$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: aRHbytRbjPGUTnDZoGDtEanQrRbwyQnEcmjXRyf/x+U= Subject key identifier: C5:BD:36:3E:D6:DA:99:4E:31:9D:02:D8:4A:07:22:B8:15:44:82:23 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0350 Signing time: Mon 21 Jul 2025 01:16:22 +0000 Manifest this update: Mon 21 Jul 2025 01:16:22 +0000 Manifest next update: Mon 28 Jul 2025 01:16:22 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: VGqj5R/91dkrqM1jlgXe9lNc/CTU8EGlZShcgPaeD5s=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Jul 21 01:16:22 2025 GMT Not After : Jul 28 01:16:22 2025 GMT Subject: CN=687d94e6-9914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:f6:42:df:66:34:9d:a5:05:93:c7:57:16: 21:b4:c9:d7:34:33:4c:9e:18:5c:a4:10:94:70:93: 0b:dc:d8:60:63:aa:31:90:43:bc:02:95:02:71:e9: f3:a2:e6:9a:e2:b2:48:f2:bf:e7:93:bd:94:20:e7: a1:74:b4:9d:96:e3:a2:8d:36:86:f5:93:82:bd:92: 10:31:1a:c2:66:b6:8a:46:2d:f7:11:ab:36:74:ee: 4e:f5:43:ef:37:d1:6c:be:60:51:75:7e:6d:0c:ec: 8e:d3:92:c0:4d:16:f6:74:0b:01:88:4a:24:5d:0b: df:e1:ad:19:1a:c5:eb:05:f0:4c:64:55:d5:48:7c: 81:ef:8b:4c:98:6b:ab:ee:19:3c:cc:63:4d:2d:de: 3d:0d:e2:06:00:ca:09:8b:4a:9a:83:e3:62:fa:09: 09:10:1a:2c:bc:c3:51:19:b3:ce:3b:8d:e2:7e:c6: e5:fc:a2:ff:80:23:af:0b:92:ca:ac:c6:7a:53:e0: 1e:86:90:6f:ad:af:2b:fd:84:6f:d9:46:f7:52:b7: 3d:6c:34:e0:4a:9a:f9:d2:50:4c:82:cf:a2:b4:c5: 3d:ce:b9:09:27:d7:81:7e:a2:86:7f:56:38:e8:0d: a4:b3:bb:94:68:ea:98:b5:01:25:3d:31:05:81:3f: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BD:36:3E:D6:DA:99:4E:31:9D:02:D8:4A:07:22:B8:15:44:82:23 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:70:8a:20:2b:a5:5e:ed:c1:3b:0e:98:5e:59:8b:61:96:25: fc:e3:b7:75:e7:74:c9:76:25:51:d1:82:23:1b:d3:16:04:55: ff:eb:e1:4e:ac:32:24:e7:78:f6:68:be:81:69:a5:5a:03:15: 21:16:ff:6b:54:1a:3f:37:ee:9c:ce:ff:43:46:55:d8:79:56: cf:9a:df:24:85:6c:d9:e9:d0:d8:65:31:0b:d6:9b:5c:dd:ca: b1:40:34:08:ce:25:3a:a9:20:8c:91:23:c2:00:4c:97:03:1b: ce:d0:64:20:83:ba:e6:e0:01:20:d8:cc:7b:7f:6b:a6:a0:7b: f8:2a:07:b9:d5:bb:32:c3:d6:d5:9b:e5:08:b1:9f:b5:df:c2: c7:12:bd:3f:fa:dd:a4:3f:76:ad:4d:06:f1:c2:a9:1f:0a:d8: 29:20:73:e1:e1:0f:a1:f3:86:0d:3e:a6:33:46:09:49:2b:8f: 1d:5e:3f:c5:6f:43:2a:31:e9:d5:18:91:59:3f:2b:47:29:e4: c1:9a:0a:f5:ab:8f:7b:be:18:53:49:36:e8:2c:01:cd:21:b5: 6b:34:a0:1e:15:db:b8:79:9e:07:72:27:81:0d:56:1e:1c:10: 0e:a7:06:8a:80:07:fd:a5:9a:fc:0a:e5:50:b4:91:7c:e3:69: 18:cc:6e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwNzIxMDExNjIyWhcNMjUwNzI4MDExNjIyWjAYMRYwFAYD VQQDEw02ODdkOTRlNi05OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1r2Qt9mNJ2lBZPHVxYhtMnXNDNMnhhcpBCUcJML3NhgY6oxkEO8ApUCcenz ouaa4rJI8r/nk72UIOehdLSdluOijTaG9ZOCvZIQMRrCZraKRi33Eas2dO5O9UPv N9FsvmBRdX5tDOyO05LATRb2dAsBiEokXQvf4a0ZGsXrBfBMZFXVSHyB74tMmGur 7hk8zGNNLd49DeIGAMoJi0qag+Ni+gkJEBosvMNRGbPOO43ifsbl/KL/gCOvC5LK rMZ6U+AehpBvra8r/YRv2Ub3Urc9bDTgSpr50lBMgs+itMU9zrkJJ9eBfqKGf1Y4 6A2ks7uUaOqYtQElPTEFgT+QHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW9Nj7W 2plOMZ0C2EoHIrgVRIIjMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdcIogK6Ve7cE7DpheWYthliX847d153TJdiVR0YIjG9MWBFX/6+FO rDIk53j2aL6BaaVaAxUhFv9rVBo/N+6czv9DRlXYeVbPmt8khWzZ6dDYZTEL1ptc 3cqxQDQIziU6qSCMkSPCAEyXAxvO0GQgg7rm4AEg2Mx7f2umoHv4Kge51bsyw9bV m+UIsZ+138LHEr0/+t2kP3atTQbxwqkfCtgpIHPh4Q+h84YNPqYzRglJK48dXj/F b0MqMenVGJFZPytHKeTBmgr1q497vhhTSTboLAHNIbVrNKAeFdu4eZ4HcieBDVYe HBAOpwaKgAf9pZr8CuVQtJF842kYzG5v -----END CERTIFICATE-----Generated at Mon Jul 21 12:49:04 2025 by rpki-client