$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: iurMJNoAIs3wHKHmT5SyLCOQ5qGVbSfPyvedDdBQptc= Subject key identifier: 6B:FC:6C:1D:3F:CC:60:03:72:25:0C:31:B6:64:8F:5A:30:65:25:4D Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 77 Signing time: Sat 21 Jun 2025 03:49:36 +0000 Manifest this update: Sat 21 Jun 2025 03:49:36 +0000 Manifest next update: Sat 28 Jun 2025 03:49:36 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: S/90Oe9m4xKDPu+M0p+l7O0wCdyX02RG1IxY7JP7nOw=) 2: D31DA3FAE55311EFA195DC68C4F9AE02.roa (hash: GYS8k9UwWROEU4CPy3zJZbjxwuE5OSbNBFEHxATP3jE=) 3: 1BF014320D5411F09D0E1A4CC4F9AE02.roa (hash: qtTlSykZWAQtBUB9Rat4VpmkVXZoqWdqikbCdbZliz0=) 4: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Jun 21 03:49:36 2025 GMT Not After : Jun 28 03:49:36 2025 GMT Subject: CN=68562bd0-70c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:f9:02:0a:6e:e8:b8:48:c8:1b:40:6b:55: 99:2a:9c:4f:b1:21:b2:83:9a:85:ed:6b:f0:4f:07: a0:01:71:7b:73:cc:d0:70:6d:17:f3:f4:d7:cb:2d: ad:55:86:41:79:bc:ee:49:ad:4d:0c:f2:06:e8:31: 8f:10:0a:68:7e:31:ab:52:85:df:31:4c:bb:83:1c: 9d:26:64:f7:78:13:35:d3:51:83:68:89:42:59:2e: c4:4a:18:d7:42:89:97:e4:ee:c3:44:9f:dd:36:96: 1c:ac:b2:5c:52:39:ed:23:3f:da:2e:43:0d:af:4a: 1b:dc:67:2f:ac:24:32:68:c8:c5:92:1a:41:b9:fb: 8d:53:78:3a:d0:b9:a6:8e:4e:b5:1b:32:45:d5:0d: ca:23:d4:64:ea:39:72:a5:d0:79:00:aa:a7:6d:b3: 54:35:3c:57:91:43:dc:d0:5b:50:19:d0:2c:f3:20: ec:a2:2a:3c:42:eb:4e:93:ec:a5:a5:3c:41:be:b4: b3:83:39:24:bf:6b:d3:ac:35:7f:02:fb:d8:57:82: 2c:3f:31:1c:13:1c:05:48:86:75:aa:f0:22:24:99: 50:25:3c:44:7b:b3:a8:c8:ea:40:61:31:a2:ea:7c: 77:4d:21:8f:7d:5b:d4:19:48:14:e2:d9:70:18:4f: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:6C:1D:3F:CC:60:03:72:25:0C:31:B6:64:8F:5A:30:65:25:4D X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:d9:66:0e:a1:03:ba:47:74:89:6e:21:df:5d:62:ba:cf: 4c:05:d0:1f:65:c5:d0:bd:0c:ec:9d:38:40:44:65:62:13:07: d8:13:d1:e8:7d:4d:5e:89:fc:1e:7e:0f:60:de:f0:77:55:48: 75:37:86:d5:3a:a6:d8:e6:e0:aa:a4:07:4e:2a:a6:91:ec:36: 2f:41:bb:42:48:6a:71:d0:cd:be:32:f3:ef:62:03:c5:e3:16: 22:8b:5e:6c:0f:0b:6f:31:df:19:5c:4d:7f:62:06:f3:c4:27: b6:13:e4:2a:d6:c3:00:66:cb:db:b0:63:59:c7:71:f9:c7:2c: 24:2e:7c:77:f7:8e:38:fd:7b:89:e3:c5:f9:7a:ac:99:90:4f: 56:47:d2:8c:69:fd:5d:8a:c2:29:7c:ba:c9:f9:ff:ab:f7:70: b5:8e:cc:fc:15:63:c8:65:25:5a:99:4d:d7:ee:4c:77:05:43: 79:54:b5:99:48:10:3c:8c:a1:88:3d:73:27:a3:20:b2:c0:3e: 9b:bc:bb:1e:3e:ec:00:94:37:9e:55:a7:72:6e:39:8b:87:c2: 47:7c:a2:1a:41:c5:26:b7:3a:5e:dc:38:07:ec:fd:9c:28:3d: 99:dd:53:6a:c4:91:ac:c3:48:e5:5e:2f:6c:d5:99:cc:03:45: b0:f3:be:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUwNjIxMDM0OTM2WhcNMjUwNjI4MDM0OTM2WjAYMRYwFAYD VQQDEw02ODU2MmJkMC03MGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1P5Agpu6LhIyBtAa1WZKpxPsSGyg5qF7WvwTwegAXF7c8zQcG0X8/TXyy2t VYZBebzuSa1NDPIG6DGPEApofjGrUoXfMUy7gxydJmT3eBM101GDaIlCWS7EShjX QomX5O7DRJ/dNpYcrLJcUjntIz/aLkMNr0ob3GcvrCQyaMjFkhpBufuNU3g60Lmm jk61GzJF1Q3KI9Rk6jlypdB5AKqnbbNUNTxXkUPc0FtQGdAs8yDsoio8QutOk+yl pTxBvrSzgzkkv2vTrDV/AvvYV4IsPzEcExwFSIZ1qvAiJJlQJTxEe7OoyOpAYTGi 6nx3TSGPfVvUGUgU4tlwGE+q9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv8bB0/ zGADciUMMbZkj1owZSVNMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWXdlmDqEDukd0iW4h311ius9MBdAfZcXQvQzsnThARGViEwfYE9Ho fU1eifwefg9g3vB3VUh1N4bVOqbY5uCqpAdOKqaR7DYvQbtCSGpx0M2+MvPvYgPF 4xYii15sDwtvMd8ZXE1/YgbzxCe2E+Qq1sMAZsvbsGNZx3H5xywkLnx39444/XuJ 48X5eqyZkE9WR9KMaf1disIpfLrJ+f+r93C1jsz8FWPIZSVamU3X7kx3BUN5VLWZ SBA8jKGIPXMnoyCywD6bvLsePuwAlDeeVadybjmLh8JHfKIaQcUmtzpe3DgH7P2c KD2Z3VNqxJGsw0jlXi9s1ZnMA0Ww874m -----END CERTIFICATE-----Generated at Sat Jun 21 19:13:26 2025 by rpki-client