$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: 19UFIsKX6r1TNiMPStM9fyuyltmPcHZjlRExSgnlPyk= Subject key identifier: 7E:EC:73:48:46:CF:AE:14:84:02:A9:42:E4:32:F6:FC:C8:80:FB:65 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 1FD3 Signing time: Mon 16 Jun 2025 16:43:03 +0000 Manifest this update: Mon 16 Jun 2025 16:43:03 +0000 Manifest next update: Mon 23 Jun 2025 16:43:03 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: DRiTGAzgN0KNoIMz8NvMJWWR0OQQPKS4SmYP9Yz65vw=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jun 16 16:43:03 2025 GMT Not After : Jun 23 16:43:03 2025 GMT Subject: CN=68504997-1064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:53:6c:4d:b5:18:cf:94:01:5b:d6:5c:fe: 01:0a:c2:cd:b8:68:a3:ff:2f:75:fe:b6:7d:8d:45: 60:f2:95:8e:b6:f0:73:00:bb:60:da:29:6d:44:06: d7:d1:de:a0:99:56:6e:c5:e7:98:0f:0f:31:c3:5a: f4:9e:1c:6a:6a:56:2b:78:d0:ca:77:7f:c2:e0:df: 93:d8:6f:0b:be:d4:d4:45:8b:00:76:85:cd:79:59: 1e:03:59:80:62:7b:23:d3:4f:3d:60:ed:62:8f:b2: 49:b3:44:7b:fd:01:5e:6f:72:a7:fd:03:54:9a:2f: b7:a7:4b:b6:1f:cf:b0:ff:51:d7:56:3b:52:67:c7: f0:05:31:c5:90:0c:7e:87:f7:b3:76:ec:2e:19:c2: af:3c:d9:1e:82:e1:92:6f:69:db:0e:d9:fe:e1:a8: 63:67:c2:c2:7f:ee:cb:cc:3b:e6:ec:72:c1:6b:b1: 92:ae:ff:9c:33:8a:d2:17:00:f7:eb:ab:3a:d8:19: 71:fd:b1:60:ef:ef:75:15:0e:07:5a:b0:04:f4:d8: 6d:de:b6:de:83:21:fb:03:38:d0:d1:b2:13:cf:7d: af:70:b0:48:cf:cc:1e:30:42:ad:e3:cb:ee:ae:d3: 68:28:63:f2:61:cb:da:a0:5d:9b:29:28:7e:b1:e3: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:73:48:46:CF:AE:14:84:02:A9:42:E4:32:F6:FC:C8:80:FB:65 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:4d:fe:d1:fd:9f:df:25:d7:79:27:78:e0:53:f9:f4:34: 59:29:ad:96:36:cb:62:22:a2:25:70:08:cb:b8:64:8c:5c:af: ee:a2:34:f6:fd:e3:ba:a7:1e:30:ac:d8:96:60:22:b9:62:b2: 8e:d7:bc:da:69:22:c4:dd:14:9a:0f:64:bc:fa:b1:2a:0b:de: ca:a4:cd:52:2b:17:75:a1:dc:4d:c7:d5:d8:04:59:d4:7f:cb: 5a:8e:4c:ef:ad:1c:b9:3c:43:68:f5:ed:8e:3b:35:46:b2:b6: 93:fe:4a:53:d8:3c:10:b2:4a:b2:6f:96:46:4a:de:2c:42:e4: b7:df:2d:ff:27:77:28:a0:e7:16:00:07:1b:24:bc:14:0e:66: d1:bf:a8:cc:74:c8:a8:75:6a:c7:e6:70:a5:2b:b2:67:b4:3d: 91:16:ad:6d:51:67:bb:e7:72:0f:92:b7:68:13:bd:20:e0:00: dc:11:c4:81:78:5b:60:4a:e4:29:7c:78:10:14:e2:98:b3:3c: b6:73:b0:8d:b7:75:20:d5:e9:2b:3d:cb:fa:78:2e:29:a4:23: 0d:17:09:2f:c0:6c:c5:f2:3e:5e:42:2c:4b:3f:95:05:54:7c: 2f:67:f7:35:65:10:d4:7b:45:ca:1a:df:ba:d6:08:3d:9d:d1: d7:58:c5:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwNjE2MTY0MzAzWhcNMjUwNjIzMTY0MzAzWjAYMRYwFAYD VQQDEw02ODUwNDk5Ny0xMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoVTbE21GM+UAVvWXP4BCsLNuGij/y91/rZ9jUVg8pWOtvBzALtg2iltRAbX 0d6gmVZuxeeYDw8xw1r0nhxqalYreNDKd3/C4N+T2G8LvtTURYsAdoXNeVkeA1mA Ynsj0089YO1ij7JJs0R7/QFeb3Kn/QNUmi+3p0u2H8+w/1HXVjtSZ8fwBTHFkAx+ h/ezduwuGcKvPNkeguGSb2nbDtn+4ahjZ8LCf+7LzDvm7HLBa7GSrv+cM4rSFwD3 66s62Blx/bFg7+91FQ4HWrAE9Nht3rbegyH7AzjQ0bITz32vcLBIz8weMEKt48vu rtNoKGPyYcvaoF2bKSh+seMNCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7sc0hG z64UhAKpQuQy9vzIgPtlMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjU3+0f2f3yXXeSd44FP59DRZKa2WNstiIqIlcAjLuGSMXK/uojT2 /eO6px4wrNiWYCK5YrKO17zaaSLE3RSaD2S8+rEqC97KpM1SKxd1odxNx9XYBFnU f8tajkzvrRy5PENo9e2OOzVGsraT/kpT2DwQskqyb5ZGSt4sQuS33y3/J3cooOcW AAcbJLwUDmbRv6jMdMiodWrH5nClK7JntD2RFq1tUWe753IPkrdoE70g4ADcEcSB eFtgSuQpfHgQFOKYszy2c7CNt3Ug1ekrPcv6eC4ppCMNFwkvwGzF8j5eQixLP5UF VHwvZ/c1ZRDUe0XKGt+61gg9ndHXWMVJ -----END CERTIFICATE-----Generated at Tue Jun 17 06:26:23 2025 by rpki-client