$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: GoUYGKh/UdfIa4YqSsD6quGDdfSexslJHlJGEffpves= Subject key identifier: 02:DB:3F:11:18:61:C1:D3:84:57:B8:88:D2:54:01:83:B2:4C:EE:1E Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C38 Signing time: Mon 30 Jun 2025 18:44:14 +0000 Manifest this update: Mon 30 Jun 2025 18:44:14 +0000 Manifest next update: Mon 07 Jul 2025 18:44:14 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: B5j2xtjipkZDWmkJbiOPlQX8OdUw1VH7zTkqQL3ftwg=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Jun 30 18:44:14 2025 GMT Not After : Jul 7 18:44:14 2025 GMT Subject: CN=6862dafe-5dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:7a:3d:af:25:33:57:c8:c2:77:cd:75:28: 0b:e3:66:a7:8f:e0:56:f1:c5:5c:59:21:8a:e1:e0: 3b:2e:7b:32:8f:02:22:57:15:a6:73:e0:8c:d3:e5: d5:c8:03:7e:cf:42:de:e0:0b:f7:82:f6:6c:ad:e7: e7:62:7d:ee:80:f8:ba:7f:34:86:a6:d8:a8:9c:ce: a9:4e:36:d2:ab:45:47:0a:99:19:76:11:f0:4c:2c: a1:44:f0:b4:87:18:15:42:8a:ea:fc:f8:88:77:b4: 46:88:fb:56:c5:a5:77:1c:25:ba:54:b8:84:a3:20: fb:5f:a0:5a:e1:26:90:84:b6:8a:a0:f0:b9:a3:dc: 04:5f:c4:85:ea:fe:28:59:28:d5:64:0c:5e:8d:68: ad:9e:6d:99:df:7e:47:f4:3b:b0:a1:2c:cc:69:3d: 56:fa:b5:f9:9a:d5:55:9b:89:f2:b3:e4:82:29:90: 00:5f:0a:5c:7e:09:e2:2c:71:10:63:00:59:2f:d7: 3c:fa:7d:d1:4b:d6:5b:25:53:2d:1b:e9:b2:65:da: 2d:fc:1e:b3:ab:f5:a2:97:d5:dd:b8:41:35:9e:e9: 1b:b2:23:e8:34:2a:63:31:c1:91:15:34:e1:70:a1: b5:0d:93:09:3b:b5:23:ed:50:00:a0:e3:08:f8:5a: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:3F:11:18:61:C1:D3:84:57:B8:88:D2:54:01:83:B2:4C:EE:1E X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:97:f7:79:e3:e0:cf:1c:dd:fd:8d:33:2a:88:0a:f5:93:cb: b4:63:f6:d2:7e:fa:d4:d6:47:9d:36:19:ec:38:cf:c1:19:63: 2e:a4:66:df:45:72:94:79:a3:c6:43:bc:bd:99:93:6b:b2:6b: 38:82:60:c2:b9:49:37:56:71:be:03:ef:40:1e:a0:1a:9a:17: 1e:64:5d:38:aa:b3:7b:52:a8:52:e6:c5:71:bf:b9:4e:ea:5b: 9f:0d:3e:a7:5b:e7:83:af:5a:d4:1f:ef:9f:48:ec:54:d0:85: 47:ca:a4:93:0c:59:29:43:49:ee:fa:26:75:c0:bc:fb:c6:ee: bb:52:e0:4d:37:26:06:4c:75:f9:ea:9c:2c:9e:27:f6:e3:a7: 60:46:81:6d:6c:0b:2e:22:bd:74:d1:99:9b:41:44:18:8e:ea: 34:27:61:15:20:8a:2d:24:40:bc:d7:d8:11:41:59:1e:19:70: 59:d0:8a:59:2e:70:7c:47:19:7f:25:0b:99:e4:e3:c5:67:55: 13:90:a8:b5:96:5f:86:7d:34:3e:8c:34:43:f6:21:f5:52:ff: e7:c0:d7:b8:62:c9:b8:93:58:8a:51:9c:7e:90:51:51:3f:c8: fd:d9:5f:2b:06:89:e5:58:23:69:0e:18:6b:26:96:be:25:a2: 18:bf:e2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNjMwMTg0NDE0WhcNMjUwNzA3MTg0NDE0WjAYMRYwFAYD VQQDEw02ODYyZGFmZS01ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/Z6Pa8lM1fIwnfNdSgL42anj+BW8cVcWSGK4eA7LnsyjwIiVxWmc+CM0+XV yAN+z0Le4Av3gvZsrefnYn3ugPi6fzSGptionM6pTjbSq0VHCpkZdhHwTCyhRPC0 hxgVQorq/PiId7RGiPtWxaV3HCW6VLiEoyD7X6Ba4SaQhLaKoPC5o9wEX8SF6v4o WSjVZAxejWitnm2Z335H9DuwoSzMaT1W+rX5mtVVm4nys+SCKZAAXwpcfgniLHEQ YwBZL9c8+n3RS9ZbJVMtG+myZdot/B6zq/Wil9XduEE1nukbsiPoNCpjMcGRFTTh cKG1DZMJO7Uj7VAAoOMI+FoLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALbPxEY YcHThFe4iNJUAYOyTO4eMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMl/d54+DPHN39jTMqiAr1k8u0Y/bSfvrU1kedNhnsOM/BGWMupGbf RXKUeaPGQ7y9mZNrsms4gmDCuUk3VnG+A+9AHqAamhceZF04qrN7UqhS5sVxv7lO 6lufDT6nW+eDr1rUH++fSOxU0IVHyqSTDFkpQ0nu+iZ1wLz7xu67UuBNNyYGTHX5 6pwsnif246dgRoFtbAsuIr100ZmbQUQYjuo0J2EVIIotJEC819gRQVkeGXBZ0IpZ LnB8Rxl/JQuZ5OPFZ1UTkKi1ll+GfTQ+jDRD9iH1Uv/nwNe4Ysm4k1iKUZx+kFFR P8j92V8rBonlWCNpDhhrJpa+JaIYv+JN -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:32 2025 by rpki-client