$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: 3EDRRc1KKL4+5SIG8hynX2oqGALIao5gDo26+W6WleU= Subject key identifier: 34:2A:FD:E6:C0:03:97:CE:85:6B:15:0F:A4:5B:2F:AF:26:59:01:54 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: A2 Signing time: Tue 01 Jul 2025 06:52:58 +0000 Manifest this update: Tue 01 Jul 2025 06:52:58 +0000 Manifest next update: Tue 08 Jul 2025 06:52:58 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: WvbHU1gQ2hnoeCvoMnwPUlA9jSOXkXBQPm0DtDamGb0=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: jmXb0sPHquklWucQNPULW9k7ur2PuqaFZnebmPVFmaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Jul 1 06:52:58 2025 GMT Not After : Jul 8 06:52:58 2025 GMT Subject: CN=686385ca-774a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:e9:01:a6:4a:9a:0a:71:1a:9d:2c:0f:e2: a8:73:91:85:c6:b6:4e:36:69:fb:cd:7a:f3:c0:95: 6c:e5:a7:24:6c:bb:96:ee:4e:50:3b:bc:2b:48:30: 0f:e0:84:7d:62:d0:bd:b0:a8:f8:b2:4c:b3:36:9d: 63:6f:79:ce:f5:8d:5f:eb:0c:17:6e:a5:0a:da:38: 19:ab:26:86:6b:8d:39:c5:a2:5b:fc:01:56:31:b1: 85:c4:0c:38:87:73:38:81:d5:78:79:12:e0:08:b8: e4:ba:0a:d3:b1:f2:3f:e8:e3:fb:c6:75:75:9e:6f: 17:9b:93:41:f0:71:6a:4f:0b:1b:ed:79:64:09:8f: 17:cb:a4:3c:bc:02:14:0b:9b:f0:7e:f3:31:5c:de: 25:a1:e6:da:25:45:ae:ec:bc:ec:12:5f:f4:9c:de: d6:1e:16:4d:6c:84:d2:bc:59:ab:48:2c:19:f1:38: f1:3f:a6:18:c6:ae:db:f6:95:e2:de:3b:cb:8b:8e: c8:79:92:ea:a9:0e:1e:15:c4:5c:2c:06:62:35:6b: e6:57:5f:79:86:73:97:53:04:5b:3b:63:cc:90:49: 66:97:74:ee:f9:f4:9c:f3:1a:75:db:d1:05:32:ce: f5:45:da:66:f2:79:f2:e1:12:b7:c0:78:ec:90:19: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:FD:E6:C0:03:97:CE:85:6B:15:0F:A4:5B:2F:AF:26:59:01:54 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:35:17:31:a1:9a:c1:5e:42:34:a7:93:58:20:86:1c:21:3d: 7a:29:8e:8c:6a:28:8d:d5:24:52:d0:3e:71:8d:d0:1b:29:4f: ef:53:c7:c9:4d:97:9b:79:47:13:e7:05:a4:e6:9f:23:09:ab: 76:e9:18:10:8f:e5:7d:9a:ef:74:0b:98:08:7f:49:24:12:3f: 2c:11:22:36:81:22:58:e5:73:bf:9d:49:76:64:46:eb:65:48: e8:2b:60:a5:3d:f9:4e:41:65:1e:c5:36:a3:84:c1:8a:0a:ef: c2:33:4e:77:b2:b3:f6:20:0f:9a:bd:e9:f8:83:6b:be:a8:2c: 7f:48:04:60:5c:f4:82:9b:32:76:05:b5:cb:1c:10:b2:ca:4f: 2e:41:fb:2d:98:84:c9:5b:1a:d5:67:0a:bb:79:89:02:56:ca: 78:64:5e:1a:79:3c:d5:69:ba:dd:e0:bb:7a:97:0c:da:e3:0b: d7:df:2a:11:a8:a2:62:65:fc:3e:1b:a5:15:80:ca:48:f9:c7: 30:95:b2:55:b5:a6:8a:80:d9:12:0d:67:c0:0e:16:53:f6:da: 99:ef:00:06:e7:56:56:d1:53:9a:1a:13:c5:b1:51:74:03:fc: 14:20:49:b1:23:6a:f3:2d:39:98:5b:ae:44:34:cd:96:45:7f: 2e:dc:6e:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUwNzAxMDY1MjU4WhcNMjUwNzA4MDY1MjU4WjAYMRYwFAYD VQQDEw02ODYzODVjYS03NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygDpAaZKmgpxGp0sD+Koc5GFxrZONmn7zXrzwJVs5ackbLuW7k5QO7wrSDAP 4IR9YtC9sKj4skyzNp1jb3nO9Y1f6wwXbqUK2jgZqyaGa405xaJb/AFWMbGFxAw4 h3M4gdV4eRLgCLjkugrTsfI/6OP7xnV1nm8Xm5NB8HFqTwsb7XlkCY8Xy6Q8vAIU C5vwfvMxXN4loebaJUWu7LzsEl/0nN7WHhZNbITSvFmrSCwZ8TjxP6YYxq7b9pXi 3jvLi47IeZLqqQ4eFcRcLAZiNWvmV195hnOXUwRbO2PMkElml3Tu+fSc8xp129EF Ms71Rdpm8nny4RK3wHjskBmuRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQq/ebA A5fOhWsVD6RbL68mWQFUMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgNRcxoZrBXkI0p5NYIIYcIT16KY6MaiiN1SRS0D5xjdAbKU/vU8fJ TZebeUcT5wWk5p8jCat26RgQj+V9mu90C5gIf0kkEj8sESI2gSJY5XO/nUl2ZEbr ZUjoK2ClPflOQWUexTajhMGKCu/CM053srP2IA+aven4g2u+qCx/SARgXPSCmzJ2 BbXLHBCyyk8uQfstmITJWxrVZwq7eYkCVsp4ZF4aeTzVabrd4Lt6lwza4wvX3yoR qKJiZfw+G6UVgMpI+ccwlbJVtaaKgNkSDWfADhZT9tqZ7wAG51ZW0VOaGhPFsVF0 A/wUIEmxI2rzLTmYW65ENM2WRX8u3G4l -----END CERTIFICATE-----Generated at Wed Jul 2 06:59:49 2025 by rpki-client