$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: EOCMDhsIY3zUDAguHyA+Dp91yt6nL0DOCxbq3H3IJCo= Subject key identifier: 9E:E1:11:C5:8A:25:CB:3A:5C:49:2A:EB:55:2C:AC:85:0D:88:8A:F1 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 063B Signing time: Thu 12 Jun 2025 22:19:21 +0000 Manifest this update: Thu 12 Jun 2025 22:19:21 +0000 Manifest next update: Thu 19 Jun 2025 22:19:21 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: sntigJaCjaApM9fv6BOEcQnP1PYpUARBe81PoH8woAc=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Jun 12 22:19:21 2025 GMT Not After : Jun 19 22:19:21 2025 GMT Subject: CN=684b5269-7f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:db:53:75:a7:73:b6:36:bf:60:e7:78:ad: 4e:8c:57:16:54:b6:cd:e7:94:91:c5:81:5f:ed:a9: 1f:17:aa:f5:d6:6c:36:0c:76:56:a5:f1:ae:e5:c3: 84:ca:cd:4e:0b:59:99:2b:aa:3d:2c:6c:21:35:f6: 4d:6e:c8:73:3e:39:45:ed:06:a5:79:1b:de:00:36: e2:2e:34:70:69:36:46:6b:81:cb:eb:74:bd:7f:27: e3:6a:76:07:e7:3e:08:32:78:aa:14:af:e8:6c:30: 06:3e:75:a2:34:31:0b:57:cb:1b:5a:d9:47:9b:f8: 50:b9:14:8f:1a:f4:25:6d:aa:cf:95:f2:fa:97:0c: 79:62:b3:94:22:60:c3:a0:bc:9f:22:b1:01:73:c9: 76:67:ef:5c:d9:81:cc:21:29:86:1b:12:86:02:27: 78:19:05:c4:62:f4:54:b5:f7:d6:9b:e0:33:ab:7f: 7c:7b:56:47:fb:0d:46:bd:08:f6:73:e2:c1:c7:a4: 3b:74:24:a4:3f:94:bf:0a:19:e3:9c:78:3b:4f:3d: 62:65:3a:46:13:d1:d2:44:8f:f4:7b:67:cb:64:6c: 4c:08:3f:3f:2c:8d:07:0a:12:a9:5e:a8:e0:d1:3f: d5:0f:7e:bf:b6:d8:ac:03:a2:ce:36:cb:58:20:da: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:11:C5:8A:25:CB:3A:5C:49:2A:EB:55:2C:AC:85:0D:88:8A:F1 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4b:09:75:9d:07:fb:27:35:e1:90:e4:9a:c3:9b:75:aa:3c: 0e:c4:dd:fd:81:fa:0c:a0:39:ad:8e:77:89:52:09:84:bc:cb: 47:9e:d3:0f:b1:fe:18:51:0e:87:5b:1f:e2:d0:fb:3e:8a:28: 1e:fb:cf:fb:47:e4:4f:25:ba:97:85:39:17:c4:95:f3:84:57: 7c:39:ae:e0:77:a1:6e:31:6a:ac:3c:69:13:c4:2b:60:b2:08: ed:ff:65:10:d7:da:a3:5a:43:a9:a2:ce:dd:c2:53:5c:49:f0: ad:2e:25:a5:18:df:74:e1:24:c3:33:50:70:3b:05:11:01:a7: b0:89:69:91:5a:63:14:dd:33:cd:be:65:79:7a:00:62:08:31: 03:bc:81:80:61:b0:d6:1c:e4:7f:f6:ed:d9:49:34:a7:49:8f: e6:d7:37:77:12:3e:1e:eb:85:00:34:31:67:a4:88:fc:ee:73: da:1c:31:c9:95:b6:9e:5c:06:da:c9:05:49:39:ca:88:ed:fa: 37:f6:07:dd:aa:75:b0:70:37:74:68:26:c8:a6:7b:45:5c:27: ad:94:42:87:a3:c4:41:35:c4:13:d0:ae:4d:66:d0:d3:a0:d8: e1:c3:6e:a2:d3:e0:cb:10:ac:73:ac:c7:9d:8c:9d:82:61:63: cc:d3:9b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwNjEyMjIxOTIxWhcNMjUwNjE5MjIxOTIxWjAYMRYwFAYD VQQDEw02ODRiNTI2OS03ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk3bU3Wnc7Y2v2DneK1OjFcWVLbN55SRxYFf7akfF6r11mw2DHZWpfGu5cOE ys1OC1mZK6o9LGwhNfZNbshzPjlF7QaleRveADbiLjRwaTZGa4HL63S9fyfjanYH 5z4IMniqFK/obDAGPnWiNDELV8sbWtlHm/hQuRSPGvQlbarPlfL6lwx5YrOUImDD oLyfIrEBc8l2Z+9c2YHMISmGGxKGAid4GQXEYvRUtffWm+Azq398e1ZH+w1GvQj2 c+LBx6Q7dCSkP5S/ChnjnHg7Tz1iZTpGE9HSRI/0e2fLZGxMCD8/LI0HChKpXqjg 0T/VD36/ttisA6LONstYINry0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7hEcWK Jcs6XEkq61UsrIUNiIrxMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSwl1nQf7JzXhkOSaw5t1qjwOxN39gfoMoDmtjneJUgmEvMtHntMP sf4YUQ6HWx/i0Ps+iige+8/7R+RPJbqXhTkXxJXzhFd8Oa7gd6FuMWqsPGkTxCtg sgjt/2UQ19qjWkOpos7dwlNcSfCtLiWlGN904STDM1BwOwURAaewiWmRWmMU3TPN vmV5egBiCDEDvIGAYbDWHOR/9u3ZSTSnSY/m1zd3Ej4e64UANDFnpIj87nPaHDHJ lbaeXAbayQVJOcqI7fo39gfdqnWwcDd0aCbIpntFXCetlEKHo8RBNcQT0K5NZtDT oNjhw26i0+DLEKxzrMedjJ2CYWPM05sh -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:14 2025 by rpki-client