$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: l+jtz7Ivzoyq8z14HBbfjP2qVPwHl/TNIUNzAHowthQ= Subject key identifier: A8:78:B4:6B:7F:50:B1:19:20:EA:C4:33:CE:1A:9B:CD:BD:AC:AD:3F Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01DC Signing time: Fri 04 Jul 2025 16:37:23 +0000 Manifest this update: Fri 04 Jul 2025 16:37:22 +0000 Manifest next update: Fri 11 Jul 2025 16:37:22 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: KBD36d0sM83GHqpi/y9wQ3AmM+jAhmeD9zz+kqtYLA4=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jul 4 16:37:22 2025 GMT Not After : Jul 11 16:37:22 2025 GMT Subject: CN=68680342-9427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ee:b1:95:c6:ac:f4:56:13:bb:f7:4b:ec:33: ec:05:07:a7:91:83:12:67:e8:19:ca:74:b5:59:83: 9b:f1:e1:78:f7:c6:63:9c:ad:7d:91:ae:f7:6c:e4: 46:44:4e:c6:15:05:32:77:b6:7b:6d:c5:e6:2f:2e: d8:41:9a:be:f2:c8:62:60:bc:e5:5d:3a:12:53:05: 7a:73:4c:5a:ce:a3:b4:6d:11:b0:b5:85:a0:77:c4: 5e:da:66:9a:60:19:97:d5:99:0d:a6:41:9a:29:b8: c3:ba:32:a6:df:2a:a7:8e:b3:91:f7:b3:0e:32:70: e7:9f:a3:96:89:14:ea:85:3d:21:9f:5f:09:67:9c: 58:a0:b8:6f:c0:25:0b:08:cd:30:29:e0:ad:b7:2d: 28:f7:8d:c9:bc:1d:0e:4a:49:fb:ea:07:bd:f6:52: df:f5:ee:99:ac:42:7f:3c:a7:6e:ce:79:83:7d:5e: 10:8d:a6:0f:3e:ae:7f:91:6f:d5:22:b9:df:ca:9b: 56:60:6a:c4:e9:9a:24:e9:c4:fc:ee:06:85:7b:16: 2c:eb:9a:01:a0:db:35:f1:bb:9d:5e:81:de:48:46: cb:6d:de:46:5b:da:27:ce:17:3a:b3:ad:df:35:9c: 64:fb:a7:32:d7:1a:d0:5f:a3:75:9a:9b:15:ba:43: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:B4:6B:7F:50:B1:19:20:EA:C4:33:CE:1A:9B:CD:BD:AC:AD:3F X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:ed:85:83:0a:7b:21:a3:f6:3d:af:34:c0:32:ff:7f:ee: fc:c0:95:a6:2d:19:e1:3b:17:1c:c1:e2:7d:64:87:da:f7:3f: f8:20:fd:2f:13:b8:11:02:44:73:f8:2d:c9:5e:66:fb:27:31: 86:ad:b8:60:1f:a2:ab:a5:9a:56:46:d0:51:92:07:ac:a1:f0: 2f:1e:ca:a5:77:78:bc:9a:34:45:5e:fe:6c:f9:63:68:53:b9: a6:47:c9:76:6b:ee:a2:07:d8:d1:7c:b9:bb:15:ef:cc:a1:79: 38:dd:bf:f6:82:cb:d3:fe:6d:71:0c:71:9a:4f:a4:4b:c1:ce: 50:86:b6:77:e2:8c:c7:40:fe:d6:23:6a:14:a3:13:eb:e3:f8: 98:d6:6f:d7:a7:b8:00:94:11:ce:dd:d7:8c:34:2f:fa:3d:c5: 4a:11:85:29:3b:be:49:dc:1c:e6:f8:00:fa:ca:67:05:c4:58: ee:1f:fc:e1:91:4a:f3:d8:e3:a9:4b:a1:5f:67:59:83:5a:c8: 8c:4d:df:8e:1a:1f:b0:91:0f:0e:42:07:4b:7c:dc:71:be:7c: 38:a0:26:b9:f6:bc:cf:68:a3:d5:22:dc:2e:c5:d6:12:a7:61: c6:e3:b2:89:88:af:9e:40:0f:6d:08:2a:6d:7f:2d:83:25:15: 35:29:81:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwNzA0MTYzNzIyWhcNMjUwNzExMTYzNzIyWjAYMRYwFAYD VQQDEw02ODY4MDM0Mi05NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+6xlcas9FYTu/dL7DPsBQenkYMSZ+gZynS1WYOb8eF498ZjnK19ka73bORG RE7GFQUyd7Z7bcXmLy7YQZq+8shiYLzlXToSUwV6c0xazqO0bRGwtYWgd8Re2maa YBmX1ZkNpkGaKbjDujKm3yqnjrOR97MOMnDnn6OWiRTqhT0hn18JZ5xYoLhvwCUL CM0wKeCtty0o943JvB0OSkn76ge99lLf9e6ZrEJ/PKduznmDfV4QjaYPPq5/kW/V IrnfyptWYGrE6Zok6cT87gaFexYs65oBoNs18budXoHeSEbLbd5GW9onzhc6s63f NZxk+6cy1xrQX6N1mpsVukO3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh4tGt/ ULEZIOrEM84am829rK0/MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZE+2Fgwp7IaP2Pa80wDL/f+78wJWmLRnhOxccweJ9ZIfa9z/4IP0v E7gRAkRz+C3JXmb7JzGGrbhgH6KrpZpWRtBRkgesofAvHsqld3i8mjRFXv5s+WNo U7mmR8l2a+6iB9jRfLm7Fe/MoXk43b/2gsvT/m1xDHGaT6RLwc5QhrZ34ozHQP7W I2oUoxPr4/iY1m/Xp7gAlBHO3deMNC/6PcVKEYUpO75J3Bzm+AD6ymcFxFjuH/zh kUrz2OOpS6FfZ1mDWsiMTd+OGh+wkQ8OQgdLfNxxvnw4oCa59rzPaKPVItwuxdYS p2HG47KJiK+eQA9tCCptfy2DJRU1KYEU -----END CERTIFICATE-----Generated at Fri Jul 4 22:17:45 2025 by rpki-client