$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: iQHy+zmVu2XROqyfEEdxti8dJ5fRatTrgPPVCu5S17U= Subject key identifier: 49:26:DD:CB:76:C0:11:33:EB:D5:03:68:BD:A1:7C:BC:0D:BB:35:00 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: CB Signing time: Mon 11 Aug 2025 05:54:39 +0000 Manifest this update: Mon 11 Aug 2025 05:54:39 +0000 Manifest next update: Mon 18 Aug 2025 05:54:39 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: 1Z776/JNQRM2miuvfGpMz65jDtlJoY/KuckFOAGQLEw=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Aug 11 05:54:39 2025 GMT Not After : Aug 18 05:54:39 2025 GMT Subject: CN=6899859f-ff17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:7b:21:b1:b5:2b:91:2c:13:8e:6b:ff:f6: 66:44:db:31:9c:98:55:fe:26:42:86:75:9c:f1:89: 96:7d:47:2f:15:78:d7:b9:df:09:e3:a3:bc:3e:e8: b4:c7:cd:07:9b:82:6e:d7:aa:fe:ff:10:61:d6:d1: 6d:78:e4:3f:fb:99:b6:f0:45:9f:94:0a:40:ce:dc: 97:a8:a3:a6:c8:6f:fe:3f:88:90:d2:1e:23:07:b2: b4:12:92:49:fd:79:d7:2c:8c:c5:15:c2:e1:66:d1: 11:13:4b:22:a8:eb:c6:dc:d2:9c:f1:6e:3c:c0:66: b3:ba:46:0b:0d:7e:d8:55:f7:17:e4:ab:a2:6d:d6: d2:2c:dc:3b:32:2d:2e:ac:bf:66:85:10:22:6a:9d: 88:d3:88:01:b2:8e:e5:14:80:a4:1b:02:84:09:08: 37:ca:05:c9:0a:cc:01:1a:7b:1a:22:04:52:9b:65: 13:d9:48:74:aa:74:7c:6d:2e:de:f1:5e:d1:f3:66: 7c:a9:8e:98:4c:af:6f:13:2d:78:20:a1:a7:e8:00: 78:70:cb:4d:a8:02:02:8d:81:3a:91:ef:ab:7b:87: ac:d9:b8:c1:98:26:e5:e0:57:2b:8f:72:b8:86:46: 12:fa:48:01:99:13:c0:18:eb:03:3d:4b:18:83:f1: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:26:DD:CB:76:C0:11:33:EB:D5:03:68:BD:A1:7C:BC:0D:BB:35:00 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:94:90:33:de:03:ae:6c:2c:e6:fe:de:9c:cb:14:90:fc: 34:2e:67:74:5f:86:5a:a5:22:17:99:ff:11:2b:c9:28:77:b9: 34:89:15:bc:72:19:74:7e:4b:d8:f2:e5:c6:1a:62:c3:2a:bf: 84:94:7b:dc:b6:60:d2:8b:8f:b6:4b:1c:af:b5:a5:d7:64:c2: 95:20:1b:0c:a8:da:f4:19:99:8d:78:d2:70:45:05:cd:95:05: 43:46:ff:91:80:45:d6:33:fa:12:fa:57:5d:69:c9:0c:60:42: 10:6a:6c:77:67:ba:7e:6f:8f:31:87:97:95:32:7d:49:e8:73: 37:9a:e6:6d:f8:ab:1d:30:03:d9:4a:d5:9d:d9:11:dd:6f:fb: 4a:81:4b:a6:6e:a9:76:f1:d5:68:7f:35:e5:91:93:cd:ef:35: 54:5a:06:8e:cb:94:93:84:a8:51:1b:d6:30:bd:ba:6c:3c:66: bb:ec:6a:90:f4:e2:29:0e:95:2e:56:06:04:f6:72:78:38:74: 9c:a5:f2:a7:72:02:92:20:65:be:94:21:e3:8d:0e:4a:55:30: 25:cc:49:01:1b:60:6a:45:5f:30:1c:c9:dc:e1:7a:97:4b:d6: 3b:e5:66:36:cb:1b:f6:15:f4:e8:67:99:e2:7e:4a:ce:32:85: 0e:46:71:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwODExMDU1NDM5WhcNMjUwODE4MDU1NDM5WjAYMRYwFAYD VQQDEw02ODk5ODU5Zi1mZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7917IbG1K5EsE45r//ZmRNsxnJhV/iZChnWc8YmWfUcvFXjXud8J46O8Pui0 x80Hm4Ju16r+/xBh1tFteOQ/+5m28EWflApAztyXqKOmyG/+P4iQ0h4jB7K0EpJJ /XnXLIzFFcLhZtERE0siqOvG3NKc8W48wGazukYLDX7YVfcX5KuibdbSLNw7Mi0u rL9mhRAiap2I04gBso7lFICkGwKECQg3ygXJCswBGnsaIgRSm2UT2Uh0qnR8bS7e 8V7R82Z8qY6YTK9vEy14IKGn6AB4cMtNqAICjYE6ke+re4es2bjBmCbl4Fcrj3K4 hkYS+kgBmRPAGOsDPUsYg/FMLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkm3ct2 wBEz69UDaL2hfLwNuzUAMB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQZSQM94Drmws5v7enMsUkPw0Lmd0X4ZapSIXmf8RK8kod7k0iRW8 chl0fkvY8uXGGmLDKr+ElHvctmDSi4+2SxyvtaXXZMKVIBsMqNr0GZmNeNJwRQXN lQVDRv+RgEXWM/oS+lddackMYEIQamx3Z7p+b48xh5eVMn1J6HM3muZt+KsdMAPZ StWd2RHdb/tKgUumbql28dVofzXlkZPN7zVUWgaOy5SThKhRG9YwvbpsPGa77GqQ 9OIpDpUuVgYE9nJ4OHScpfKncgKSIGW+lCHjjQ5KVTAlzEkBG2BqRV8wHMnc4XqX S9Y75WY2yxv2FfToZ5nifkrOMoUORnH+ -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:15 2025 by rpki-client