$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: eV/fto+79Jmi6eUkFxOFUIKuyVPtEEerubLEUWuQ5co= Subject key identifier: F0:29:30:2E:FD:D4:43:4F:66:1A:14:8D:E9:E9:F0:4B:14:68:54:86 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: C7 Signing time: Sun 15 Jun 2025 04:55:14 +0000 Manifest this update: Sun 15 Jun 2025 04:55:14 +0000 Manifest next update: Sun 22 Jun 2025 04:55:14 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: z1hhlJIypR1tYJ0qhl2d3a8Jhb8pfwpaIwJo9oX3VzU=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: Eb8AfFxkY2lunIzmPfp9ZyHAYk+RBb0a8BG4v3YCxDc=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: Bg47WQyQqPO6vhS9f39oGO32kv0x8D/332r6YxTMVPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Jun 15 04:55:14 2025 GMT Not After : Jun 22 04:55:14 2025 GMT Subject: CN=684e5232-fb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:d9:5e:65:89:32:40:b6:1b:66:06:c6:d5: 50:ad:f8:80:79:81:79:d8:c1:16:e2:aa:fd:6a:b0: 9a:e2:a5:13:01:9a:d3:c8:86:c4:d9:a9:03:cd:0b: 60:14:ad:66:94:56:53:73:53:67:56:05:f2:14:c2: eb:2e:1d:4d:3b:67:6c:de:4f:5d:2e:62:ea:ff:6f: 3f:ab:3c:bc:77:aa:78:12:0b:79:f7:68:a3:b1:4d: fa:9d:01:0e:74:ee:4d:ab:b8:76:bb:d3:0c:b4:3e: 9b:b5:38:55:7d:26:64:bb:9d:b6:55:54:9c:7e:00: 5b:fd:03:f2:cc:bd:f2:e7:f4:dc:1b:2e:1f:b6:82: d2:6b:18:b7:ee:76:fa:59:22:4d:a0:37:81:15:3b: 51:b4:37:ef:da:9a:08:14:70:98:28:ce:b9:07:3f: 8b:e6:fa:50:4b:10:3d:d8:80:a6:4b:90:83:0c:98: 72:c1:ea:eb:64:19:1b:5c:21:6a:d6:e2:ae:c3:9c: 8a:2b:81:7a:75:dc:b6:81:28:b9:27:d7:c4:36:4e: d7:f2:6a:60:be:6a:70:73:7f:4c:59:19:60:67:f3: 3c:80:aa:df:b5:bc:78:65:d8:6b:1f:a5:91:a3:4b: 6d:65:91:2a:7d:33:20:a0:89:96:f2:0a:f9:e0:bf: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:30:2E:FD:D4:43:4F:66:1A:14:8D:E9:E9:F0:4B:14:68:54:86 X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ca:d5:12:6f:dc:75:41:53:73:f3:5c:46:f8:90:4d:a2:b5: fd:40:f0:fd:f0:cd:b6:16:df:05:8c:ce:53:f5:ab:6e:e5:2a: fb:d6:2e:51:28:e5:0d:84:d0:d1:fb:df:df:57:fa:19:2d:2d: b0:84:d1:0b:31:3d:11:10:c6:fd:4a:6c:03:a5:60:e0:2c:38: 83:1c:c8:a6:d8:ce:43:b1:53:90:c3:3d:fc:54:78:69:75:2a: a0:f4:67:b0:db:4a:9c:a2:22:bc:7a:5d:89:55:21:bb:60:a0: a8:77:1b:71:8c:2b:85:82:b2:e3:00:8a:fb:1f:f8:2b:3f:b7: 0c:7b:f7:b3:58:e5:f1:24:7f:ed:27:93:f9:23:26:65:0a:eb: 2d:f6:dc:10:57:5e:49:30:4a:b1:34:88:ed:a3:4d:0d:4a:85: aa:53:5c:b6:68:96:d0:82:a9:d8:70:d4:87:d5:db:af:30:c6: 35:dc:a1:12:54:4b:dc:f9:dd:e2:0b:48:ab:6e:bf:6f:48:ac: e8:5c:ae:bc:ee:f6:ba:43:95:28:c7:09:6e:24:8f:08:f6:25: ef:63:95:40:32:0c:89:63:b7:41:27:ca:56:cb:d8:12:f3:12: 9a:b2:5b:26:66:3d:46:16:e9:45:73:01:39:12:63:3a:d9:f8: b5:1e:1f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUwNjE1MDQ1NTE0WhcNMjUwNjIyMDQ1NTE0WjAYMRYwFAYD VQQDEw02ODRlNTIzMi1mYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZjZXmWJMkC2G2YGxtVQrfiAeYF52MEW4qr9arCa4qUTAZrTyIbE2akDzQtg FK1mlFZTc1NnVgXyFMLrLh1NO2ds3k9dLmLq/28/qzy8d6p4Egt592ijsU36nQEO dO5Nq7h2u9MMtD6btThVfSZku522VVScfgBb/QPyzL3y5/TcGy4ftoLSaxi37nb6 WSJNoDeBFTtRtDfv2poIFHCYKM65Bz+L5vpQSxA92ICmS5CDDJhywerrZBkbXCFq 1uKuw5yKK4F6ddy2gSi5J9fENk7X8mpgvmpwc39MWRlgZ/M8gKrftbx4ZdhrH6WR o0ttZZEqfTMgoImW8gr54L/CTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPApMC79 1ENPZhoUjenp8EsUaFSGMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClytUSb9x1QVNz81xG+JBNorX9QPD98M22Ft8FjM5T9atu5Sr71i5R KOUNhNDR+9/fV/oZLS2whNELMT0REMb9SmwDpWDgLDiDHMim2M5DsVOQwz38VHhp dSqg9Gew20qcoiK8el2JVSG7YKCodxtxjCuFgrLjAIr7H/grP7cMe/ezWOXxJH/t J5P5IyZlCust9twQV15JMEqxNIjto00NSoWqU1y2aJbQgqnYcNSH1duvMMY13KES VEvc+d3iC0irbr9vSKzoXK687va6Q5UoxwluJI8I9iXvY5VAMgyJY7dBJ8pWy9gS 8xKaslsmZj1GFulFcwE5EmM62fi1Hh/n -----END CERTIFICATE-----Generated at Sun Jun 15 23:50:28 2025 by rpki-client