$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: 2Vhb/7dZIteveIoDXMSjM+oPu1Yu+ib/OOAXlOOWd80= Subject key identifier: C9:4E:E2:0E:1E:E6:CF:4B:56:6B:AE:88:81:DC:38:A7:23:AB:21:18 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C5D Signing time: Sat 14 Jun 2025 18:13:33 +0000 Manifest this update: Sat 14 Jun 2025 18:13:33 +0000 Manifest next update: Sat 21 Jun 2025 18:13:33 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: K3/YHVx4CgKzuEGDuanV1g0/9l2K2f0KY0xjsMOdyG4=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Jun 14 18:13:33 2025 GMT Not After : Jun 21 18:13:33 2025 GMT Subject: CN=684dbbcd-c711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:4a:f9:d2:71:2f:b8:83:06:a7:3a:1a:3e: e2:4d:b6:81:a5:2a:cd:a7:f2:30:59:0c:2f:13:eb: 1a:38:16:16:0a:5e:2c:8c:1f:e5:ce:1a:80:2c:71: 63:af:63:4b:ce:d6:6a:b7:8d:7a:cd:c0:22:28:99: 07:9b:14:9c:b5:a5:7f:df:07:ac:ba:2d:30:61:9d: b1:79:68:86:0c:2b:b5:db:08:99:e8:a1:c1:7f:83: 70:d0:b4:8a:b6:1a:89:47:8b:42:48:a0:ae:38:d3: d7:d1:00:fa:70:17:b4:0e:d0:78:f2:fb:9e:f3:c4: 57:fa:e2:4f:ac:d5:42:ab:ee:eb:f3:83:58:aa:32: 58:d6:42:88:bf:2a:4e:c4:ec:ac:96:e4:f0:e9:33: c1:b3:b6:99:35:8d:55:e7:28:e7:45:fc:4d:1e:50: a4:47:07:9e:42:d6:ce:2d:1c:35:2f:d8:7b:ac:60: 9d:85:f5:4f:61:f7:83:5f:0f:af:e2:dd:f8:74:1f: 95:1f:1b:7e:7a:d9:7b:27:f2:14:f7:17:f2:2e:3a: 2b:49:5d:36:52:d4:9f:fa:d3:d7:84:2d:a7:0b:43: 7c:7d:ef:24:fc:93:7a:3c:70:b0:52:9f:0b:cf:cb: c7:05:84:41:84:e5:58:3c:5d:73:91:55:1d:df:ba: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:E2:0E:1E:E6:CF:4B:56:6B:AE:88:81:DC:38:A7:23:AB:21:18 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1c:7d:57:59:b3:3a:16:83:6a:a7:9a:bc:69:82:20:fb:a7: 7b:3f:ea:87:62:85:0e:eb:cd:a5:d1:40:80:c6:f0:81:35:f5: 63:7c:6f:3b:a9:e0:70:af:5c:56:e9:2a:e8:03:cf:b1:85:42: 06:2d:d1:b8:c3:ec:24:c3:c8:9a:2e:27:d8:fe:17:30:dc:5b: ad:35:86:04:1e:1f:60:8a:30:02:df:0d:bb:6b:2a:03:4a:46: 21:93:2e:b0:a5:50:f2:58:0f:4a:b7:9e:93:59:b8:37:a8:d7: 38:c8:fe:b5:a5:24:4a:e5:cf:a1:b9:f1:4f:5d:d9:dc:5b:92: f2:18:c0:a8:41:02:d3:7d:64:15:55:ba:b3:8f:32:f0:dc:b5: 1c:59:f7:9d:8f:90:bb:ee:9c:9b:ff:2d:1a:eb:60:8f:f8:78: db:06:88:45:72:ac:e1:e1:fb:98:ab:b7:53:1d:0d:2d:22:49: 43:79:d4:c0:d9:1d:c2:01:3e:51:93:bc:b2:88:f7:f8:82:68: 6e:9d:81:bc:2b:62:2b:c3:ed:88:58:43:2f:2b:78:9c:b2:8e: e7:89:a9:0c:6d:c5:dd:58:04:9b:43:bb:98:e9:cb:e9:75:c6: 6e:f1:70:db:7a:57:1f:28:21:e5:95:38:2c:73:83:28:df:21: 1f:3b:e6:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNjE0MTgxMzMzWhcNMjUwNjIxMTgxMzMzWjAYMRYwFAYD VQQDEw02ODRkYmJjZC1jNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh5K+dJxL7iDBqc6Gj7iTbaBpSrNp/IwWQwvE+saOBYWCl4sjB/lzhqALHFj r2NLztZqt416zcAiKJkHmxSctaV/3wesui0wYZ2xeWiGDCu12wiZ6KHBf4Nw0LSK thqJR4tCSKCuONPX0QD6cBe0DtB48vue88RX+uJPrNVCq+7r84NYqjJY1kKIvypO xOysluTw6TPBs7aZNY1V5yjnRfxNHlCkRweeQtbOLRw1L9h7rGCdhfVPYfeDXw+v 4t34dB+VHxt+etl7J/IU9xfyLjorSV02UtSf+tPXhC2nC0N8fe8k/JN6PHCwUp8L z8vHBYRBhOVYPF1zkVUd37pR+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlO4g4e 5s9LVmuuiIHcOKcjqyEYMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgHH1XWbM6FoNqp5q8aYIg+6d7P+qHYoUO682l0UCAxvCBNfVjfG87 qeBwr1xW6SroA8+xhUIGLdG4w+wkw8iaLifY/hcw3FutNYYEHh9gijAC3w27ayoD SkYhky6wpVDyWA9Kt56TWbg3qNc4yP61pSRK5c+hufFPXdncW5LyGMCoQQLTfWQV VbqzjzLw3LUcWfedj5C77pyb/y0a62CP+HjbBohFcqzh4fuYq7dTHQ0tIklDedTA 2R3CAT5Rk7yyiPf4gmhunYG8K2Irw+2IWEMvK3icso7niakMbcXdWASbQ7uY6cvp dcZu8XDbelcfKCHllTgsc4Mo3yEfO+ZB -----END CERTIFICATE-----Generated at Sun Jun 15 05:21:32 2025 by rpki-client