$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: +Hu+ue/FyHrLBu6VVJseRLeQfIxkudsS21hzr2O6PcA= Subject key identifier: 29:B1:41:3C:D0:9C:9C:EA:75:9D:B6:E7:C5:5D:94:33:83:97:7C:50 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 86 Signing time: Tue 17 Jun 2025 05:36:16 +0000 Manifest this update: Tue 17 Jun 2025 05:36:16 +0000 Manifest next update: Tue 24 Jun 2025 05:36:16 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 17OaO/X5HVlG9QlLK9nlRVdg9qZfs2ubwWK/vuQrIpQ=) 2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 3: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Jun 17 05:36:16 2025 GMT Not After : Jun 24 05:36:16 2025 GMT Subject: CN=6850fed0-6236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:82:43:5f:25:0e:52:e4:b2:8f:66:37:64: 97:99:e5:4b:51:80:2c:cc:da:6c:10:15:f5:7e:36: 5e:10:3f:7a:01:80:1b:44:e0:ea:1e:1f:ee:6e:c9: 94:53:01:0c:d4:d4:74:79:6a:69:08:34:1b:cd:39: 27:b6:6e:90:83:f0:69:60:f5:a4:d2:18:cb:b7:ab: c1:27:06:e1:a9:c3:dc:74:3d:a5:0c:98:ea:b8:b6: 68:46:58:cc:5f:8a:80:09:4b:d5:a8:b0:6e:db:fe: 8e:5e:03:d0:3e:29:27:7c:54:a4:fe:ca:0b:6f:fc: 51:8d:c8:76:60:46:f1:61:cc:be:f0:e2:65:54:54: 53:e5:56:28:f7:15:21:6b:18:26:8e:cd:a7:c9:a2: 19:57:9a:25:d0:19:2c:09:f4:6f:07:a0:e3:12:c8: a6:67:4b:b2:63:3a:41:c3:c9:52:e4:1a:c0:26:bb: e3:4d:8d:b4:a1:3d:c8:b7:d4:23:eb:7f:84:1a:53: 1c:62:d5:66:91:bd:5d:ab:4b:9c:3c:83:65:09:68: e3:e4:d4:a7:db:ea:cf:0f:dd:e9:5c:01:7a:e2:4f: 83:0d:50:eb:af:1a:da:44:bd:f6:3e:43:45:28:30: ac:d3:90:f1:84:9f:3e:dd:82:59:91:ed:a6:b6:a9: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B1:41:3C:D0:9C:9C:EA:75:9D:B6:E7:C5:5D:94:33:83:97:7C:50 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:02:21:46:3e:be:67:84:39:54:59:c9:35:ae:92:a6:c6:94: 27:f6:8c:32:e4:8f:22:26:16:21:90:28:1f:70:e8:f8:47:3d: 63:04:d9:db:59:7c:e5:85:89:dd:e6:7e:cf:e2:0f:0a:32:ba: 65:6e:6e:ea:89:94:a6:65:e9:e1:7a:31:48:6f:4c:44:b2:b3: 96:26:3f:8f:34:32:8e:c5:32:3f:ba:56:28:9f:b0:70:0b:4b: b4:3e:f4:30:59:f1:e6:39:c5:ee:d8:c6:51:0e:73:2b:34:b3: 18:58:4a:48:aa:c3:ad:73:11:ef:c6:f7:25:29:ee:10:4d:75: 92:f6:1d:05:32:86:48:07:9f:de:81:0e:03:e5:50:bd:dc:76: fd:55:bf:60:49:63:12:82:94:bd:6f:e5:78:5b:e7:f3:c1:4b: 80:d8:5b:58:1c:3f:8e:ca:95:3e:00:57:0e:41:30:fe:02:fc: e3:db:5b:f8:14:29:9f:70:2f:14:1a:49:ea:2a:72:12:b3:c4: be:5d:61:cb:03:8d:af:b9:ad:e0:7d:3d:4d:cc:54:47:d7:57: 48:b1:2d:df:fa:fc:8b:6e:4a:1c:dd:8b:3e:86:35:24:b0:3e: fc:8c:e9:6f:93:3e:7e:1d:68:20:95:ab:4e:35:ae:03:d7:eb: 6f:17:95:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwNjE3MDUzNjE2WhcNMjUwNjI0MDUzNjE2WjAYMRYwFAYD VQQDEw02ODUwZmVkMC02MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJOCQ18lDlLkso9mN2SXmeVLUYAszNpsEBX1fjZeED96AYAbRODqHh/ubsmU UwEM1NR0eWppCDQbzTkntm6Qg/BpYPWk0hjLt6vBJwbhqcPcdD2lDJjquLZoRljM X4qACUvVqLBu2/6OXgPQPiknfFSk/soLb/xRjch2YEbxYcy+8OJlVFRT5VYo9xUh axgmjs2nyaIZV5ol0BksCfRvB6DjEsimZ0uyYzpBw8lS5BrAJrvjTY20oT3It9Qj 63+EGlMcYtVmkb1dq0ucPINlCWjj5NSn2+rPD93pXAF64k+DDVDrrxraRL32PkNF KDCs05DxhJ8+3YJZke2mtqmPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmxQTzQ nJzqdZ2258VdlDODl3xQMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARAiFGPr5nhDlUWck1rpKmxpQn9owy5I8iJhYhkCgfcOj4Rz1jBNnb WXzlhYnd5n7P4g8KMrplbm7qiZSmZenhejFIb0xEsrOWJj+PNDKOxTI/ulYon7Bw C0u0PvQwWfHmOcXu2MZRDnMrNLMYWEpIqsOtcxHvxvclKe4QTXWS9h0FMoZIB5/e gQ4D5VC93Hb9Vb9gSWMSgpS9b+V4W+fzwUuA2FtYHD+OypU+AFcOQTD+Avzj21v4 FCmfcC8UGknqKnISs8S+XWHLA42vua3gfT1NzFRH11dIsS3f+vyLbkoc3Ys+hjUk sD78jOlvkz5+HWgglatONa4D1+tvF5Wh -----END CERTIFICATE-----Generated at Wed Jun 18 01:44:40 2025 by rpki-client