$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: QGoCAJajgA0CtwewtvOOLh6hpEr9AKoE2HTfmcSZQ58= Subject key identifier: F0:0D:53:0B:16:51:37:67:8A:DB:D0:21:11:1D:B0:70:1E:B6:B0:4E Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0346 Signing time: Tue 01 Jul 2025 01:37:56 +0000 Manifest this update: Tue 01 Jul 2025 01:37:55 +0000 Manifest next update: Tue 08 Jul 2025 01:37:55 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: UIVewJv16sTf4YTrDUnyAbnMHdV8oOSuhzstkPNF7eA=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Jul 1 01:37:55 2025 GMT Not After : Jul 8 01:37:55 2025 GMT Subject: CN=68633bf4-43ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:51:ec:22:f4:7a:8f:68:fa:81:f9:a3:2e: 0c:27:4f:f7:5c:3b:ee:c5:f3:d4:83:d9:28:82:28: 10:f2:cf:63:6d:85:7e:ba:09:4e:f3:0f:cd:6b:a3: 57:20:53:cc:bb:b7:12:b6:6a:f0:8e:4e:30:b9:1c: f1:f3:d8:53:08:d6:94:b8:de:f5:a0:a8:13:09:39: c6:2f:9d:83:06:c1:3b:18:04:38:77:b2:a8:d2:a9: a7:18:48:9c:f2:37:f1:28:82:98:eb:ae:fe:8f:8e: fa:d1:b4:be:7b:ed:2b:ef:b1:73:0d:1b:83:a9:0b: 60:a3:7f:40:16:82:b6:d2:36:75:77:ee:b5:3f:43: b5:07:03:40:f1:a1:d9:4c:03:dd:04:f7:b3:5d:9c: 0c:47:eb:a8:c2:e8:d1:e7:77:57:02:ae:46:c8:97: ab:7c:f7:11:c9:17:02:7f:e3:97:10:ce:68:18:54: ab:8d:be:39:ea:a0:c4:d4:8f:70:d7:66:46:f4:48: 77:19:5f:7f:dd:e7:e6:d1:14:e2:7a:e6:63:f1:01: e3:4c:7f:9b:49:a0:df:98:f6:a9:cc:4f:b0:78:4d: b2:85:c7:55:83:ab:31:62:0b:bc:cd:ec:5f:ed:39: d9:df:d1:e0:aa:e6:10:fc:78:06:38:e4:49:b6:bf: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0D:53:0B:16:51:37:67:8A:DB:D0:21:11:1D:B0:70:1E:B6:B0:4E X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1b:89:0b:db:6b:2b:0c:ca:58:24:84:0e:fc:f8:8e:7c:44: cf:84:f3:47:d3:c5:6e:89:58:e2:e0:0d:0f:0e:dd:4d:70:42: b6:3f:7d:3f:9f:bc:29:38:fb:e8:0f:fd:03:f6:a7:b8:75:de: c1:25:b6:0c:e9:a8:e3:31:6c:b6:0c:75:57:b2:c1:94:4a:fa: c6:9d:58:03:e8:37:b6:ae:d2:5b:b7:a5:f2:2d:09:0d:fb:25: 47:91:61:22:18:6b:55:af:32:28:5c:cf:a1:09:84:ee:c4:3e: a6:36:1f:ee:04:63:85:4c:24:7d:06:02:47:05:9d:a9:51:06: 44:40:1c:22:bf:76:9e:f8:19:b5:2c:99:12:59:f9:4f:2b:a2: 61:da:51:52:31:e1:31:df:78:eb:ca:bd:d0:5c:2e:5f:d8:57: c4:98:b3:63:d8:56:26:cd:45:10:c8:2d:7b:d2:65:14:3c:69: 51:23:75:d3:f4:87:a5:67:73:1b:bc:29:a2:59:e4:f0:0c:e7: ae:59:c6:5b:c5:f0:7b:84:85:62:b1:3c:ce:d8:f7:24:c4:d8: fa:28:30:fe:07:2a:ab:46:8d:a7:87:ed:58:c4:df:b1:fa:80: 53:04:83:b7:23:65:bb:63:ed:c4:6e:b5:0a:bf:54:c9:c6:cf: 28:64:ba:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwNzAxMDEzNzU1WhcNMjUwNzA4MDEzNzU1WjAYMRYwFAYD VQQDEw02ODYzM2JmNC00M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSxR7CL0eo9o+oH5oy4MJ0/3XDvuxfPUg9kogigQ8s9jbYV+uglO8w/Na6NX IFPMu7cStmrwjk4wuRzx89hTCNaUuN71oKgTCTnGL52DBsE7GAQ4d7Ko0qmnGEic 8jfxKIKY667+j4760bS+e+0r77FzDRuDqQtgo39AFoK20jZ1d+61P0O1BwNA8aHZ TAPdBPezXZwMR+uowujR53dXAq5GyJerfPcRyRcCf+OXEM5oGFSrjb456qDE1I9w 12ZG9Eh3GV9/3efm0RTieuZj8QHjTH+bSaDfmPapzE+weE2yhcdVg6sxYgu8zexf 7TnZ39HgquYQ/HgGOORJtr+DhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPANUwsW UTdnitvQIREdsHAetrBOMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdG4kL22srDMpYJIQO/PiOfETPhPNH08VuiVji4A0PDt1NcEK2P30/ n7wpOPvoD/0D9qe4dd7BJbYM6ajjMWy2DHVXssGUSvrGnVgD6De2rtJbt6XyLQkN +yVHkWEiGGtVrzIoXM+hCYTuxD6mNh/uBGOFTCR9BgJHBZ2pUQZEQBwiv3ae+Bm1 LJkSWflPK6Jh2lFSMeEx33jryr3QXC5f2FfEmLNj2FYmzUUQyC170mUUPGlRI3XT 9IelZ3MbvCmiWeTwDOeuWcZbxfB7hIVisTzO2PckxNj6KDD+ByqrRo2nh+1YxN+x +oBTBIO3I2W7Y+3EbrUKv1TJxs8oZLpx -----END CERTIFICATE-----Generated at Tue Jul 1 06:26:30 2025 by rpki-client