$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: fkAzLLPNn0xIJY6kW3eghEKm//S+Hrgqa9/0CCobpYA= Subject key identifier: 6F:EA:FD:09:F6:58:36:48:E2:1F:1E:C3:14:B4:30:32:DA:77:31:39 Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 02CF Signing time: Tue 01 Jul 2025 02:03:00 +0000 Manifest this update: Tue 01 Jul 2025 02:02:59 +0000 Manifest next update: Tue 08 Jul 2025 02:02:59 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: rgSp+/kh/2gKhk/HT9OLTegtIJvwV53Ns9ON36EGzs8=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: Jul 1 02:02:59 2025 GMT Not After : Jul 8 02:02:59 2025 GMT Subject: CN=686341d4-85cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:4d:19:50:22:31:08:80:bc:37:ba:f5:ce: f9:57:42:56:4a:f4:c0:b9:b1:a1:04:99:69:b8:bf: 0b:6e:19:59:7e:f8:db:01:43:d4:31:b9:cb:04:0e: cd:25:5e:b9:87:88:72:c9:34:59:9c:8a:f9:41:af: 2f:2d:8b:e5:2d:ff:ae:30:5b:2d:db:fe:b1:94:8e: 5d:c2:f3:08:55:b1:88:03:44:8f:c6:cb:8f:fe:42: 03:0d:74:81:af:86:97:29:d5:d1:28:d1:18:24:60: c1:a9:21:e2:50:a2:65:23:f6:74:8e:66:ea:0e:a3: 8e:c0:b6:2f:1e:df:af:20:a2:c8:7b:da:fd:d9:0c: 74:4c:e3:07:1e:40:2d:1a:ab:1f:94:83:2a:3a:c5: 89:6d:30:e5:9e:1c:79:11:56:55:b5:5f:3c:5f:28: ce:fe:2f:bb:fd:90:f0:4d:d6:c7:76:01:f5:c4:80: 49:3c:b7:98:9c:a4:5e:69:ad:5b:e8:e5:08:7f:0e: b6:b0:61:d7:5d:3c:aa:f6:31:ee:c0:de:ad:64:2b: 06:71:9d:1a:af:50:4f:79:b2:71:ef:8e:d8:a5:99: 4e:f5:60:27:ea:e3:23:c3:0f:3d:18:dc:7e:bb:5f: 1d:1a:96:fe:7e:dc:ad:4e:53:d3:c4:9c:fd:c4:a4: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:FD:09:F6:58:36:48:E2:1F:1E:C3:14:B4:30:32:DA:77:31:39 X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a5:64:0a:1c:20:d4:79:2f:bd:bb:06:b6:44:d9:30:86:06: c2:6c:1d:d1:d0:ff:05:f2:06:61:d0:03:7d:85:c6:70:33:dc: a9:99:dc:b4:11:cf:11:55:ac:d9:9e:64:79:96:af:72:dc:c1: ab:90:a1:6a:b7:05:c3:a3:84:53:49:57:56:38:b7:1b:a4:ae: a8:0d:2c:9c:2d:2c:9f:d4:83:05:13:bf:54:a0:fb:0f:97:9a: 5f:ad:d2:b7:14:0c:78:b2:84:ba:1a:56:8a:7c:ba:34:74:0c: 18:8a:dc:ff:20:4c:a0:c4:20:89:1a:32:06:4e:a5:2f:ad:7d: 0c:ef:cc:7f:ed:9f:68:b8:aa:26:c6:37:59:0c:4d:cb:13:8a: 47:94:a5:69:02:c6:fd:b4:b1:0c:a2:2f:05:b6:72:5e:57:03: 79:d6:03:6f:be:f8:8e:d3:16:64:01:b7:97:6c:b2:7b:f5:5a: 92:8b:71:e6:fc:92:a7:6e:7e:ef:c9:6f:b0:71:6d:8e:b0:3f: e5:96:66:3b:3a:45:18:99:bf:74:94:fc:8c:7d:21:e4:63:ae: ee:60:bf:5c:70:0d:a2:dc:bf:ee:37:98:0e:fe:a3:7f:eb:b0: 97:68:61:0d:78:37:8a:fd:39:ba:43:9e:3c:be:2e:82:d8:b1: c0:2a:b7:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUwNzAxMDIwMjU5WhcNMjUwNzA4MDIwMjU5WjAYMRYwFAYD VQQDEw02ODYzNDFkNC04NWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SxNGVAiMQiAvDe69c75V0JWSvTAubGhBJlpuL8LbhlZfvjbAUPUMbnLBA7N JV65h4hyyTRZnIr5Qa8vLYvlLf+uMFst2/6xlI5dwvMIVbGIA0SPxsuP/kIDDXSB r4aXKdXRKNEYJGDBqSHiUKJlI/Z0jmbqDqOOwLYvHt+vIKLIe9r92Qx0TOMHHkAt GqsflIMqOsWJbTDlnhx5EVZVtV88XyjO/i+7/ZDwTdbHdgH1xIBJPLeYnKReaa1b 6OUIfw62sGHXXTyq9jHuwN6tZCsGcZ0ar1BPebJx747YpZlO9WAn6uMjww89GNx+ u18dGpb+ftytTlPTxJz9xKS+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/q/Qn2 WDZI4h8ewxS0MDLadzE5MB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/pWQKHCDUeS+9uwa2RNkwhgbCbB3R0P8F8gZh0AN9hcZwM9ypmdy0 Ec8RVazZnmR5lq9y3MGrkKFqtwXDo4RTSVdWOLcbpK6oDSycLSyf1IMFE79UoPsP l5pfrdK3FAx4soS6GlaKfLo0dAwYitz/IEygxCCJGjIGTqUvrX0M78x/7Z9ouKom xjdZDE3LE4pHlKVpAsb9tLEMoi8FtnJeVwN51gNvvviO0xZkAbeXbLJ79VqSi3Hm /JKnbn7vyW+wcW2OsD/llmY7OkUYmb90lPyMfSHkY67uYL9ccA2i3L/uN5gO/qN/ 67CXaGENeDeK/Tm6Q548vi6C2LHAKrf2 -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:53 2025 by rpki-client