$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: zGpH4Z36CkqdGsiUCzvUMEbbjDYjpkVe2U4ZlIUlQPo= Subject key identifier: 5F:A6:33:B6:C4:BE:94:61:32:93:64:D2:BB:92:37:0E:AC:A2:63:D4 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: A2 Signing time: Thu 07 Aug 2025 06:57:21 +0000 Manifest this update: Thu 07 Aug 2025 06:57:21 +0000 Manifest next update: Thu 14 Aug 2025 06:57:20 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: cj/qIYoS8RiiAkcLg9eWm/NGyQkmXEywODm7kRPTbzU=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: Nw7bdEXIt94l0l1M2JoUcNpjGgfJnBtSbrpDec58/34=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: DTme312dtWhjs1JFg94y153qtB+lMbeMxpbcIu8vIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Aug 7 06:57:21 2025 GMT Not After : Aug 14 06:57:20 2025 GMT Subject: CN=68944e51-9e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:65:eb:8e:cb:88:15:00:cf:5e:37:10:00: 53:e0:4c:2f:70:aa:82:f5:d6:21:6b:9b:fe:3f:d1: 8f:75:33:a9:06:c5:60:d1:14:e0:f2:1b:ad:65:01: fe:13:b1:18:dc:af:ec:5c:c8:ba:6b:ee:87:a0:62: 29:47:4b:b0:0d:fd:52:1e:97:e8:62:03:5b:ed:17: 2d:9a:b1:f6:12:da:8c:4f:43:fb:ba:04:a2:4a:c2: f3:bb:fb:95:72:fe:2b:64:96:6c:32:0f:dc:ee:21: 1b:71:f1:cb:3d:58:8f:da:7b:9f:78:96:e4:61:4c: 85:46:6c:ce:2f:30:fc:7a:d1:7f:94:ba:ab:f3:79: b6:e8:c5:de:70:27:06:48:87:08:2a:f5:b5:b1:21: a9:24:02:02:33:a5:a1:de:d2:78:af:57:6d:c4:75: d7:b9:52:16:fe:39:99:60:56:7d:f8:2a:29:27:be: 39:f5:6e:5f:08:1a:50:9b:44:ba:b4:ef:ca:c5:e4: 21:10:e2:f3:48:13:27:82:36:9d:8e:ef:59:51:e1: dc:d1:28:cb:a1:6f:c1:e7:9b:f9:b0:b3:0c:3d:f8: 21:45:db:39:71:a4:97:59:f0:d8:d0:68:e8:e0:d0: 91:5e:9f:4f:97:4e:d7:d2:1b:d5:47:38:9a:9f:74: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:33:B6:C4:BE:94:61:32:93:64:D2:BB:92:37:0E:AC:A2:63:D4 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9b:b9:26:ca:1f:3d:23:07:9d:b2:9e:92:a9:1a:48:90:35: ac:ed:c5:5c:2a:8a:8e:24:cd:bf:65:17:0f:9e:4d:89:36:91: e9:52:7f:e3:e1:0f:8c:c3:5c:43:3b:63:59:26:73:29:76:7a: 21:e9:2a:8e:e5:ca:10:37:6e:df:da:c8:79:49:95:c4:f5:e1: 66:29:a0:d1:36:ff:f5:1c:28:a7:af:81:ec:ee:12:70:27:4d: 19:b3:05:b5:84:25:c6:92:6c:79:b2:0b:9e:02:a5:8f:b4:36: 80:e3:8f:d3:7a:88:8d:03:41:38:9f:8b:33:3f:b2:5a:0f:f2: 27:b0:ed:92:fa:7e:44:98:13:1a:74:47:2f:8a:ed:93:12:ad: 04:bf:e9:28:50:a9:83:07:c7:e8:90:81:e6:59:63:49:b5:bd: 9c:6f:a0:60:e0:e3:2e:f4:21:25:51:40:3b:c3:81:00:53:3d: ae:a0:22:73:4a:67:0b:01:d4:b6:4f:1c:da:9c:cd:1d:0b:5a: 96:e6:34:1b:ec:e2:53:c9:0f:d8:de:4b:be:60:24:ce:e2:d4: 7f:e8:36:7d:ac:2a:86:31:b5:29:4e:02:d8:7d:8a:48:14:08: ae:81:7d:2f:1c:37:6c:03:fb:a5:8d:10:db:14:d0:87:be:52: 2a:e8:c9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwODA3MDY1NzIxWhcNMjUwODE0MDY1NzIwWjAYMRYwFAYD VQQDEw02ODk0NGU1MS05ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupFl647LiBUAz143EABT4EwvcKqC9dYha5v+P9GPdTOpBsVg0RTg8hutZQH+ E7EY3K/sXMi6a+6HoGIpR0uwDf1SHpfoYgNb7RctmrH2EtqMT0P7ugSiSsLzu/uV cv4rZJZsMg/c7iEbcfHLPViP2nufeJbkYUyFRmzOLzD8etF/lLqr83m26MXecCcG SIcIKvW1sSGpJAICM6Wh3tJ4r1dtxHXXuVIW/jmZYFZ9+CopJ7459W5fCBpQm0S6 tO/KxeQhEOLzSBMngjadju9ZUeHc0SjLoW/B55v5sLMMPfghRds5caSXWfDY0Gjo 4NCRXp9Pl07X0hvVRzian3TMywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+mM7bE vpRhMpNk0ruSNw6somPUMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTm7kmyh89Iwedsp6SqRpIkDWs7cVcKoqOJM2/ZRcPnk2JNpHpUn/j 4Q+Mw1xDO2NZJnMpdnoh6SqO5coQN27f2sh5SZXE9eFmKaDRNv/1HCinr4Hs7hJw J00ZswW1hCXGkmx5sgueAqWPtDaA44/TeoiNA0E4n4szP7JaD/InsO2S+n5EmBMa dEcviu2TEq0Ev+koUKmDB8fokIHmWWNJtb2cb6Bg4OMu9CElUUA7w4EAUz2uoCJz SmcLAdS2TxzanM0dC1qW5jQb7OJTyQ/Y3ku+YCTO4tR/6DZ9rCqGMbUpTgLYfYpI FAiugX0vHDdsA/uljRDbFNCHvlIq6MmL -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:06 2025 by rpki-client