$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json) Hash identifier: ij7Z36OGAjUOwSzJLxtrMNzX2avmQZEvldjU8TNO81A= Subject key identifier: 6A:5C:94:14:6A:50:15:98:34:CC:AC:AB:80:F5:83:08:F3:B9:58:44 Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft Manifest number: 0F Signing time: Tue 17 Jun 2025 06:55:10 +0000 Manifest this update: Tue 17 Jun 2025 06:55:09 +0000 Manifest next update: Tue 24 Jun 2025 06:55:09 +0000 Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: p4oZme2WnwNxh8pY+/WaE61FpFm2NwOnUSGFnhys0ro=) 2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0 Validity Not Before: Jun 17 06:55:09 2025 GMT Not After : Jun 24 06:55:09 2025 GMT Subject: CN=6851114d-28ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:c5:20:7f:26:bf:b3:18:8a:eb:4f:4c:18: 06:f5:3a:62:94:93:50:28:e4:3b:b1:a1:d7:37:f7: 55:c9:0d:77:26:87:b1:f3:6a:6a:0c:6d:a1:b8:8d: 0d:5f:24:24:6b:42:2d:ae:0e:1a:df:a1:9c:c1:c8: 97:0c:7a:77:65:d8:05:6b:38:6c:3e:9c:0f:5e:02: d6:ad:6a:a7:54:2c:cb:06:a7:3a:81:0f:9e:18:31: e5:42:00:e6:bb:dc:dc:61:93:53:6b:8e:38:1b:79: aa:2c:ae:fb:f2:13:68:6f:4a:83:8b:f2:d7:a0:ce: ad:9d:34:0a:f7:20:7b:4c:de:64:3e:26:25:cc:f6: 63:03:e5:5d:ea:ae:7d:80:63:ae:2a:69:22:1c:50: 2a:4d:f1:a2:dc:e0:e0:6e:9a:1b:82:96:a1:bf:19: f3:e9:a6:7f:1a:01:91:91:a5:8a:33:51:52:f1:97: 02:37:54:10:45:3a:2f:e7:9d:fb:71:17:90:cf:66: d9:9c:f2:e2:ff:d8:1c:81:1a:ae:16:9b:36:f5:21: c7:c1:3b:93:24:cd:df:ac:fc:18:7d:cf:4c:5a:04: bc:f7:37:dc:18:c8:fb:6b:2b:87:57:09:35:6f:13: 13:8e:6f:f5:a6:47:8b:9a:e2:f5:2b:83:b2:0d:a7: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:94:14:6A:50:15:98:34:CC:AC:AB:80:F5:83:08:F3:B9:58:44 X509v3 Authority Key Identifier: keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:cb:b3:65:fc:ee:40:1b:c5:de:c5:aa:ef:ab:63:56:65: 93:f1:4c:0a:67:42:85:cc:97:94:86:61:fe:e0:15:50:66:57: e3:fb:aa:6b:d9:e1:31:29:59:4f:1a:a0:4e:85:b6:e3:d6:6d: 65:60:06:24:34:c8:48:0b:27:0c:99:66:59:9a:ab:66:13:0d: 4d:ca:26:26:5e:55:01:61:f3:8a:1c:24:c8:a8:ea:b0:e8:16: 59:68:c0:d9:c8:44:51:68:a5:72:ad:ed:61:ef:48:5d:b7:d2: 0e:d1:5d:a6:2b:e7:e6:36:27:72:d5:ec:02:7d:19:ae:85:72: 4e:a2:85:36:31:52:16:34:74:a2:c7:a6:a3:ca:b3:42:58:43: c4:fa:6b:ec:7d:b8:39:c9:50:46:32:04:26:8f:97:b3:a6:0b: 55:66:94:dd:f0:7f:4c:53:63:4c:11:90:c1:ec:0e:35:0b:a7: c5:1e:e9:d5:4e:32:a3:2a:2b:8b:dd:9f:c5:71:f6:af:99:8a: 20:18:12:c0:16:9e:ac:5b:96:46:d3:4b:92:d5:f4:e7:42:ce: 4d:21:46:42:b6:35:b8:dc:0b:89:d6:73:70:1d:38:11:ff:b2: cf:93:a5:1a:c9:01:24:ff:b2:18:c0:af:68:c6:4d:16:34:d4: 08:37:80:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoNEQzRkM0NzA2NEY0RUExQkRDQUIyOUI5RTY1QjMxRDc0 REUyNjRFMDAeFw0yNTA2MTcwNjU1MDlaFw0yNTA2MjQwNjU1MDlaMBgxFjAUBgNV BAMTDTY4NTExMTRkLTI4ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMZMUgfya/sxiK609MGAb1OmKUk1Ao5Duxodc391XJDXcmh7HzamoMbaG4jQ1f JCRrQi2uDhrfoZzByJcMendl2AVrOGw+nA9eAtataqdULMsGpzqBD54YMeVCAOa7 3Nxhk1NrjjgbeaosrvvyE2hvSoOL8tegzq2dNAr3IHtM3mQ+JiXM9mMD5V3qrn2A Y64qaSIcUCpN8aLc4OBumhuClqG/GfPppn8aAZGRpYozUVLxlwI3VBBFOi/nnftx F5DPZtmc8uL/2ByBGq4Wmzb1IcfBO5Mkzd+s/Bh9z0xaBLz3N9wYyPtrK4dXCTVv ExOOb/WmR4ua4vUrg7INpzavAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUalyUFGpQ FZg0zKyrgPWDCPO5WEQwHwYDVR0jBBgwFoAUTT/EcGT06hvcqym55lsx103iZOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzRBRjBDOTJBMzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2Y3F5bTU1bHN4MTAzaVpP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVFRfRWNHVDA2aHZjcXltNTVsc3gxMDNpWk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzRBRjBDOTJBMzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyL1RUX0VjR1QwNmh2 Y3F5bTU1bHN4MTAzaVpPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7uy7Nl/O5AG8Xexarvq2NWZZPxTApnQoXMl5SGYf7gFVBmV+P7qmvZ 4TEpWU8aoE6FtuPWbWVgBiQ0yEgLJwyZZlmaq2YTDU3KJiZeVQFh84ocJMio6rDo FllowNnIRFFopXKt7WHvSF230g7RXaYr5+Y2J3LV7AJ9Ga6Fck6ihTYxUhY0dKLH pqPKs0JYQ8T6a+x9uDnJUEYyBCaPl7OmC1VmlN3wf0xTY0wRkMHsDjULp8Ue6dVO MqMqK4vdn8Vx9q+ZiiAYEsAWnqxblkbTS5LV9OdCzk0hRkK2NbjcC4nWc3AdOBH/ ss+TpRrJAST/shjAr2jGTRY01Ag3gGE= -----END CERTIFICATE-----Generated at Thu Jun 19 09:16:59 2025 by rpki-client