80:ba:29:92:23:64:d6:59:90:40:4c:89: 7b:ed:8f:a0:72:60:73:17:49:10:a1:7b:a1:58:b2: d9:68:c4:4e:c0:1e:f1:71:c7:a7:b7:e1:b8:90:70: 71:1f:6a:07:89:18:4b:bc:5a:6c:1b:b7:3a:d0:72: ec:fb:d1:3f:9b:56:51:0a:4d:96:94:3d:a5:f6:a3: 10:82:d3:2f:8c:a4:ec:04:d2:a6:9a:53:48:88:11: 41:90:1f:84:85:3c:d0:bb:de:0c:88:17:2d:e3:12: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:11:1E:06:94:18:37:2F:A6:E5:51:FE:4F:28:AE:80:FE:64:AA X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b6:11:fd:e8:b9:c4:dc:d0:27:93:80:55:f1:fe:bf:92:55: a9:59:a7:c3:b1:9f:bb:c9:06:c2:80:fd:2c:2d:f1:33:3f:d4: 6d:66:ba:af:bc:1d:7a:e4:d1:e9:32:0a:2d:75:eb:e8:31:97: 27:9a:0b:5e:6f:a2:22:c7:8d:c1:0d:3b:d9:f7:32:5e:55:05: 7c:8b:c8:17:92:ac:73:8a:fb:1a:ed:dc:69:d2:7b:6a:02:9c: a5:85:41:80:eb:73:ed:33:3d:52:07:fc:35:94:b5:25:87:14: 07:9d:2b:56:84:cb:25:15:a7:ab:eb:1c:99:35:d6:90:f4:d8: df:59:1c:6e:47:f3:99:fd:c6:8b:54:8e:1e:f2:ab:3e:4f:79: 42:28:96:7b:d1:d8:5b:2b:3d:02:07:2b:72:5d:75:00:db:12: 65:ba:0a:de:11:64:bb:a0:63:24:37:6a:26:7a:4b:d3:20:9e: 4e:ec:29:e7:14:58:b8:1d:18:b5:c3:91:53:34:8f:a7:57:35: 66:57:f3:a1:c0:81:c8:ce:67:fd:67:c1:66:ad:4b:da:11:3b: 61:fe:7e:48:9b:d7:92:c3:cf:c1:e5:4c:28:0d:97:2c:84:b3: ee:05:a6:da:9d:4c:a2:ca:b7:03:3d:bf:3b:c7:b3:44:6c:37: 27:f4:62:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwNzAxMDQwODE1WhcNMjUwNzA4MDQwODE1WjAYMRYwFAYD VQQDEw02ODYzNWYyZi1hYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGrsbwuj0vY2ZpIBki4U6M1JRO0PaLAUL9gtzGhgh6wddpm01Cb0VZ6iDW0l OQ0WWw+5ekB7IMR4uMZtDCRdG8leWuOQqDV8mfmrmN3Tv9u1y7zhtrPFfEPhEVud fOwmAB3FfF5ijJ9K96oeyo0QBhF6E0ReSysq5sSP5fH1+wjJiZtKhqV2n2jRKCxv +TrA0OHYvVJ8CC2AuimSI2TWWZBATIl77Y+gcmBzF0kQoXuhWLLZaMROwB7xccen t+G4kHBxH2oHiRhLvFpsG7c60HLs+9E/m1ZRCk2WlD2l9qMQgtMvjKTsBNKmmlNI iBFBkB+EhTzQu94MiBct4xI2JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYEER4G lBg3L6blUf5PKK6A/mSqMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATthH96LnE3NAnk4BV8f6/klWpWafDsZ+7yQbCgP0sLfEzP9RtZrqv vB165NHpMgotdevoMZcnmgteb6Iix43BDTvZ9zJeVQV8i8gXkqxzivsa7dxp0ntq ApylhUGA63PtMz1SB/w1lLUlhxQHnStWhMslFaer6xyZNdaQ9NjfWRxuR/OZ/caL VI4e8qs+T3lCKJZ70dhbKz0CBytyXXUA2xJlugreEWS7oGMkN2omekvTIJ5O7Cnn FFi4HRi1w5FTNI+nVzVmV/OhwIHIzmf9Z8FmrUvaETth/n5Im9eSw8/B5UwoDZcs hLPuBabanUyiyrcDPb87x7NEbDcn9GLy -----END CERTIFICATE-----Generated at Wed Jul 2 19:15:16 2025 by rpki-client