$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: 3kxTGCsE+6HM0ecmd/7eTbBH/ddqMSdruqmYjUuPHPw= Subject key identifier: 7C:3A:EB:B5:44:97:24:ED:7C:7A:05:41:85:71:E9:3D:1E:57:0E:0D Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0B6F Signing time: Sat 28 Jun 2025 18:46:59 +0000 Manifest this update: Sat 28 Jun 2025 18:46:59 +0000 Manifest next update: Sat 05 Jul 2025 18:46:59 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: qkO01bYIydJkcmXxVqqjqGHUzvLBeFWEBMHZnwLg7e0=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: ACheYQYEXBleb6DdPHzkUhEDmzrchulLT+Neb0c5vYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: Jun 28 18:46:59 2025 GMT Not After : Jul 5 18:46:59 2025 GMT Subject: CN=686038a3-df37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:ee:4a:0a:3a:0f:3e:d5:c6:40:f6:7a:f0: ef:f8:0f:b0:8c:68:7b:66:82:ae:94:d0:7d:6d:86: d5:7b:5d:94:16:a2:9f:00:b1:f0:60:b7:98:38:57: d9:f0:31:40:10:af:53:20:36:bc:7b:73:f1:cc:ce: 24:49:13:0d:7f:9f:a6:a4:c8:2f:9e:54:26:4e:5a: 6b:b8:be:f8:79:59:80:cd:83:36:92:de:5d:09:e2: 89:e6:7f:47:6a:59:04:b8:5c:7d:33:00:c6:ca:b8: 00:ae:bf:d6:e3:ef:0c:1e:06:89:f4:05:d8:79:37: 9c:9c:f7:fa:fd:82:fa:51:ef:ee:e3:e5:88:7e:1e: c3:2f:43:c9:40:6e:7d:25:e8:9c:02:01:2f:66:15: b4:43:1e:d2:4e:8d:7c:f0:d3:84:b5:7a:15:58:7e: cd:4d:84:bc:f5:cb:17:bb:ee:6d:05:23:ee:04:3d: fd:c2:83:db:a1:d4:f5:51:40:62:e5:db:ea:b9:54: 16:36:77:da:cc:4f:00:cf:d3:77:5e:b8:e0:e2:31: 84:54:a2:9d:1d:21:87:57:73:c1:e3:31:94:53:f5: e7:0f:83:81:9c:f0:a7:0b:e7:c1:8a:48:18:e5:50: c1:9a:a1:1c:32:ce:4f:d7:68:a4:49:0d:7b:8b:e2: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3A:EB:B5:44:97:24:ED:7C:7A:05:41:85:71:E9:3D:1E:57:0E:0D X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:00:67:ea:f5:8e:be:8d:9b:c9:aa:5d:64:54:8f:a9:e1:29: 96:c0:93:eb:60:b2:c0:17:b5:45:dd:e5:a8:03:d0:1c:9b:8b: e4:30:ac:e4:42:94:a1:d0:a4:fb:b0:d6:ef:98:0a:46:f8:3c: 80:58:02:6b:a6:f2:90:82:c7:aa:b1:49:c2:47:90:d2:10:dd: 05:d7:c6:22:e7:2d:63:f5:28:1b:e9:a3:db:72:f7:a6:d5:8c: 29:fd:50:84:52:6e:d1:08:9c:f6:c4:f0:0a:3b:a4:7a:b3:99: fd:a9:42:e1:5f:39:58:a0:67:d5:85:fe:5d:d1:62:fb:d7:55: f9:a9:fa:f5:0b:35:43:25:88:a2:81:13:39:f0:1a:6f:78:d4: 1a:ae:ad:fc:59:f9:65:a4:cc:c8:cc:ed:99:b1:e7:a8:4f:c3: a5:5e:5a:1c:25:40:ca:6b:24:bc:ef:bc:69:c1:6d:55:95:5a: 3f:1b:a8:e0:40:33:a0:22:86:84:be:72:29:e7:06:38:46:a8: 62:5d:c5:c8:42:72:55:b9:5e:6a:fc:5a:d7:c2:a7:35:6d:ca: 70:96:9d:65:48:d9:e8:8b:1c:60:30:96:84:93:44:99:f6:46: 1b:a9:a6:15:e5:35:6f:6e:f7:1e:d3:02:97:1f:ee:99:09:da: 56:8f:4b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUwNjI4MTg0NjU5WhcNMjUwNzA1MTg0NjU5WjAYMRYwFAYD VQQDEw02ODYwMzhhMy1kZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoXuSgo6Dz7VxkD2evDv+A+wjGh7ZoKulNB9bYbVe12UFqKfALHwYLeYOFfZ 8DFAEK9TIDa8e3PxzM4kSRMNf5+mpMgvnlQmTlpruL74eVmAzYM2kt5dCeKJ5n9H alkEuFx9MwDGyrgArr/W4+8MHgaJ9AXYeTecnPf6/YL6Ue/u4+WIfh7DL0PJQG59 JeicAgEvZhW0Qx7STo188NOEtXoVWH7NTYS89csXu+5tBSPuBD39woPbodT1UUBi 5dvquVQWNnfazE8Az9N3Xrjg4jGEVKKdHSGHV3PB4zGUU/XnD4OBnPCnC+fBikgY 5VDBmqEcMs5P12ikSQ17i+KbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw667VE lyTtfHoFQYVx6T0eVw4NMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmAGfq9Y6+jZvJql1kVI+p4SmWwJPrYLLAF7VF3eWoA9Acm4vkMKzk QpSh0KT7sNbvmApG+DyAWAJrpvKQgseqsUnCR5DSEN0F18Yi5y1j9Sgb6aPbcvem 1Ywp/VCEUm7RCJz2xPAKO6R6s5n9qULhXzlYoGfVhf5d0WL711X5qfr1CzVDJYii gRM58BpveNQarq38WfllpMzIzO2ZseeoT8OlXlocJUDKayS877xpwW1VlVo/G6jg QDOgIoaEvnIp5wY4RqhiXcXIQnJVuV5q/FrXwqc1bcpwlp1lSNnoixxgMJaEk0SZ 9kYbqaYV5TVvbvce0wKXH+6ZCdpWj0tB -----END CERTIFICATE-----Generated at Sun Jun 29 18:27:45 2025 by rpki-client