$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: 3zIVIQ3/c5z+mQ1AGJeAsLdfZKp6xggTqd/CWXvCdWQ= Subject key identifier: D6:95:3C:6A:8E:3B:D4:AB:70:A4:09:33:86:3C:41:43:31:50:3B:54 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 3D Signing time: Sat 19 Jul 2025 07:49:48 +0000 Manifest this update: Sat 19 Jul 2025 07:49:47 +0000 Manifest next update: Sat 26 Jul 2025 07:49:47 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: tGFdHstqgGUjEh+0MGqkbphXFqwCVWBNpJsnB2UZMIM=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Jul 19 07:49:47 2025 GMT Not After : Jul 26 07:49:47 2025 GMT Subject: CN=687b4e1b-8be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:78:3f:d8:6c:67:c9:ae:ae:41:0e:ca:d1: 0c:3f:f9:5c:1d:2f:59:b0:a6:20:3a:23:c1:25:55: 5f:bb:5a:50:e2:7f:49:ec:24:26:f6:d7:6e:7f:ab: 6b:c5:91:bf:86:0d:56:74:8b:b7:35:5c:ca:0a:68: 10:8d:82:ef:a9:44:26:f1:72:e4:20:c2:84:f1:6e: fa:ea:3c:f3:ae:f5:96:12:1d:be:c1:94:44:6b:54: 5a:ee:62:0c:2d:8d:3c:f0:5a:c1:20:ae:34:82:18: e1:e1:89:28:a4:53:a7:c9:8a:79:ad:8b:6e:35:32: 55:5d:82:5c:de:0d:a4:81:61:ea:e6:c6:93:db:c1: 7b:24:e0:22:5b:89:04:a1:36:77:94:8f:03:0e:63: ea:46:bc:aa:8e:d6:ba:98:f2:72:a9:91:c4:a3:40: 64:32:03:07:7d:b4:1c:90:ab:33:c9:e1:32:90:1c: b0:56:a2:22:92:bc:2e:f5:55:a9:fc:e5:e8:82:4f: ad:11:0a:ed:1e:15:5d:e9:7d:7b:d0:dc:98:23:8e: 06:52:a7:4b:bc:ea:7a:3c:2b:63:2c:b4:bb:b9:b0: f7:a5:9d:ff:35:fd:b9:fd:51:39:b6:21:da:b4:dc: c3:00:01:5c:e6:c2:af:e6:23:aa:af:3f:cf:9a:aa: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:3C:6A:8E:3B:D4:AB:70:A4:09:33:86:3C:41:43:31:50:3B:54 X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a4:42:7d:f7:cd:8a:45:30:53:6a:42:50:e4:9e:f3:bb:d9: b4:83:86:ef:e3:5f:00:1b:f5:0e:70:b9:8c:c3:24:28:13:f0: 84:1b:43:a0:22:30:f5:b4:71:dd:e8:8a:9c:3e:3a:e5:c8:f4: 34:4e:85:d8:46:cc:fd:4a:31:15:b8:d0:5e:6c:34:fc:db:a3: d4:e5:a7:0e:0d:7a:67:4a:dd:a2:1f:b6:95:9e:c8:68:da:ed: 78:19:f7:05:29:2e:76:04:b4:a6:97:93:5c:52:07:4c:01:3e: 4c:86:44:db:7e:56:82:c7:82:e9:90:c1:45:98:db:0c:eb:20: ba:39:3e:14:e9:05:38:0f:94:b6:38:87:3c:bd:3b:2c:83:a4: 71:f6:57:50:a0:22:66:3c:86:83:7b:15:ee:13:7f:29:ec:44: 74:23:cc:89:e5:00:f6:ef:0e:63:5a:92:77:9a:b4:11:34:62: 0e:5d:19:b1:d3:55:9e:ed:21:77:60:d9:70:e1:42:0b:51:6d: 2b:79:89:3f:27:ea:6a:ec:6b:23:e3:fb:41:26:ce:f4:9e:62: 64:ea:d9:bc:f6:e6:de:7f:37:71:1d:80:21:53:d6:22:be:03: da:9e:be:87:0f:7d:dc:58:32:93:a3:9e:d8:4f:4f:39:bb:d4: 30:99:e1:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA3MTkwNzQ5NDdaFw0yNTA3MjYwNzQ5NDdaMBgxFjAUBgNV BAMTDTY4N2I0ZTFiLThiZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcsHg/2Gxnya6uQQ7K0Qw/+VwdL1mwpiA6I8ElVV+7WlDif0nsJCb2125/q2vF kb+GDVZ0i7c1XMoKaBCNgu+pRCbxcuQgwoTxbvrqPPOu9ZYSHb7BlERrVFruYgwt jTzwWsEgrjSCGOHhiSikU6fJinmti241MlVdglzeDaSBYermxpPbwXsk4CJbiQSh NneUjwMOY+pGvKqO1rqY8nKpkcSjQGQyAwd9tByQqzPJ4TKQHLBWoiKSvC71Van8 5eiCT60RCu0eFV3pfXvQ3JgjjgZSp0u86no8K2MstLu5sPelnf81/bn9UTm2Idq0 3MMAAVzmwq/mI6qvP8+aqsGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1pU8ao47 1KtwpAkzhjxBQzFQO1QwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKykQn33zYpFMFNqQlDknvO72bSDhu/jXwAb9Q5wuYzDJCgT8IQbQ6Ai MPW0cd3oipw+OuXI9DROhdhGzP1KMRW40F5sNPzbo9Tlpw4NemdK3aIftpWeyGja 7XgZ9wUpLnYEtKaXk1xSB0wBPkyGRNt+VoLHgumQwUWY2wzrILo5PhTpBTgPlLY4 hzy9OyyDpHH2V1CgImY8hoN7Fe4TfynsRHQjzInlAPbvDmNakneatBE0Yg5dGbHT VZ7tIXdg2XDhQgtRbSt5iT8n6mrsayPj+0EmzvSeYmTq2bz25t5/N3EdgCFT1iK+ A9qevocPfdxYMpOjnthPTzm71DCZ4aI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:06:55 2025 by rpki-client