$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: +GbwnJC2uoDgoYmAiurNlsZ9CAbxG9HVZ1qP6BiN2gE= Subject key identifier: BD:26:71:26:A7:0E:4A:CA:C2:F4:EA:59:1C:A3:0F:F7:3A:3A:98:BB Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0C70 Signing time: Thu 12 Jun 2025 18:12:21 +0000 Manifest this update: Thu 12 Jun 2025 18:12:20 +0000 Manifest next update: Thu 19 Jun 2025 18:12:20 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: XUa1ZU/eAKaxyr17YPAu8CqgtnrzJJdLwR8Qqm+ZxKs=) 2: E8F85ED4EC5811EFA9B9C618C4F9AE02.roa (hash: ykoz29uCG/11xDnxQBhHvrkmfn5Ejy8eSvfC/XRGcV0=) 3: 47DADED8EC5211EFBF551F6DC4F9AE02.roa (hash: Ns3EqlAuypXsdC/A5rNqIcQNoK/ntkU/96rQkctaiRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Jun 12 18:12:20 2025 GMT Not After : Jun 19 18:12:20 2025 GMT Subject: CN=684b1885-539e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:ca:16:ea:d9:70:a1:a4:1e:48:04:04:79: 86:86:bf:b7:69:de:5f:3f:cd:88:79:9d:f6:cd:df: 44:56:0f:cb:3b:3c:a3:8f:f9:53:70:dd:19:c4:0f: 05:f4:e3:87:fa:57:ec:29:9a:16:c7:8c:d1:41:7c: fa:c4:9c:8c:ae:10:05:94:8f:fa:80:16:a9:14:e8: 92:a8:f5:66:95:a5:16:d7:0e:14:75:0c:ca:7c:15: 31:83:1d:6f:ad:36:2e:16:74:75:b5:73:79:63:8d: 0d:89:c3:0c:bd:f9:4c:42:85:e8:02:4f:af:19:4f: fd:cb:c0:95:cb:d6:ce:6d:3f:4c:f0:0b:c7:44:c6: 47:0d:22:77:46:dd:de:ce:d2:d8:50:1d:bf:c4:1f: 00:ef:bf:31:cd:19:78:4d:2b:40:7d:19:7a:e5:f3: 4d:67:c9:21:82:ae:4a:6a:eb:12:05:e2:3a:dc:01: 4c:f7:8d:bc:e9:3d:86:47:b5:45:e5:49:98:c8:78: aa:85:f3:53:65:99:af:6d:97:15:aa:aa:5f:9c:0a: 99:32:5f:09:cb:5c:4f:76:b9:70:63:4a:a2:ce:b5: b0:22:46:14:c8:b5:b7:9c:a0:13:b7:95:75:d3:18: 7f:df:2a:2a:87:20:c7:54:95:e9:81:af:b4:9f:34: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:26:71:26:A7:0E:4A:CA:C2:F4:EA:59:1C:A3:0F:F7:3A:3A:98:BB X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:a9:e9:28:46:38:d0:92:4b:27:2b:b0:ec:8d:2f:42:96: 56:3b:5a:00:e8:26:17:59:87:78:3c:63:1e:c5:76:d0:ba:a6: a6:b4:ca:1f:03:24:9f:39:30:75:55:c0:ad:8b:e4:fe:23:45: 62:e4:5a:93:7b:84:b8:a4:c9:14:f7:d8:a6:e4:d4:ca:65:01: 80:ee:34:fd:cb:97:eb:a3:86:2d:19:fe:5a:d0:bb:9b:43:e7: f0:dd:ef:c9:5d:fe:19:83:01:42:f9:e6:a4:c1:16:ed:cd:50: d8:fb:28:df:bf:e7:20:b8:35:29:7f:b3:33:fd:12:19:03:0b: f2:d0:19:ad:f8:31:bd:d8:9b:a9:bc:50:4e:70:97:12:58:b2: 4d:82:7a:86:c2:71:c5:58:14:26:f9:2c:82:b9:48:ea:88:f0: 53:d5:58:13:a2:c4:e4:37:25:2e:37:bd:2f:4a:3e:51:0a:ca: 1b:37:77:fa:8b:00:09:56:62:6c:c0:b6:f4:d9:48:97:e3:59: 3e:1f:83:d6:8e:e0:38:d0:b1:e9:66:a0:5a:26:2e:9d:6e:b4: 22:3c:03:7f:27:86:98:f2:d1:6c:f3:fa:80:a8:86:43:7f:a6: 43:d9:45:a6:75:b7:09:1a:11:31:0d:8e:8b:4a:85:cf:ac:fa: 4c:6f:15:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUwNjEyMTgxMjIwWhcNMjUwNjE5MTgxMjIwWjAYMRYwFAYD VQQDEw02ODRiMTg4NS01MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDjKFurZcKGkHkgEBHmGhr+3ad5fP82IeZ32zd9EVg/LOzyjj/lTcN0ZxA8F 9OOH+lfsKZoWx4zRQXz6xJyMrhAFlI/6gBapFOiSqPVmlaUW1w4UdQzKfBUxgx1v rTYuFnR1tXN5Y40NicMMvflMQoXoAk+vGU/9y8CVy9bObT9M8AvHRMZHDSJ3Rt3e ztLYUB2/xB8A778xzRl4TStAfRl65fNNZ8khgq5KausSBeI63AFM94286T2GR7VF 5UmYyHiqhfNTZZmvbZcVqqpfnAqZMl8Jy1xPdrlwY0qizrWwIkYUyLW3nKATt5V1 0xh/3yoqhyDHVJXpga+0nzQkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0mcSan DkrKwvTqWRyjD/c6Opi7MB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTbKnpKEY40JJLJyuw7I0vQpZWO1oA6CYXWYd4PGMexXbQuqamtMof AySfOTB1VcCti+T+I0Vi5FqTe4S4pMkU99im5NTKZQGA7jT9y5fro4YtGf5a0Lub Q+fw3e/JXf4ZgwFC+eakwRbtzVDY+yjfv+cguDUpf7Mz/RIZAwvy0Bmt+DG92Jup vFBOcJcSWLJNgnqGwnHFWBQm+SyCuUjqiPBT1VgTosTkNyUuN70vSj5RCsobN3f6 iwAJVmJswLb02UiX41k+H4PWjuA40LHpZqBaJi6dbrQiPAN/J4aY8tFs8/qAqIZD f6ZD2UWmdbcJGhExDY6LSoXPrPpMbxVp -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:55 2025 by rpki-client