$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: yWLGht390u4UNt78qN1kDp0FJLZR/q9Z4w2ECLwg8qc= Subject key identifier: 8C:5D:31:40:08:5A:3B:81:E9:33:EA:A1:54:DF:19:05:F6:A5:5B:A1 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 0398 Signing time: Sun 15 Jun 2025 00:30:42 +0000 Manifest this update: Sun 15 Jun 2025 00:30:42 +0000 Manifest next update: Sun 22 Jun 2025 00:30:42 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: kkxaYDlrAis9mFoXEs0PKPIe75EKhVW0xrz8szAU7D4=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Jun 15 00:30:42 2025 GMT Not After : Jun 22 00:30:42 2025 GMT Subject: CN=684e1432-1145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:e1:fb:6f:10:c7:33:72:27:39:ae:8f:ba: 58:dd:ac:e7:b4:03:ce:c0:b4:7a:50:34:3b:3c:0e: d6:12:a6:95:5f:73:94:cf:41:ad:67:1d:ed:4a:ee: 9f:42:94:53:36:e5:17:f3:58:30:22:e5:e7:a9:f3: 94:57:cd:61:0d:da:64:ad:f5:de:ee:4e:0f:bb:1d: 37:c8:e0:b0:b2:d2:f1:2d:af:5c:82:73:f4:f4:91: 0c:00:af:be:f1:f8:40:eb:45:73:10:35:05:b9:6b: 68:9c:af:34:dd:fe:04:7d:bd:63:6b:61:12:c1:37: 1c:7f:02:91:fc:f1:c2:13:c0:5d:37:3a:83:db:e2: e2:0e:63:6e:12:70:39:d2:a3:a6:d0:09:70:84:e9: 38:d9:94:71:51:79:7c:31:03:18:05:2b:8e:4f:3b: 63:23:2f:f0:ce:cf:d8:7c:96:c9:aa:58:07:10:e3: ae:46:d0:6e:26:4d:d0:ed:ab:c4:da:5b:bb:c3:ef: ee:d5:fb:d6:00:ad:9e:d5:bc:41:2c:25:ed:54:99: 78:e7:2f:31:13:f6:80:62:b3:7c:62:bb:44:8b:a4: 7c:8b:e1:bd:41:d6:a9:68:11:72:a3:2c:ee:87:d6: 48:ae:62:b2:d6:85:72:3e:d2:4a:39:65:ae:4f:90: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:31:40:08:5A:3B:81:E9:33:EA:A1:54:DF:19:05:F6:A5:5B:A1 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2c:41:5d:2f:81:d6:49:0b:e3:53:d4:8d:12:6e:01:93:0a: 60:ae:12:99:f4:f1:29:fc:20:11:94:ed:95:f0:d3:e7:81:db: d8:6c:9b:a2:ed:0d:81:93:5f:ec:af:6d:9f:41:1d:7c:dd:6c: 23:67:ff:cf:80:5c:14:d8:51:f4:09:c4:ca:34:08:6b:a5:f9: 41:19:f9:f3:cb:28:81:69:ed:ce:4a:c9:bd:68:d7:eb:af:eb: 78:ec:b0:66:62:76:45:46:f0:ec:3f:15:0f:7d:11:c6:0e:89: 45:cd:52:53:4d:2c:05:1c:11:f1:f9:58:2d:8d:c4:7c:e1:04: cf:23:dc:7a:82:71:c0:eb:9a:d9:fd:6b:da:37:fd:15:38:d6: 57:fe:b0:c2:9a:be:97:cf:c3:6b:52:12:b8:c1:90:aa:ff:d8: 30:fa:69:58:ae:65:11:1f:32:cd:bd:41:ba:24:26:ed:de:90: d2:c7:5e:4e:7d:05:89:82:77:85:f9:64:92:50:3b:29:91:35: a4:a9:b4:b4:e3:24:b5:87:5b:7f:fb:3b:17:6a:f0:b1:53:c3: a9:65:02:66:11:ca:a9:9a:21:7c:db:d7:34:9d:48:1a:fe:35: 86:77:e3:02:01:0c:24:67:e0:63:ee:56:f5:82:c3:89:ab:29: b5:be:38:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUwNjE1MDAzMDQyWhcNMjUwNjIyMDAzMDQyWjAYMRYwFAYD VQQDEw02ODRlMTQzMi0xMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h7h+28QxzNyJzmuj7pY3azntAPOwLR6UDQ7PA7WEqaVX3OUz0GtZx3tSu6f QpRTNuUX81gwIuXnqfOUV81hDdpkrfXe7k4Pux03yOCwstLxLa9cgnP09JEMAK++ 8fhA60VzEDUFuWtonK803f4Efb1ja2ESwTccfwKR/PHCE8BdNzqD2+LiDmNuEnA5 0qOm0AlwhOk42ZRxUXl8MQMYBSuOTztjIy/wzs/YfJbJqlgHEOOuRtBuJk3Q7avE 2lu7w+/u1fvWAK2e1bxBLCXtVJl45y8xE/aAYrN8YrtEi6R8i+G9QdapaBFyoyzu h9ZIrmKy1oVyPtJKOWWuT5C87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxdMUAI WjuB6TPqoVTfGQX2pVuhMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrLEFdL4HWSQvjU9SNEm4BkwpgrhKZ9PEp/CARlO2V8NPngdvYbJui 7Q2Bk1/sr22fQR183WwjZ//PgFwU2FH0CcTKNAhrpflBGfnzyyiBae3OSsm9aNfr r+t47LBmYnZFRvDsPxUPfRHGDolFzVJTTSwFHBHx+VgtjcR84QTPI9x6gnHA65rZ /WvaN/0VONZX/rDCmr6Xz8NrUhK4wZCq/9gw+mlYrmURHzLNvUG6JCbt3pDSx15O fQWJgneF+WSSUDspkTWkqbS04yS1h1t/+zsXavCxU8OpZQJmEcqpmiF829c0nUga /jWGd+MCAQwkZ+Bj7lb1gsOJqym1vjjD -----END CERTIFICATE-----Generated at Sun Jun 15 17:46:36 2025 by rpki-client