$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: cNxEi8EFRPOB3Ng7j8FE+h+PWBLSVue0eDYHQNTJtEA= Subject key identifier: 0E:5D:54:A5:EB:FD:84:A1:47:C5:C5:C7:FC:A1:66:59:2E:59:CF:3C Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0257 Signing time: Sat 19 Jul 2025 02:14:51 +0000 Manifest this update: Sat 19 Jul 2025 02:14:51 +0000 Manifest next update: Sat 26 Jul 2025 02:14:51 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: H1HqMqgwIde2Y4tVj0DL1h1iRiZ87+ubCzzYQaWDMag=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Jul 19 02:14:51 2025 GMT Not After : Jul 26 02:14:51 2025 GMT Subject: CN=687aff9b-b585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:8c:7b:e9:65:f7:ee:10:ea:53:98:a8:96: 08:d8:6c:f4:ab:96:af:fe:5a:58:e0:75:89:4c:33: de:16:9b:89:80:2f:e7:b2:82:06:0b:16:67:f1:05: fb:46:26:11:11:5a:71:84:0f:42:fc:55:7a:ff:78: f9:3a:f8:17:79:14:de:ea:64:56:2a:b7:e4:ea:93: 6c:5a:ed:6f:50:d0:9d:77:b8:c1:50:e9:67:3d:60: 27:f3:cf:15:70:d5:8a:0e:1b:42:5f:0e:ea:1f:0a: aa:f1:86:68:6f:ab:c0:99:f9:31:12:c2:e7:d8:00: 2c:e0:aa:87:60:a6:ba:49:e8:a3:5c:0f:55:12:d5: 63:bb:7a:9e:99:47:1a:f8:03:76:26:a9:5d:88:90: cb:49:a7:dd:24:5e:fe:24:c2:67:39:c0:be:64:43: f9:23:9b:b9:5e:b2:6e:aa:6e:ac:d1:14:dc:a2:aa: 09:00:e0:90:6a:d4:86:e4:3c:9a:7b:9d:6a:dd:d0: d3:33:15:87:5e:a8:cd:6f:17:c2:a6:93:eb:df:f4: 38:38:b5:f6:d5:8c:e0:c0:22:06:b4:59:00:eb:3f: 10:7d:b4:c1:e9:f8:26:f2:ce:e3:36:13:dc:8f:f4: 7f:c5:f5:11:aa:e4:bf:ba:f1:5c:fa:90:97:8a:ca: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:54:A5:EB:FD:84:A1:47:C5:C5:C7:FC:A1:66:59:2E:59:CF:3C X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:64:d3:4d:b3:1f:d2:32:fc:7e:75:ac:df:36:d6:0b:c6:31: ec:5c:f2:11:58:44:ee:b6:60:59:f6:de:6f:02:ef:60:39:5b: 06:5f:cb:4f:12:70:67:b3:7b:11:3f:d5:b6:40:72:52:f8:b8: 7d:e0:8b:0f:60:89:4a:79:e8:d8:f9:32:23:9d:fb:67:b1:2a: b6:56:ae:88:a6:c0:c3:3f:cb:ff:9d:e5:39:ae:7e:98:77:7e: e9:50:c3:50:f2:e9:d0:47:da:44:de:96:4d:f1:84:67:a7:bf: a2:08:17:6d:60:af:4a:6d:6a:6a:0c:e0:bd:30:a0:87:c8:66: b1:4c:d7:04:06:1a:15:8b:db:52:c8:9e:42:48:c8:6d:d9:d0: ec:1f:e2:f6:68:12:45:a8:d4:1b:72:b0:2f:c9:7e:e3:4c:6a: a1:84:58:4c:f4:07:a0:05:c0:f5:e9:c8:b4:25:5d:aa:bf:46: d8:67:f0:6b:a8:76:3f:06:83:a0:df:49:c4:d1:04:50:93:d9: 84:6f:e1:4d:b7:7f:0d:af:98:91:b2:03:96:f9:21:f6:1c:63: 6f:0c:f5:8c:1d:d5:84:ea:87:39:1d:d4:ae:8b:f6:89:68:08: 09:7e:e3:7a:c3:64:97:ba:d5:ac:b0:cb:b3:4c:2f:b6:47:c8: 45:85:19:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwNzE5MDIxNDUxWhcNMjUwNzI2MDIxNDUxWjAYMRYwFAYD VQQDEw02ODdhZmY5Yi1iNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgmMe+ll9+4Q6lOYqJYI2Gz0q5av/lpY4HWJTDPeFpuJgC/nsoIGCxZn8QX7 RiYREVpxhA9C/FV6/3j5OvgXeRTe6mRWKrfk6pNsWu1vUNCdd7jBUOlnPWAn888V cNWKDhtCXw7qHwqq8YZob6vAmfkxEsLn2AAs4KqHYKa6SeijXA9VEtVju3qemUca +AN2JqldiJDLSafdJF7+JMJnOcC+ZEP5I5u5XrJuqm6s0RTcoqoJAOCQatSG5Dya e51q3dDTMxWHXqjNbxfCppPr3/Q4OLX21YzgwCIGtFkA6z8QfbTB6fgm8s7jNhPc j/R/xfURquS/uvFc+pCXisqTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5dVKXr /YShR8XFx/yhZlkuWc88MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzZNNNsx/SMvx+dazfNtYLxjHsXPIRWETutmBZ9t5vAu9gOVsGX8tP EnBns3sRP9W2QHJS+Lh94IsPYIlKeejY+TIjnftnsSq2Vq6IpsDDP8v/neU5rn6Y d37pUMNQ8unQR9pE3pZN8YRnp7+iCBdtYK9KbWpqDOC9MKCHyGaxTNcEBhoVi9tS yJ5CSMht2dDsH+L2aBJFqNQbcrAvyX7jTGqhhFhM9AegBcD16ci0JV2qv0bYZ/Br qHY/BoOg30nE0QRQk9mEb+FNt38Nr5iRsgOW+SH2HGNvDPWMHdWE6oc5HdSui/aJ aAgJfuN6w2SXutWssMuzTC+2R8hFhRlc -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:17 2025 by rpki-client