$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: ozfGiqXsH0hqDxmhBONzH9LQkv017NZTljfQ4nMNBXQ= Subject key identifier: A5:97:1D:79:40:BC:FE:A0:C8:82:31:4D:80:3F:7E:13:5F:D8:C5:77 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C64 Signing time: Sat 28 Jun 2025 18:05:45 +0000 Manifest this update: Sat 28 Jun 2025 18:05:44 +0000 Manifest next update: Sat 05 Jul 2025 18:05:44 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: YdqoE0NoS1Rf8E+x7zKCjmq498nEGqfcfEFjHUdCTnY=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Jun 28 18:05:44 2025 GMT Not After : Jul 5 18:05:44 2025 GMT Subject: CN=68602ef9-afd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:f7:96:9e:df:dc:d3:d2:fe:6d:1a:2f:3d: d4:06:ff:32:d5:c8:bc:fd:42:a2:9c:bb:bf:95:50: 9a:19:67:d4:a4:16:57:f8:93:e8:71:34:66:eb:75: 69:61:e9:d6:98:8f:03:2a:85:0a:06:10:a2:ad:84: fb:db:cb:78:59:47:f9:fe:20:29:9f:7e:98:a1:0b: 21:7e:48:1d:01:c0:55:4a:14:f1:6a:f1:ee:94:64: 0f:78:e5:f2:cb:92:2d:35:4d:e3:b8:3a:67:ca:8d: 07:58:b5:8a:2b:96:06:0b:99:4b:5a:42:d1:68:1a: 98:22:b0:f6:12:13:71:be:53:37:bf:bf:01:8a:b4: c2:80:98:ec:07:5d:0c:b8:cb:24:d1:ca:1b:a3:af: 04:c0:a2:76:db:02:4f:69:99:b6:3c:f6:de:30:c5: 20:2c:c6:48:cb:42:13:65:3b:28:f0:1f:f0:79:d2: ce:d4:82:e9:d2:1d:87:cf:de:69:ee:82:2e:08:d9: ef:00:d3:d4:fe:8c:98:20:b6:35:73:8c:41:40:7f: 7e:ad:84:e5:da:6b:33:f9:3d:73:b8:76:23:8c:64: b6:b4:b1:82:41:13:69:eb:6f:9b:9b:44:a3:14:b1: f6:08:f1:42:82:d8:6a:17:99:fe:d4:22:5d:76:44: 28:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:97:1D:79:40:BC:FE:A0:C8:82:31:4D:80:3F:7E:13:5F:D8:C5:77 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9e:e4:12:e0:25:85:e4:9b:ab:70:b2:96:30:09:ff:03:2f: ed:24:50:f2:f2:05:62:16:71:e0:4d:3c:6c:39:10:dc:b3:f4: 09:60:fc:8d:94:2a:0a:f3:d5:20:70:7d:22:57:a0:60:9a:aa: 91:e6:c5:f3:3e:d5:57:b7:5b:d5:46:bf:26:b9:8c:84:79:c2: 78:32:81:39:c5:05:79:e3:7c:46:7f:9d:4e:06:57:56:f3:38: ce:df:8c:87:17:b4:d3:79:8b:bc:f8:19:5a:08:94:91:ef:b5: 74:7e:e1:63:c3:e7:7a:17:96:ec:6e:7e:3d:b6:b5:1b:c9:14: 56:75:34:6d:7a:a1:55:8b:44:f5:6c:2f:b8:a6:23:22:4c:29: 98:4b:8c:ab:64:b7:a5:8b:dd:be:a0:06:0c:0e:33:b8:09:51: 75:1c:21:1d:08:d8:2f:fa:d2:65:93:c3:ab:ad:95:16:e4:9a: dc:ad:8e:e9:92:cd:3c:1a:42:ac:84:30:f4:f3:fa:21:37:a2: 25:05:69:18:7e:80:f4:51:f3:7d:64:59:a1:62:62:03:00:97: 5f:e1:9c:08:6f:28:7e:7a:85:11:13:3f:8e:65:50:c9:80:c9: 19:46:ff:3f:1b:66:f0:e2:de:00:81:d9:19:6a:9e:55:21:fd: c8:01:ed:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNjI4MTgwNTQ0WhcNMjUwNzA1MTgwNTQ0WjAYMRYwFAYD VQQDEw02ODYwMmVmOS1hZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5a/3lp7f3NPS/m0aLz3UBv8y1ci8/UKinLu/lVCaGWfUpBZX+JPocTRm63Vp YenWmI8DKoUKBhCirYT728t4WUf5/iApn36YoQshfkgdAcBVShTxavHulGQPeOXy y5ItNU3juDpnyo0HWLWKK5YGC5lLWkLRaBqYIrD2EhNxvlM3v78BirTCgJjsB10M uMsk0cobo68EwKJ22wJPaZm2PPbeMMUgLMZIy0ITZTso8B/wedLO1ILp0h2Hz95p 7oIuCNnvANPU/oyYILY1c4xBQH9+rYTl2msz+T1zuHYjjGS2tLGCQRNp62+bm0Sj FLH2CPFCgthqF5n+1CJddkQoowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWXHXlA vP6gyIIxTYA/fhNf2MV3MB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7nuQS4CWF5JurcLKWMAn/Ay/tJFDy8gViFnHgTTxsORDcs/QJYPyN lCoK89UgcH0iV6BgmqqR5sXzPtVXt1vVRr8muYyEecJ4MoE5xQV543xGf51OBldW 8zjO34yHF7TTeYu8+BlaCJSR77V0fuFjw+d6F5bsbn49trUbyRRWdTRteqFVi0T1 bC+4piMiTCmYS4yrZLeli92+oAYMDjO4CVF1HCEdCNgv+tJlk8OrrZUW5JrcrY7p ks08GkKshDD08/ohN6IlBWkYfoD0UfN9ZFmhYmIDAJdf4ZwIbyh+eoUREz+OZVDJ gMkZRv8/G2bw4t4AgdkZap5VIf3IAe0G -----END CERTIFICATE-----Generated at Mon Jun 30 03:35:48 2025 by rpki-client