$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: dTY+O+NH08r3YlCuOwKCGjOvx342yuVBZHOMCoi7GY0= Subject key identifier: 33:40:78:2D:E9:4A:E1:26:7A:85:5D:C6:37:BE:2F:40:1F:3F:2A:BE Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0BC2 Signing time: Fri 08 Aug 2025 03:51:27 +0000 Manifest this update: Fri 08 Aug 2025 03:51:27 +0000 Manifest next update: Fri 15 Aug 2025 03:51:27 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: cwVTSPubmgvMEnOJE6x/FFFAza0lGa/tBCtA9WF6Hgw=) 2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=) 3: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=) 4: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: U0UOsn2/X5DeOGEGCah3NBej8ExoikxrU8EoBu6Tnyg=) 5: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: BAnbwoxPeN/akyQ4VZTfLI7vBW7dc5W2AtRL8aSNk8w=) 6: B43088B457F311F099129754C4F9AE02.roa (hash: C5OFRKDzkFW24B9vlFa8RumKtNGm9zWYC6fIbYgCNks=) 7: AEEADAC8608911F09ACC0566C4F9AE02.roa (hash: tEr4g5R12h+ldhJP/gdNS212uGl50Z7Cv3zyiy2+0GA=) 8: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: QUdZc8sayDCRZbnJ5FbRX8LCLMgHbtBh8Rf8sW0KF+4=) 9: 3C35A3F86B7B11F083D73127C4F9AE02.roa (hash: 9qNy5zVh8UXs98buBEPxj4R5vBqOAXtHLxU85YpvOEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 8 03:51:27 2025 GMT Not After : Aug 15 03:51:27 2025 GMT Subject: CN=6895743f-7f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:30:93:e1:3d:e9:95:84:f2:5f:d4:d7:29: 18:0f:b8:06:8c:d0:d0:c2:fa:1f:1b:f2:f9:25:d1: 88:e5:fb:54:f5:fa:1b:e8:1a:7b:a4:bd:8f:cb:d1: 7d:26:3c:88:ee:87:f6:25:f8:27:69:6d:0d:5a:64: 74:34:9d:ac:db:75:17:77:2e:f9:3f:1c:e5:4b:1b: d4:f5:73:a1:bd:80:8a:f2:0c:96:d1:91:a4:ff:ae: c1:ff:0f:0f:74:7d:cc:b7:9a:43:8e:1f:c7:e1:52: f3:c9:65:52:ea:46:66:4a:09:eb:1b:bb:a8:4b:fe: fc:54:8a:b5:d6:db:6c:25:24:9f:ab:33:41:b4:af: d1:37:62:de:8d:dc:1c:1e:2c:b3:65:33:04:e2:00: 13:d9:4c:dd:9f:df:d4:e7:dd:83:f7:37:44:fc:0b: 7b:76:09:3e:2c:d7:2d:0e:a5:b5:a3:fd:b1:c6:31: e9:28:04:2c:9d:ec:c3:97:bf:ba:20:e3:16:ea:63: a9:af:01:29:f7:ca:20:5d:76:61:7c:b3:e2:29:63: 96:d5:23:09:c7:e5:dd:4b:ab:74:0b:48:8a:25:27: 21:d8:68:70:f2:cd:73:bf:b6:e7:c6:b3:4e:ab:40: d6:65:74:71:4b:89:d2:b6:c1:62:5f:ba:70:25:a5: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:78:2D:E9:4A:E1:26:7A:85:5D:C6:37:BE:2F:40:1F:3F:2A:BE X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2c:4a:b2:4d:ca:60:56:43:92:18:08:3c:3e:d5:55:bf:e3: 06:9b:d7:37:3e:37:45:16:ed:b8:66:05:df:5a:80:5a:93:73: 9d:34:d5:4d:80:ba:0c:ac:de:55:32:8b:84:bc:98:3c:36:94: e6:e9:9c:ef:f6:28:6b:a1:ab:e3:3c:07:81:1f:b4:30:34:3c: ad:ef:b0:04:b3:c5:73:a6:03:4d:1b:ca:99:f2:58:2a:67:c6: 73:c2:1d:ac:a6:96:50:98:09:ed:5d:ad:e5:a6:d6:ac:fb:14: 70:bb:6e:a0:4d:72:34:45:0a:74:3e:fe:cb:de:cd:b0:69:bb: 0d:79:16:aa:b3:cd:cc:e6:1e:da:3d:aa:2f:33:87:69:41:ae: a2:ca:98:13:96:d4:b1:ec:7a:3d:b6:4b:31:39:ac:96:7f:bd: b9:53:c8:87:3a:60:f4:80:79:c8:ad:33:7d:6b:ba:e0:dd:f0: 12:d0:db:56:f5:8b:20:76:a6:52:f4:f7:f7:c1:fb:7d:40:9b: 1a:e7:60:f9:d8:1f:69:71:51:e1:7f:b9:9a:a9:b1:69:64:c0: 32:b0:d3:e9:b4:eb:97:cd:d0:da:d2:48:47:ea:4b:84:1f:b8: 2d:0f:74:a2:9a:dc:47:af:40:99:f8:e1:ac:f2:c3:10:64:f5: 2c:04:ff:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwODA4MDM1MTI3WhcNMjUwODE1MDM1MTI3WjAYMRYwFAYD VQQDEw02ODk1NzQzZi03ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAgwk+E96ZWE8l/U1ykYD7gGjNDQwvofG/L5JdGI5ftU9fob6Bp7pL2Py9F9 JjyI7of2JfgnaW0NWmR0NJ2s23UXdy75PxzlSxvU9XOhvYCK8gyW0ZGk/67B/w8P dH3Mt5pDjh/H4VLzyWVS6kZmSgnrG7uoS/78VIq11ttsJSSfqzNBtK/RN2Lejdwc HiyzZTME4gAT2Uzdn9/U592D9zdE/At7dgk+LNctDqW1o/2xxjHpKAQsnezDl7+6 IOMW6mOprwEp98ogXXZhfLPiKWOW1SMJx+XdS6t0C0iKJSch2Ghw8s1zv7bnxrNO q0DWZXRxS4nStsFiX7pwJaWgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNAeC3p SuEmeoVdxje+L0AfPyq+MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWLEqyTcpgVkOSGAg8PtVVv+MGm9c3PjdFFu24ZgXfWoBak3OdNNVN gLoMrN5VMouEvJg8NpTm6Zzv9ihroavjPAeBH7QwNDyt77AEs8VzpgNNG8qZ8lgq Z8Zzwh2sppZQmAntXa3lptas+xRwu26gTXI0RQp0Pv7L3s2wabsNeRaqs83M5h7a PaovM4dpQa6iypgTltSx7Ho9tksxOayWf725U8iHOmD0gHnIrTN9a7rg3fAS0NtW 9YsgdqZS9Pf3wft9QJsa52D52B9pcVHhf7maqbFpZMAysNPptOuXzdDa0khH6kuE H7gtD3SimtxHr0CZ+OGs8sMQZPUsBP++ -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:47 2025 by rpki-client