$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: vO7ed+XYVvS9S/JDkziZeJSzJUofLv1CMhFkFZLHmr8= Subject key identifier: 06:4C:2C:5E:44:8D:60:9D:20:8A:6E:21:05:5D:19:6C:7C:CB:27:E9 Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 0323 Signing time: Sun 29 Jun 2025 00:42:26 +0000 Manifest this update: Sun 29 Jun 2025 00:42:25 +0000 Manifest next update: Sun 06 Jul 2025 00:42:25 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: J+b0cQ0iL3WbRUUr4nTetCpl8GnrZNk6rvtr+b3kdJk=) 2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=) 3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Jun 29 00:42:25 2025 GMT Not After : Jul 6 00:42:25 2025 GMT Subject: CN=68608bf2-d9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:d2:40:70:bb:3d:23:14:5c:2f:c9:82:55: 6e:92:aa:85:0e:b0:be:a1:29:3d:89:c8:78:87:58: 82:8d:3e:ac:5e:9f:af:a7:1d:c0:96:0c:16:2e:31: 63:e8:8b:03:40:74:78:67:a0:d7:26:85:6c:19:50: a3:da:86:cd:7a:ea:6c:8d:3c:aa:ec:29:74:42:08: 91:05:8c:77:42:30:ef:45:aa:95:9f:d8:b3:3b:57: c1:2e:b7:5b:75:84:ec:27:ac:55:42:08:06:fd:0a: d8:5b:c0:cf:b0:30:ab:1b:18:34:91:59:e2:f2:15: 68:48:28:8e:ee:69:7e:3e:40:60:a6:cc:c5:b9:3a: f7:b9:5a:ec:cd:da:47:8e:7f:69:23:2f:96:84:33: aa:88:ed:e5:53:48:eb:48:65:fe:ad:da:fa:2a:20: 4b:b3:fc:5e:8e:19:19:ee:4e:8d:ae:c1:db:9c:5a: 50:37:10:44:92:c4:5a:a8:d7:77:ea:e8:3d:62:61: 2c:5f:60:83:54:e5:d3:15:2a:88:1f:3a:ee:f2:38: 84:a1:7f:45:31:e7:b1:08:99:46:50:83:99:5a:7a: 8f:3a:15:9f:d7:24:14:86:2c:d6:ee:18:8b:0e:da: 8f:0e:37:6b:bd:76:17:f1:c1:3b:ff:40:d5:fc:1d: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4C:2C:5E:44:8D:60:9D:20:8A:6E:21:05:5D:19:6C:7C:CB:27:E9 X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0d:b0:ec:0e:d8:05:f8:9e:ff:05:da:ba:8b:60:16:9f:99: 6a:a6:46:44:db:81:e5:c6:d7:65:a8:65:97:e8:ac:29:b6:46: 52:e2:83:1b:84:a4:bd:a0:fa:f2:2e:8e:ba:2a:18:7a:1b:88: 6b:0b:af:29:4f:68:75:cc:13:56:6d:52:a9:58:e4:d6:cb:29: 43:3b:18:97:4b:29:b5:10:bd:c8:2a:39:ac:0f:60:13:3c:14: 6e:b9:8a:4e:96:74:c6:58:0c:3b:a1:19:6b:17:2f:dd:9a:89: 05:41:a1:c5:e9:68:bb:c4:6c:71:e6:69:11:ec:6f:f1:ef:21: 7d:79:93:22:a3:db:8c:1d:4c:98:d8:4d:c9:de:22:ca:eb:ee: 48:ae:b5:8b:a5:a0:11:17:e6:c2:34:60:11:6f:02:b9:26:8e: 29:dc:ea:cb:2f:c6:53:df:55:00:9a:96:b8:2f:fd:2d:0e:f4: 5c:a8:b8:a9:43:0b:df:27:e6:99:19:19:43:14:a4:55:98:6d: 64:bf:2b:0a:a8:1a:8e:90:cd:8f:b3:4d:44:1d:44:f1:fb:f5: 3b:68:b7:ba:c1:9a:6a:85:39:5c:a5:54:df:45:29:7b:15:91: e6:c8:1e:bd:12:36:48:85:8c:ec:27:d0:53:c3:c1:da:e1:58: e4:a0:84:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjUwNjI5MDA0MjI1WhcNMjUwNzA2MDA0MjI1WjAYMRYwFAYD VQQDEw02ODYwOGJmMi1kOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H3SQHC7PSMUXC/JglVukqqFDrC+oSk9ich4h1iCjT6sXp+vpx3AlgwWLjFj 6IsDQHR4Z6DXJoVsGVCj2obNeupsjTyq7Cl0QgiRBYx3QjDvRaqVn9izO1fBLrdb dYTsJ6xVQggG/QrYW8DPsDCrGxg0kVni8hVoSCiO7ml+PkBgpszFuTr3uVrszdpH jn9pIy+WhDOqiO3lU0jrSGX+rdr6KiBLs/xejhkZ7k6NrsHbnFpQNxBEksRaqNd3 6ug9YmEsX2CDVOXTFSqIHzru8jiEoX9FMeexCJlGUIOZWnqPOhWf1yQUhizW7hiL DtqPDjdrvXYX8cE7/0DV/B1X/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZMLF5E jWCdIIpuIQVdGWx8yyfpMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxDbDsDtgF+J7/Bdq6i2AWn5lqpkZE24HlxtdlqGWX6KwptkZS4oMb hKS9oPryLo66Khh6G4hrC68pT2h1zBNWbVKpWOTWyylDOxiXSym1EL3IKjmsD2AT PBRuuYpOlnTGWAw7oRlrFy/dmokFQaHF6Wi7xGxx5mkR7G/x7yF9eZMio9uMHUyY 2E3J3iLK6+5IrrWLpaARF+bCNGARbwK5Jo4p3OrLL8ZT31UAmpa4L/0tDvRcqLip QwvfJ+aZGRlDFKRVmG1kvysKqBqOkM2Ps01EHUTx+/U7aLe6wZpqhTlcpVTfRSl7 FZHmyB69EjZIhYzsJ9BTw8Ha4VjkoITA -----END CERTIFICATE-----Generated at Mon Jun 30 12:40:57 2025 by rpki-client