$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: FAQ6atzOw0s77P4cLd8eC0xaR1+hzrvaDqgyWNu5WrU= Subject key identifier: 22:58:9B:69:D9:DF:65:4C:38:34:B4:67:B8:7A:25:34:0D:EB:D6:D8 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 039F Signing time: Sun 29 Jun 2025 00:20:01 +0000 Manifest this update: Sun 29 Jun 2025 00:20:00 +0000 Manifest next update: Sun 06 Jul 2025 00:20:00 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: 5oqeLzG7DcV1z1uXgP/g1XqAYgkgmx+4J84LoyzE114=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Jun 29 00:20:00 2025 GMT Not After : Jul 6 00:20:00 2025 GMT Subject: CN=686086b1-62ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:3e:6c:3d:5c:8a:8e:48:c6:19:77:d3:84: aa:b4:18:b5:0d:87:a9:02:44:9e:91:be:6d:04:b0: 82:b7:3b:75:b6:4c:b8:79:3d:5a:a4:5f:2e:35:8a: d2:9b:f1:65:e5:51:f8:e5:c6:e6:7c:f7:7a:3b:de: 29:d1:18:af:a5:9d:15:2f:1c:10:c3:56:8a:6d:7a: b7:0c:bb:43:af:d0:5a:2d:94:73:96:f5:ef:40:c1: bc:22:13:5a:ef:81:44:08:ec:1c:f3:dc:5c:6a:89: cb:ce:e2:81:13:31:4c:9a:dc:42:d4:d2:06:f3:97: 68:cb:8c:18:ab:36:42:34:e1:b4:96:19:92:26:05: ed:1c:e2:ec:0f:4e:76:87:7e:a2:3d:4e:85:5e:a8: 3a:9f:27:85:35:b6:48:c7:09:0d:a7:c6:28:0e:76: 41:b3:66:34:ab:cb:e6:42:da:1a:e9:b7:4e:bb:d3: de:16:18:4c:1b:16:7d:47:a6:91:3f:e2:b8:86:3d: 2a:61:d9:e0:45:10:bd:a1:fb:ca:50:e0:e2:78:57: 6c:e4:13:3d:a0:b4:1e:24:04:0b:3c:5e:d3:8b:b5: 71:49:f1:91:3e:90:5d:c3:ac:69:6e:1a:63:ff:ed: df:d6:13:b1:b6:63:07:3f:44:0f:6a:26:cf:38:b7: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:9B:69:D9:DF:65:4C:38:34:B4:67:B8:7A:25:34:0D:EB:D6:D8 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f6:6f:d7:94:3d:22:19:5a:bc:f3:08:89:72:76:1b:2e:df: 51:6b:ea:59:78:f1:45:ee:8a:08:44:99:03:15:00:e4:35:7e: fc:28:d4:6d:fc:68:88:59:bb:05:86:c5:2c:1e:c2:56:e0:5c: 91:44:c5:d0:84:5f:44:11:e0:46:9b:5a:35:db:0d:e9:99:5e: f8:ee:6b:2f:8f:8e:57:3f:f8:0e:5f:ce:e6:5e:c7:3f:cf:90: 60:a8:27:93:5e:e1:86:1e:82:52:1c:6a:92:cb:04:39:3e:82: 66:32:85:65:11:72:a0:bf:22:09:3a:da:cb:41:b0:96:08:43: 9f:cf:4a:54:92:15:2d:2f:3e:59:fb:9c:14:00:af:a4:e2:2b: 13:bc:d9:fb:82:b7:98:ab:25:b4:ca:32:9c:25:bd:b2:fb:d1: ed:04:2c:65:a4:70:be:f4:ef:22:04:d7:69:5d:c6:a3:9e:ab: a9:e6:08:da:ae:c5:f8:80:40:02:a0:f1:25:6f:64:a1:92:52: cd:0e:08:9d:cf:53:9a:00:61:71:56:fc:c8:f9:0e:89:8a:fe: d6:06:bd:ef:66:cd:3f:bf:ec:e1:8c:6e:d6:bc:f3:17:f9:ac: d3:78:1f:04:30:c8:91:ca:27:ad:94:96:c7:27:57:b8:80:a0: df:5c:f7:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUwNjI5MDAyMDAwWhcNMjUwNzA2MDAyMDAwWjAYMRYwFAYD VQQDEw02ODYwODZiMS02MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV4+bD1cio5Ixhl304SqtBi1DYepAkSekb5tBLCCtzt1tky4eT1apF8uNYrS m/Fl5VH45cbmfPd6O94p0RivpZ0VLxwQw1aKbXq3DLtDr9BaLZRzlvXvQMG8IhNa 74FECOwc89xcaonLzuKBEzFMmtxC1NIG85doy4wYqzZCNOG0lhmSJgXtHOLsD052 h36iPU6FXqg6nyeFNbZIxwkNp8YoDnZBs2Y0q8vmQtoa6bdOu9PeFhhMGxZ9R6aR P+K4hj0qYdngRRC9ofvKUODieFds5BM9oLQeJAQLPF7Ti7VxSfGRPpBdw6xpbhpj /+3f1hOxtmMHP0QPaibPOLfpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJYm2nZ 32VMODS0Z7h6JTQN69bYMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH9m/XlD0iGVq88wiJcnYbLt9Ra+pZePFF7ooIRJkDFQDkNX78KNRt /GiIWbsFhsUsHsJW4FyRRMXQhF9EEeBGm1o12w3pmV747msvj45XP/gOX87mXsc/ z5BgqCeTXuGGHoJSHGqSywQ5PoJmMoVlEXKgvyIJOtrLQbCWCEOfz0pUkhUtLz5Z +5wUAK+k4isTvNn7greYqyW0yjKcJb2y+9HtBCxlpHC+9O8iBNdpXcajnqup5gja rsX4gEACoPElb2ShklLNDgidz1OaAGFxVvzI+Q6Jiv7WBr3vZs0/v+zhjG7WvPMX +azTeB8EMMiRyietlJbHJ1e4gKDfXPcy -----END CERTIFICATE-----Generated at Mon Jun 30 03:21:24 2025 by rpki-client