$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: odTA52+XEZizu48vJHczmj30arwDFFCZDc5/mGqOujI= Subject key identifier: E3:12:0B:AC:4E:E3:68:A1:32:56:D0:0A:0D:1E:9C:2B:CB:6C:7F:4B Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0B8E Signing time: Mon 16 Jun 2025 19:04:38 +0000 Manifest this update: Mon 16 Jun 2025 19:04:38 +0000 Manifest next update: Mon 23 Jun 2025 19:04:38 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: Lr7e8+V/JhiXcMW30EH6/YvYXJc/Q16v5gKc+wqGyas=) 2: 91B6D40E3ADF11F0A7390D6CC4F9AE02.roa (hash: d4z0p4h3x7tVFY8/avXde7BOff0lUsjcaR2qhErnPW0=) 3: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: n7ECEgJWD1UiJxWXsx1TUuP1fEtG6N+ZQzF/LAl7eCg=) 4: 7A35195A0A1811F0ADFE8D2DC4F9AE02.roa (hash: kzCmoo+IjhlPEf88D9nrDgIHNSfXTuGVVGf2u6U7d4w=) 5: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: BrjvMyWC8TkTRAeP4NtQF4Bi61DyGO1lu+HWAzFzf2Y=) 6: 926610D63ADF11F0A7390D6CC4F9AE02.roa (hash: dCfaICrFdOJZxnEtAaS+GJcKKbmMKGNmoIwCKcqibu0=) 7: 4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa (hash: 0+sKDOBipHkQz4nFhrXYbndaiKHptrj+HuFFMm1OOrQ=) 8: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (hash: zOSU8HWzTX62npxk0Z0KI/TANc0CI5bXMVq+SzVjDCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jun 16 19:04:38 2025 GMT Not After : Jun 23 19:04:38 2025 GMT Subject: CN=68506ac6-6d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:b6:ad:c4:eb:50:2a:e9:aa:a7:99:78:47: 5f:0c:3a:ce:ee:56:28:e6:0b:5e:1d:01:a5:a3:ba: e0:65:73:29:8c:ce:22:85:0f:8a:e6:a1:12:c8:2e: f9:8f:fb:89:3a:9c:2a:77:b1:b8:43:7d:c3:7c:b8: 2a:5a:fe:af:c3:e0:91:7b:03:db:50:ab:e4:ac:d0: e1:4b:0a:7d:b8:69:53:93:b2:72:66:ee:22:94:47: da:01:9d:c9:60:85:c3:e7:df:86:c3:2f:55:6f:92: b0:9b:9c:86:0f:a4:46:ce:28:a2:24:5d:3e:95:a5: 0f:dd:6c:aa:41:11:be:26:e2:a9:59:93:93:79:2a: c7:b2:ed:da:80:a2:62:56:bf:9b:9e:63:c3:68:96: 1a:50:6a:13:93:aa:74:a1:60:e8:19:fe:b5:a6:45: 8d:25:9b:c8:da:2b:0c:7a:3b:6e:25:ef:86:96:32: de:d8:e6:ac:40:f1:12:49:9e:f9:32:dc:78:05:fd: 85:da:a7:fa:b5:c3:af:1d:72:66:5a:13:da:c6:7e: 08:8d:cc:6e:eb:b0:f0:f4:72:f8:5c:d6:bc:62:87: 74:20:29:26:58:c4:1d:c4:0d:98:58:db:c8:1c:e9: 56:20:73:6e:92:49:cf:83:7d:1d:3d:4b:54:28:b9: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:12:0B:AC:4E:E3:68:A1:32:56:D0:0A:0D:1E:9C:2B:CB:6C:7F:4B X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:9d:2b:14:f6:de:85:a1:6a:a6:20:84:c3:00:43:ee:70: 90:7b:92:bd:36:70:d3:1a:e9:ee:4a:04:74:06:1d:72:65:6d: 9c:73:ac:98:31:78:d0:a5:7a:15:8f:71:42:23:18:31:8a:19: 00:b4:f8:a6:49:85:4f:d1:e8:30:df:56:e3:1c:d8:fe:37:9b: d5:46:4a:ae:72:18:f0:4a:ca:2c:af:b6:51:80:c2:c1:00:43: b9:07:29:4b:73:40:91:f8:74:22:ca:61:06:b3:87:56:2c:29: 81:0c:e3:cc:4b:d9:b2:18:bb:1d:74:42:3b:ee:c1:f3:f4:21: b7:db:9e:e1:d7:d0:6a:8a:96:c7:d8:3f:9a:b2:f8:de:dd:c8: bf:01:be:1c:f0:6f:6e:13:d2:12:62:8d:51:4a:fe:57:89:ef: 6a:a0:2f:47:b4:6e:9c:2f:dc:9b:10:54:30:79:7f:b6:04:d7: a4:67:76:52:ce:d1:99:c1:a6:98:74:74:ce:69:36:a2:e9:77: 16:e8:0f:e4:3d:59:58:ee:41:63:85:aa:d1:e9:37:42:ac:4a: be:91:ad:21:d7:e0:83:4b:09:cc:fa:1c:75:80:6c:4d:b6:1c: 0c:fc:7d:32:06:c3:ff:df:e2:81:68:c6:73:8a:d2:fa:a9:f8: a8:bc:95:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNjE2MTkwNDM4WhcNMjUwNjIzMTkwNDM4WjAYMRYwFAYD VQQDEw02ODUwNmFjNi02ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8q2rcTrUCrpqqeZeEdfDDrO7lYo5gteHQGlo7rgZXMpjM4ihQ+K5qESyC75 j/uJOpwqd7G4Q33DfLgqWv6vw+CRewPbUKvkrNDhSwp9uGlTk7JyZu4ilEfaAZ3J YIXD59+Gwy9Vb5Kwm5yGD6RGziiiJF0+laUP3WyqQRG+JuKpWZOTeSrHsu3agKJi Vr+bnmPDaJYaUGoTk6p0oWDoGf61pkWNJZvI2isMejtuJe+GljLe2OasQPESSZ75 Mtx4Bf2F2qf6tcOvHXJmWhPaxn4Ijcxu67Dw9HL4XNa8Yod0ICkmWMQdxA2YWNvI HOlWIHNukknPg30dPUtUKLlm+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMSC6xO 42ihMlbQCg0enCvLbH9LMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCT50rFPbehaFqpiCEwwBD7nCQe5K9NnDTGunuSgR0Bh1yZW2cc6yY MXjQpXoVj3FCIxgxihkAtPimSYVP0egw31bjHNj+N5vVRkquchjwSsosr7ZRgMLB AEO5BylLc0CR+HQiymEGs4dWLCmBDOPMS9myGLsddEI77sHz9CG3257h19BqipbH 2D+asvje3ci/Ab4c8G9uE9ISYo1RSv5Xie9qoC9HtG6cL9ybEFQweX+2BNekZ3ZS ztGZwaaYdHTOaTai6XcW6A/kPVlY7kFjharR6TdCrEq+ka0h1+CDSwnM+hx1gGxN thwM/H0yBsP/3+KBaMZzitL6qfiovJVa -----END CERTIFICATE-----Generated at Tue Jun 17 09:27:31 2025 by rpki-client