$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: VthUfYj7X7Bn1FI1HrhFNFOY6/UPTTTU0gOeeau98ys= Subject key identifier: A4:C9:56:F5:60:DC:49:2B:66:84:92:D3:29:DC:E0:A6:CF:34:41:71 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 01EA Signing time: Sat 19 Jul 2025 02:47:20 +0000 Manifest this update: Sat 19 Jul 2025 02:47:19 +0000 Manifest next update: Sat 26 Jul 2025 02:47:19 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: twdb6FEuamWh6GRtLWo/dOl8uFnluWRDjH42fkAApGw=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Jul 19 02:47:19 2025 GMT Not After : Jul 26 02:47:19 2025 GMT Subject: CN=687b0738-66da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:db:00:a2:d9:16:d3:98:ee:e8:21:ec:a3: b3:86:d3:0e:44:f2:f5:06:27:4c:57:36:53:8a:b9: 92:b3:e3:81:2f:37:83:56:a4:c5:a9:95:de:ed:9b: c3:62:61:3c:c5:84:d7:c0:b7:b7:37:68:d8:20:15: 93:41:b5:da:23:ba:0b:ff:94:27:bb:9c:2f:dd:6e: 0b:33:e1:17:34:48:85:de:d0:2c:b9:f5:0a:97:a6: 50:df:05:0e:25:33:69:88:2d:f5:90:ec:50:09:9b: de:a1:fe:37:41:6f:51:c6:a2:09:1d:d3:18:65:95: 15:5e:9d:14:70:88:2d:e2:16:16:4b:08:71:3c:b9: ad:65:08:a1:ab:b6:c6:d8:0c:bd:69:e7:23:27:b7: 2e:db:a2:4f:77:9e:6a:fb:7c:ba:ee:bb:3e:b7:fc: 5d:83:55:f0:f6:06:a5:70:57:f0:bf:3b:ef:e1:61: d1:7b:6a:03:8e:92:93:e2:1b:96:4c:52:47:74:f9: 29:d1:82:28:25:35:52:8f:88:b8:6f:44:11:6a:3e: 69:78:51:aa:3b:b3:59:eb:0e:73:b1:88:e0:5b:e3: 9e:c3:89:f9:58:e4:90:2f:3e:b3:05:8f:dc:de:17: eb:75:86:dc:87:28:5a:2e:ba:f0:2f:80:5b:16:35: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C9:56:F5:60:DC:49:2B:66:84:92:D3:29:DC:E0:A6:CF:34:41:71 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:df:b9:57:fb:e0:43:93:65:a3:bb:61:ba:76:e9:c9:f5:74: 6d:56:f2:c0:33:91:6f:d1:b0:32:37:f0:b9:00:95:20:4e:d0: ac:59:3c:d3:9c:f0:c4:db:9a:a1:e7:4f:aa:be:d2:f7:07:d9: 99:1d:f8:17:68:d3:f7:d2:4f:77:dd:fd:df:a3:9d:51:81:de: 3e:63:76:9d:d1:69:76:58:71:5b:da:3a:25:17:05:09:36:28: 25:05:e0:01:05:40:fb:90:e2:12:fe:c6:1e:9d:a0:13:1e:74: 02:87:18:fe:23:2a:76:42:b5:01:44:b1:28:b1:bb:15:27:af: 02:97:a8:0e:56:96:21:d1:b3:9c:d4:43:f1:6f:25:0b:61:89: 1f:ae:9c:57:2f:bd:90:86:9c:f0:e6:d2:a4:4d:fa:22:14:7b: 6e:45:14:f8:d0:88:4a:22:ca:65:7b:a4:d0:8d:a6:81:8c:f4: 72:89:2a:40:3d:c3:be:29:ff:58:6a:b1:3e:38:d9:6e:9c:14: 10:0d:5c:5f:f0:3c:84:ee:42:f0:10:3a:e3:70:f8:c4:6c:9f: 87:a8:e8:19:29:77:43:48:ee:d9:0b:25:9f:55:84:d3:e0:b7: 61:7c:ee:56:2e:19:c7:ff:a3:a0:8c:27:70:60:d6:06:56:59: 1b:ba:a8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwNzE5MDI0NzE5WhcNMjUwNzI2MDI0NzE5WjAYMRYwFAYD VQQDEw02ODdiMDczOC02NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08rbAKLZFtOY7ugh7KOzhtMORPL1BidMVzZTirmSs+OBLzeDVqTFqZXe7ZvD YmE8xYTXwLe3N2jYIBWTQbXaI7oL/5Qnu5wv3W4LM+EXNEiF3tAsufUKl6ZQ3wUO JTNpiC31kOxQCZveof43QW9RxqIJHdMYZZUVXp0UcIgt4hYWSwhxPLmtZQihq7bG 2Ay9aecjJ7cu26JPd55q+3y67rs+t/xdg1Xw9galcFfwvzvv4WHRe2oDjpKT4huW TFJHdPkp0YIoJTVSj4i4b0QRaj5peFGqO7NZ6w5zsYjgW+Oew4n5WOSQLz6zBY/c 3hfrdYbchyhaLrrwL4BbFjXJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTJVvVg 3EkrZoSS0ync4KbPNEFxMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC537lX++BDk2Wju2G6dunJ9XRtVvLAM5Fv0bAyN/C5AJUgTtCsWTzT nPDE25qh50+qvtL3B9mZHfgXaNP30k933f3fo51Rgd4+Y3ad0Wl2WHFb2jolFwUJ NiglBeABBUD7kOIS/sYenaATHnQChxj+Iyp2QrUBRLEosbsVJ68Cl6gOVpYh0bOc 1EPxbyULYYkfrpxXL72Qhpzw5tKkTfoiFHtuRRT40IhKIsple6TQjaaBjPRyiSpA PcO+Kf9YarE+ONlunBQQDVxf8DyE7kLwEDrjcPjEbJ+HqOgZKXdDSO7ZCyWfVYTT 4LdhfO5WLhnH/6OgjCdwYNYGVlkbuqh+ -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:42 2025 by rpki-client