$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: /GpTnN0guv6NhPF+Xj9zJyiYbtg/wUEKkpb5E231/Iw= Subject key identifier: A3:A6:BB:47:22:5A:F0:92:DF:CF:E0:C3:FC:5F:0C:39:FF:3F:CA:7A Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 1FE5 Signing time: Fri 04 Jul 2025 16:55:24 +0000 Manifest this update: Fri 04 Jul 2025 16:55:23 +0000 Manifest next update: Fri 11 Jul 2025 16:55:23 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: EaMiWo2oTc1rzeF61v+sFeb6CRIqL6ilYxwrWkp7eXI=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jul 4 16:55:23 2025 GMT Not After : Jul 11 16:55:23 2025 GMT Subject: CN=6868077c-f720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:fb:d9:c6:11:e6:b9:10:06:80:77:f5:93: 61:44:5b:66:7e:cc:9d:d0:80:08:ea:de:33:e3:68: 30:91:2f:28:36:51:13:dd:a6:bc:49:29:5e:73:b4: 78:34:81:c1:41:46:8c:dc:58:39:ad:b8:0c:27:82: 4c:62:a2:c0:bc:b4:76:93:a5:78:6a:67:f4:8a:83: 67:8b:40:b6:19:70:85:6a:29:4b:fe:9d:ba:31:94: 32:92:9c:3b:0b:a3:3c:c0:e7:5f:1a:2c:2a:c3:04: 3d:45:8a:8b:a4:8d:34:1e:a5:c3:ad:da:1f:8e:08: 3f:05:0d:ed:ee:5f:61:c5:fa:aa:46:9b:14:4e:e0: f9:af:4f:1e:02:61:d4:d4:95:95:b8:7d:be:b6:cc: cb:ea:22:e0:90:48:f2:6c:d1:dd:5e:8f:0e:e2:6e: bf:85:e9:ee:31:b6:ef:ea:a8:e8:d4:8b:c5:1b:98: e0:ec:e4:2f:f8:a9:07:58:e5:3e:29:b6:98:5d:74: 44:4b:f0:aa:1d:11:f6:44:b4:2e:79:3c:da:eb:87: 3b:9b:36:c4:b2:68:58:cb:9f:80:bc:a8:a6:da:9c: 5a:1c:6a:64:75:1a:38:16:c7:bf:25:38:fb:a5:10: 23:6c:0b:df:9f:b7:c9:62:fa:97:fb:df:19:65:6d: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:BB:47:22:5A:F0:92:DF:CF:E0:C3:FC:5F:0C:39:FF:3F:CA:7A X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b5:e7:27:b6:12:c7:7e:7e:43:d6:c8:22:28:38:d3:05:a0: 42:ff:24:d2:9b:6c:9a:8f:89:10:9b:7b:3d:f8:f6:01:a5:4e: 6b:27:22:5e:93:09:e5:40:f1:62:44:bd:1c:d6:c8:b0:e8:5f: 89:3d:86:f8:ab:82:00:c5:69:81:46:51:e3:fb:41:e5:47:56: 05:bc:3e:91:f9:8c:d6:71:33:b8:11:88:b6:2e:5e:87:63:15: ee:27:ed:43:d5:54:70:ef:82:77:f7:2c:0f:0b:71:6e:35:32: 4b:bf:ec:80:94:3f:d7:f7:7c:d5:14:97:28:21:38:93:6f:fd: 48:7e:96:ed:23:d4:67:5e:28:dc:7b:13:8a:41:34:91:fa:bb: fe:ea:5e:00:63:12:82:9e:ae:05:c6:bf:36:1b:e1:3c:ca:91: 82:20:78:4d:1b:5c:88:86:fe:fd:2f:2c:23:54:84:2f:88:a3: 1e:6c:d0:a8:57:d9:86:b8:5e:0c:db:b5:aa:43:fb:5c:78:17: 2a:b6:bd:1e:c8:05:59:21:4d:09:7b:45:65:03:4e:3b:a6:e0: e7:a3:79:38:77:91:9b:c9:17:26:40:fb:93:88:7e:99:9a:70: 42:9e:c1:a9:eb:b8:8f:38:b5:97:d4:91:05:b0:20:3f:2b:b0: 6a:0f:7b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwNzA0MTY1NTIzWhcNMjUwNzExMTY1NTIzWjAYMRYwFAYD VQQDEw02ODY4MDc3Yy1mNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ372cYR5rkQBoB39ZNhRFtmfsyd0IAI6t4z42gwkS8oNlET3aa8SSlec7R4 NIHBQUaM3Fg5rbgMJ4JMYqLAvLR2k6V4amf0ioNni0C2GXCFailL/p26MZQykpw7 C6M8wOdfGiwqwwQ9RYqLpI00HqXDrdofjgg/BQ3t7l9hxfqqRpsUTuD5r08eAmHU 1JWVuH2+tszL6iLgkEjybNHdXo8O4m6/henuMbbv6qjo1IvFG5jg7OQv+KkHWOU+ KbaYXXRES/CqHRH2RLQueTza64c7mzbEsmhYy5+AvKim2pxaHGpkdRo4Fse/JTj7 pRAjbAvfn7fJYvqX+98ZZW07xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOmu0ci WvCS38/gw/xfDDn/P8p6MB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjtecnthLHfn5D1sgiKDjTBaBC/yTSm2yaj4kQm3s9+PYBpU5rJyJe kwnlQPFiRL0c1siw6F+JPYb4q4IAxWmBRlHj+0HlR1YFvD6R+YzWcTO4EYi2Ll6H YxXuJ+1D1VRw74J39ywPC3FuNTJLv+yAlD/X93zVFJcoITiTb/1IfpbtI9RnXijc exOKQTSR+rv+6l4AYxKCnq4Fxr82G+E8ypGCIHhNG1yIhv79LywjVIQviKMebNCo V9mGuF4M27WqQ/tceBcqtr0eyAVZIU0Je0VlA047puDno3k4d5GbyRcmQPuTiH6Z mnBCnsGp67iPOLWX1JEFsCA/K7BqD3sr -----END CERTIFICATE-----Generated at Sat Jul 5 21:01:51 2025 by rpki-client