$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: AXqbiCUOUbd2A+AeF9IXNbZlUAVKJ0Bew5owRkNb4jo= Subject key identifier: 2C:B0:41:4E:0F:07:DF:F8:56:CE:3C:4D:90:74:35:23:37:5F:40:53 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 03B2 Signing time: Tue 05 Aug 2025 01:13:34 +0000 Manifest this update: Tue 05 Aug 2025 01:13:33 +0000 Manifest next update: Tue 12 Aug 2025 01:13:33 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: /erPTvlY/WOfVRvTAjJHCLIMtiZSogw1bNtMzom0lis=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Aug 5 01:13:33 2025 GMT Not After : Aug 12 01:13:33 2025 GMT Subject: CN=68915abd-dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:80:5c:0c:78:54:f3:49:d3:fc:5a:93:ff: e5:97:cb:81:e4:a2:51:69:d9:e5:37:a0:22:67:2c: 46:d9:15:18:5d:9c:a4:fe:57:7c:3d:89:2f:e4:5f: 8e:67:b1:2f:d8:ae:84:ff:84:a5:4a:66:04:fb:bf: 69:94:00:62:fc:c7:3e:e3:9f:10:8d:c6:1c:d2:59: a0:16:bd:e4:70:f6:55:2d:3c:26:e1:b4:2e:a1:24: d2:3a:fe:37:88:46:27:01:dc:81:4a:99:36:6d:48: f9:f5:78:db:7f:b7:49:66:14:e3:93:8e:fa:b5:60: 9b:75:a6:08:7b:14:b0:d1:c0:79:65:dd:fa:1c:8f: 90:ea:26:3a:63:f5:94:43:53:9d:68:77:11:24:8c: 10:11:62:23:d1:55:1d:99:62:b1:a4:97:da:0c:27: 2b:ee:5d:0f:8c:0b:22:07:7f:51:4e:41:2d:c4:bf: b1:52:0c:45:bf:cb:68:83:6f:ce:8a:98:f8:d5:40: 07:f2:ad:dc:b7:b1:5b:26:d6:20:25:ff:23:7a:af: 70:7a:67:62:96:f5:f2:c9:1d:fc:59:fe:b5:7e:24: d1:91:c5:78:23:60:c2:79:fe:dc:c4:f4:38:9e:74: 83:19:21:f9:0f:bf:c9:12:11:f5:65:c5:3d:6d:f5: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B0:41:4E:0F:07:DF:F8:56:CE:3C:4D:90:74:35:23:37:5F:40:53 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:11:d9:7a:0e:63:f2:3a:d3:91:ed:2c:46:cc:cc:d1:3f:6c: 70:c5:1b:39:65:10:0c:bf:bf:a3:f1:64:f8:e9:e2:35:37:56: c2:18:4b:4d:52:3e:50:05:dc:77:63:cd:ce:3f:88:bd:19:1d: 76:f5:ae:c2:dd:27:0f:d7:8a:80:b4:94:0f:26:dd:39:c8:31: 21:9e:0c:26:08:6e:7b:a0:99:85:49:f4:c3:9f:69:b1:d5:3a: 90:32:21:7f:ce:bd:cf:16:a5:d2:38:7a:93:15:03:fb:93:4b: 2b:ae:0a:4e:ea:0f:72:15:7d:48:e6:52:c0:8a:5c:de:a3:f0: db:04:9e:87:3f:6f:f9:b0:c0:0a:cc:ae:48:cd:32:b2:2e:81: 03:a3:8f:11:9f:b1:b2:34:31:e7:d4:74:6e:0a:62:03:38:05: f9:ca:b9:6f:45:82:61:5b:d3:f7:7f:27:11:b3:bb:93:11:96: cb:22:18:ba:ae:8b:24:be:c9:97:66:c4:22:9e:6d:57:5f:74: 59:fb:5e:9b:52:68:52:24:68:6e:95:06:9a:29:b3:27:97:c8: 1c:5d:a3:c5:23:15:cc:a1:60:cf:03:71:d3:bc:af:47:38:88: 65:d8:36:7d:e3:11:c8:11:6e:a1:b4:ac:ab:a8:43:09:8a:f2: 7e:19:44:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUwODA1MDExMzMzWhcNMjUwODEyMDExMzMzWjAYMRYwFAYD VQQDEw02ODkxNWFiZC1kY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgWAXAx4VPNJ0/xak//ll8uB5KJRadnlN6AiZyxG2RUYXZyk/ld8PYkv5F+O Z7Ev2K6E/4SlSmYE+79plABi/Mc+458QjcYc0lmgFr3kcPZVLTwm4bQuoSTSOv43 iEYnAdyBSpk2bUj59Xjbf7dJZhTjk476tWCbdaYIexSw0cB5Zd36HI+Q6iY6Y/WU Q1OdaHcRJIwQEWIj0VUdmWKxpJfaDCcr7l0PjAsiB39RTkEtxL+xUgxFv8tog2/O ipj41UAH8q3ct7FbJtYgJf8jeq9wemdilvXyyR38Wf61fiTRkcV4I2DCef7cxPQ4 nnSDGSH5D7/JEhH1ZcU9bfUGcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCywQU4P B9/4Vs48TZB0NSM3X0BTMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Edl6DmPyOtOR7SxGzMzRP2xwxRs5ZRAMv7+j8WT46eI1N1bCGEtN Uj5QBdx3Y83OP4i9GR129a7C3ScP14qAtJQPJt05yDEhngwmCG57oJmFSfTDn2mx 1TqQMiF/zr3PFqXSOHqTFQP7k0srrgpO6g9yFX1I5lLAilzeo/DbBJ6HP2/5sMAK zK5IzTKyLoEDo48Rn7GyNDHn1HRuCmIDOAX5yrlvRYJhW9P3fycRs7uTEZbLIhi6 roskvsmXZsQinm1XX3RZ+16bUmhSJGhulQaaKbMnl8gcXaPFIxXMoWDPA3HTvK9H OIhl2DZ94xHIEW6htKyrqEMJivJ+GUQ2 -----END CERTIFICATE-----Generated at Wed Aug 6 00:50:20 2025 by rpki-client