$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: ObL2+ycP6Gk4DLeF+rLeIl9pgbF98I3qoRMpdsHQnsc= Subject key identifier: 2D:5C:C7:CA:AF:9B:60:BB:50:B1:01:A3:42:73:0B:CB:08:7E:A1:ED Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 033E Signing time: Sun 15 Jun 2025 00:46:08 +0000 Manifest this update: Sun 15 Jun 2025 00:46:08 +0000 Manifest next update: Sun 22 Jun 2025 00:46:08 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: f2q9g5exSSCZbeZNAjXbYza3KhYSLZd0dBPB9jRBPb0=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Jun 15 00:46:08 2025 GMT Not After : Jun 22 00:46:08 2025 GMT Subject: CN=684e17d0-0c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:60:35:d0:de:a1:19:a4:f7:46:7e:25:25: 11:1a:a5:8b:52:0d:ba:c6:07:66:26:98:11:71:82: 59:01:38:e9:c4:4f:52:8c:6d:68:53:74:a9:19:59: 67:7c:64:8d:25:e1:7c:6e:bc:fc:f1:c6:56:01:ef: 86:56:dd:5f:a4:b6:a9:ca:bd:a3:55:5d:c3:2c:c8: 06:d7:09:90:c3:05:79:5a:69:23:01:b4:2b:86:8e: ac:1b:20:c7:d6:f1:51:f0:5b:96:07:9a:31:83:a0: 33:7f:e2:1c:98:a8:87:c4:93:85:d2:2f:be:8c:bf: 08:19:67:34:99:37:55:25:3c:60:9b:c7:42:dc:3d: e2:a2:29:c1:cd:1c:2e:01:68:8b:03:8e:0b:02:32: 32:b2:59:0e:b1:af:ff:c7:ff:43:09:6c:65:15:c7: 77:72:ce:df:b4:a7:7f:5d:fa:b6:89:2d:61:91:df: ee:c1:6d:05:d8:58:0f:35:89:1e:d7:6a:22:fc:e1: ba:d6:81:5f:ac:12:23:fc:f1:b4:20:e8:06:b1:77: 6c:44:23:2e:ab:36:be:5c:95:22:41:39:43:b5:40: e0:fc:3e:3d:79:a9:4a:c4:03:f9:6d:c0:f2:54:20: 54:73:3b:8f:f8:b6:f0:76:72:40:0a:0a:45:c5:ef: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5C:C7:CA:AF:9B:60:BB:50:B1:01:A3:42:73:0B:CB:08:7E:A1:ED X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:22:c4:41:e1:f9:02:a6:4a:80:58:e5:72:7b:dd:47:00:79: 18:a1:c6:fe:e0:5e:36:dd:c5:bd:82:eb:33:a4:fa:1e:ac:fb: c4:bc:36:cf:f3:0f:f1:a3:b7:45:cc:72:60:59:2e:ce:92:f1: a9:c2:67:02:d9:15:8a:b0:c1:e5:d1:fe:ce:f4:35:a0:b6:8d: 12:6e:a5:a5:b8:aa:89:45:cc:0f:92:0d:94:31:79:96:db:0f: 98:32:d9:71:16:61:c8:9e:f6:14:37:b1:22:e7:73:a2:97:22: d6:da:2f:76:6c:88:40:7f:0a:f9:85:0c:30:3c:1a:3c:bc:88: 89:aa:6e:98:6f:ab:c8:f3:5a:cf:75:b7:db:78:96:a8:bb:00: b1:33:f9:2f:32:7b:9d:40:d0:86:26:92:38:43:2b:6d:81:8a: 71:c8:93:5f:37:40:d0:2f:17:b8:b4:c6:58:7c:ad:00:1b:39: 8b:09:2d:11:4a:f6:95:4f:7c:36:a8:fe:8c:f7:e4:97:9a:b7: 34:ae:30:26:b8:25:0e:59:8c:89:50:5b:63:98:7d:07:f6:95: b4:38:49:6e:b6:f4:8f:04:28:30:21:06:77:09:82:6d:ab:d7: 6d:85:68:b9:82:5e:f0:db:b8:d5:16:2a:bc:ca:77:b3:9a:95: eb:67:d1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwNjE1MDA0NjA4WhcNMjUwNjIyMDA0NjA4WjAYMRYwFAYD VQQDEw02ODRlMTdkMC0wYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMJgNdDeoRmk90Z+JSURGqWLUg26xgdmJpgRcYJZATjpxE9SjG1oU3SpGVln fGSNJeF8brz88cZWAe+GVt1fpLapyr2jVV3DLMgG1wmQwwV5WmkjAbQrho6sGyDH 1vFR8FuWB5oxg6Azf+IcmKiHxJOF0i++jL8IGWc0mTdVJTxgm8dC3D3ioinBzRwu AWiLA44LAjIyslkOsa//x/9DCWxlFcd3cs7ftKd/Xfq2iS1hkd/uwW0F2FgPNYke 12oi/OG61oFfrBIj/PG0IOgGsXdsRCMuqza+XJUiQTlDtUDg/D49ealKxAP5bcDy VCBUczuP+LbwdnJACgpFxe/kPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1cx8qv m2C7ULEBo0JzC8sIfqHtMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAIsRB4fkCpkqAWOVye91HAHkYocb+4F423cW9guszpPoerPvEvDbP 8w/xo7dFzHJgWS7OkvGpwmcC2RWKsMHl0f7O9DWgto0SbqWluKqJRcwPkg2UMXmW 2w+YMtlxFmHInvYUN7Ei53OilyLW2i92bIhAfwr5hQwwPBo8vIiJqm6Yb6vI81rP dbfbeJaouwCxM/kvMnudQNCGJpI4QyttgYpxyJNfN0DQLxe4tMZYfK0AGzmLCS0R SvaVT3w2qP6M9+SXmrc0rjAmuCUOWYyJUFtjmH0H9pW0OElutvSPBCgwIQZ3CYJt q9dthWi5gl7w27jVFiq8ynezmpXrZ9FB -----END CERTIFICATE-----Generated at Mon Jun 16 14:44:27 2025 by rpki-client