$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: u6Fv7N5TS0z7tpRie1Dml+Gn7xyC4UIH3d5LigW2rR8= Subject key identifier: 01:02:AC:AA:89:5E:5A:AD:A3:6E:2B:34:C2:28:9D:1A:4A:96:05:5B Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0247 Signing time: Tue 17 Jun 2025 01:25:08 +0000 Manifest this update: Tue 17 Jun 2025 01:25:07 +0000 Manifest next update: Tue 24 Jun 2025 01:25:07 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: 4VAP2AhUa5PdBqaCHpAxLx2Vr5dZ2ksUXaXz6G7aQ4c=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Jun 17 01:25:07 2025 GMT Not After : Jun 24 01:25:07 2025 GMT Subject: CN=6850c3f3-daeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:d3:9c:1a:cd:f5:2f:56:e7:f8:10:2e:90: 9b:d5:78:ee:0f:78:c0:6d:72:63:81:54:6d:ef:75: 3c:d5:60:5f:58:ec:f0:de:89:4f:cf:02:86:37:58: 6a:9b:b1:5b:78:4b:d9:d9:1e:10:6d:bb:72:2f:b2: ad:8c:61:6a:63:d9:0d:b7:8d:d1:f0:92:70:86:b2: b8:4b:7c:25:76:a7:d9:58:1f:0d:37:57:25:e5:a5: 57:bb:90:89:71:b5:08:88:bd:24:b4:8a:76:35:05: a8:b8:f2:b5:24:f5:6d:43:da:6c:b8:7f:0f:ef:15: 90:ef:90:42:aa:24:6d:69:88:06:f5:64:1b:4e:e3: c7:b5:f8:02:90:84:45:e5:ab:36:2f:00:48:72:7f: 0f:e1:ec:18:8d:71:8d:1f:7f:16:42:94:24:64:73: ba:0e:94:5c:1c:01:74:5f:a1:d2:0a:50:ec:f5:75: 10:3c:1b:42:74:cc:cc:ef:30:1b:f7:b5:e5:6a:5d: 32:ee:f8:04:41:5f:96:2e:28:4c:a0:f3:0b:00:46: de:7f:16:62:92:7e:b2:4b:a4:b4:4c:fe:a5:94:cb: 6d:63:08:17:65:cb:a2:dc:8b:40:3a:3b:49:66:21: 8c:0f:41:0a:a0:03:f9:69:78:6c:3a:40:eb:18:86: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:02:AC:AA:89:5E:5A:AD:A3:6E:2B:34:C2:28:9D:1A:4A:96:05:5B X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a8:9e:94:d2:a9:29:21:1b:ab:78:4a:fc:ee:d9:60:c9:08: 46:cb:9f:82:18:89:2f:f3:76:09:6a:ed:2c:6e:ab:7a:25:4e: 7f:39:48:fc:cb:89:0f:23:6a:21:c0:6b:b8:5e:63:13:64:a3: 9a:ed:e7:b9:d6:e1:a5:de:35:70:eb:ac:c9:6a:8d:ff:59:95: 23:2f:ad:ab:34:dc:70:67:07:c9:23:a0:fa:10:5d:7e:b9:94: 54:7a:65:0a:a6:dc:5e:0f:a8:44:ea:ee:60:9b:9a:d5:14:09: 75:52:ea:87:b8:ce:25:96:f8:4f:d9:81:1b:08:35:34:9c:dd: 61:3d:89:99:30:db:2d:7d:d5:60:0e:41:52:c8:69:88:b7:f4: 1b:ef:8b:16:35:f9:12:aa:2b:5a:d9:7d:46:98:73:f4:2a:18: ea:07:14:a8:d8:2a:6b:7e:a8:fc:b1:80:7d:a6:be:24:f4:54: 7b:7f:1d:57:89:41:41:3b:35:ff:8a:ee:ef:a5:3c:dd:c8:47: de:5d:66:53:96:1a:92:4b:e0:ff:86:30:24:9c:41:71:7d:8b: 92:f2:5a:83:30:76:cd:aa:b5:3f:4d:27:db:1f:71:71:60:ba: a7:c8:45:12:1a:8f:5b:77:cb:87:61:2b:3e:bc:82:12:d9:4c: ff:71:49:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwNjE3MDEyNTA3WhcNMjUwNjI0MDEyNTA3WjAYMRYwFAYD VQQDEw02ODUwYzNmMy1kYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vHTnBrN9S9W5/gQLpCb1XjuD3jAbXJjgVRt73U81WBfWOzw3olPzwKGN1hq m7FbeEvZ2R4QbbtyL7KtjGFqY9kNt43R8JJwhrK4S3wldqfZWB8NN1cl5aVXu5CJ cbUIiL0ktIp2NQWouPK1JPVtQ9psuH8P7xWQ75BCqiRtaYgG9WQbTuPHtfgCkIRF 5as2LwBIcn8P4ewYjXGNH38WQpQkZHO6DpRcHAF0X6HSClDs9XUQPBtCdMzM7zAb 97Xlal0y7vgEQV+WLihMoPMLAEbefxZikn6yS6S0TP6llMttYwgXZcui3ItAOjtJ ZiGMD0EKoAP5aXhsOkDrGIaijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAECrKqJ Xlqto24rNMIonRpKlgVbMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByqJ6U0qkpIRureEr87tlgyQhGy5+CGIkv83YJau0sbqt6JU5/OUj8 y4kPI2ohwGu4XmMTZKOa7ee51uGl3jVw66zJao3/WZUjL62rNNxwZwfJI6D6EF1+ uZRUemUKptxeD6hE6u5gm5rVFAl1UuqHuM4llvhP2YEbCDU0nN1hPYmZMNstfdVg DkFSyGmIt/Qb74sWNfkSqita2X1GmHP0KhjqBxSo2Cprfqj8sYB9pr4k9FR7fx1X iUFBOzX/iu7vpTzdyEfeXWZTlhqSS+D/hjAknEFxfYuS8lqDMHbNqrU/TSfbH3Fx YLqnyEUSGo9bd8uHYSs+vIIS2Uz/cUmo -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:24 2025 by rpki-client