$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: wNoyL36+TSRmgdxgyu4c2vDchAwNoGVdGn63sO2N99A= Subject key identifier: E9:3A:95:32:26:90:11:34:9F:23:8D:A1:38:FC:52:2A:5F:4C:B3:CF Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: B7 Signing time: Thu 03 Jul 2025 06:08:28 +0000 Manifest this update: Thu 03 Jul 2025 06:08:28 +0000 Manifest next update: Thu 10 Jul 2025 06:08:27 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: SlFP4vivQZsDkjjNIZyUDC0kRjpsc7lTypOOyfnV0RU=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Jul 3 06:08:28 2025 GMT Not After : Jul 10 06:08:27 2025 GMT Subject: CN=68661e5c-7621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:c4:c3:14:d2:46:6f:e7:de:09:46:fb:31: 3a:ef:e7:19:5d:1e:ac:8c:1d:38:27:9d:a2:ff:09: 98:85:dd:c4:00:64:29:ea:61:65:40:78:5e:14:9e: da:c9:25:dc:e1:11:f6:1d:65:56:87:e6:d8:3d:77: 82:63:36:5c:78:65:9b:f1:15:42:3a:7a:b3:40:8c: a9:1f:40:70:03:1d:9f:dc:06:60:a2:16:97:56:56: e7:fe:b2:44:5f:65:cd:0d:4f:4f:69:53:8f:6f:df: 3f:13:a2:36:4f:f2:27:56:e7:ca:10:d0:db:57:9e: 65:74:0c:6a:ca:1b:9b:cc:05:9c:ef:72:30:15:5b: f8:00:cc:f9:bf:33:6b:e2:16:ee:fb:37:80:a5:bc: d1:61:22:f1:c1:31:8b:eb:39:91:b6:5c:de:f2:0d: 09:85:af:37:79:a9:85:18:56:2a:47:d3:f3:f4:0d: 9e:5f:10:9b:f0:2c:b8:1a:2f:39:dc:59:ae:35:70: ef:16:8a:68:ee:ff:da:aa:ae:53:c8:c0:2b:c2:09: 86:4c:01:0c:71:98:ab:35:0f:5c:0b:fc:c7:0d:ed: 34:57:99:32:8a:ef:42:a1:b8:38:3c:6d:e8:70:9f: d8:9d:e2:bb:6d:d3:04:52:5c:44:50:0f:73:ce:d8: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3A:95:32:26:90:11:34:9F:23:8D:A1:38:FC:52:2A:5F:4C:B3:CF X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:fe:2a:41:7a:c9:e5:41:29:a5:ac:e9:1e:e2:29:4c:4e: b9:29:67:62:bd:92:b2:43:ee:f1:60:38:0b:a3:1d:07:b9:d6: 7a:04:fd:42:13:4f:23:27:96:e1:59:85:63:da:64:29:87:56: 7d:4e:39:4b:8c:4c:78:2c:3a:c5:ae:c5:65:bc:ac:7c:3f:57: 1d:8f:48:d0:c7:02:7b:37:fb:8a:e6:b4:47:23:82:45:03:03: a8:6f:04:e5:1b:84:10:88:cd:9a:31:92:f0:02:cc:49:fb:d3: 61:ee:e3:5e:79:ca:c3:81:23:c7:56:08:9f:a7:aa:ee:9b:3f: ad:81:dc:5b:38:00:77:39:93:e8:ac:94:91:03:63:09:8a:39: 0d:6a:4d:bb:6c:fb:4b:ff:6b:3f:53:7d:8d:1c:d5:5a:66:42: 5f:b5:83:be:c7:6d:bb:f4:60:e9:64:60:ef:c6:4b:a6:5b:90: 01:f4:e9:24:ab:9a:c8:b8:db:94:7e:aa:75:df:f9:1f:6f:9a: db:40:1c:ea:00:a3:27:1f:42:02:1f:61:4d:b7:ef:2c:67:42: 28:c7:88:48:8d:fd:c5:04:24:70:35:c2:93:41:72:e6:d7:7e: 75:1d:19:f9:5b:d4:75:de:ce:c6:55:e4:67:7e:9a:e5:64:0b: 85:7c:75:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwNzAzMDYwODI4WhcNMjUwNzEwMDYwODI3WjAYMRYwFAYD VQQDEw02ODY2MWU1Yy03NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTDEwxTSRm/n3glG+zE67+cZXR6sjB04J52i/wmYhd3EAGQp6mFlQHheFJ7a ySXc4RH2HWVWh+bYPXeCYzZceGWb8RVCOnqzQIypH0BwAx2f3AZgohaXVlbn/rJE X2XNDU9PaVOPb98/E6I2T/InVufKENDbV55ldAxqyhubzAWc73IwFVv4AMz5vzNr 4hbu+zeApbzRYSLxwTGL6zmRtlze8g0Jha83eamFGFYqR9Pz9A2eXxCb8Cy4Gi85 3FmuNXDvFopo7v/aqq5TyMArwgmGTAEMcZirNQ9cC/zHDe00V5kyiu9Cobg4PG3o cJ/YneK7bdMEUlxEUA9zzthMrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk6lTIm kBE0nyONoTj8UipfTLPPMB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj9f4qQXrJ5UEppazpHuIpTE65KWdivZKyQ+7xYDgLox0HudZ6BP1C E08jJ5bhWYVj2mQph1Z9TjlLjEx4LDrFrsVlvKx8P1cdj0jQxwJ7N/uK5rRHI4JF AwOobwTlG4QQiM2aMZLwAsxJ+9Nh7uNeecrDgSPHVgifp6rumz+tgdxbOAB3OZPo rJSRA2MJijkNak27bPtL/2s/U32NHNVaZkJftYO+x2279GDpZGDvxkumW5AB9Okk q5rIuNuUfqp13/kfb5rbQBzqAKMnH0ICH2FNt+8sZ0Iox4hIjf3FBCRwNcKTQXLm 1351HRn5W9R13s7GVeRnfprlZAuFfHUQ -----END CERTIFICATE-----Generated at Fri Jul 4 23:06:03 2025 by rpki-client