$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: YANqdnNgt9bh9dOTfhYFXTQF9XcnHlkZ7SdfVml4FsQ= Subject key identifier: 0E:3E:DD:AD:4D:E8:29:AF:B5:55:B8:92:80:2D:82:B4:42:6F:8B:1B Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 1F Signing time: Sat 19 Jul 2025 08:09:41 +0000 Manifest this update: Sat 19 Jul 2025 08:09:41 +0000 Manifest next update: Sat 26 Jul 2025 08:09:41 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: ozlOpK9alm3Zxay2sd1/8XpP3/z7KJm0FWzgUFYkPuI=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Jul 19 08:09:41 2025 GMT Not After : Jul 26 08:09:41 2025 GMT Subject: CN=687b52c5-9967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:39:cb:5b:1b:01:9d:59:b7:78:0b:3f:b7: a0:81:a7:89:d4:f6:c6:7c:f5:a4:57:6c:36:cc:06: e6:00:35:78:cd:68:88:f3:1b:77:36:13:5f:78:53: 75:0e:ef:99:40:a3:80:00:04:49:11:e0:14:6e:1d: 34:36:2c:ea:e2:48:7f:0b:82:6c:59:03:88:71:75: da:31:e9:b0:d7:9d:4d:11:ca:0f:75:41:1e:90:7e: 8e:09:c9:38:23:22:b0:a6:94:02:aa:77:d3:49:d6: f9:88:77:53:71:7d:f1:57:6a:b8:df:13:44:05:14: 23:8b:3f:bf:d3:e1:80:e2:80:fd:46:78:f5:38:07: 67:51:bf:b5:59:0e:4c:96:3c:3c:85:96:6a:b2:f8: 9b:e2:25:2c:90:b2:2b:e8:aa:d6:58:27:19:26:99: 12:30:0d:f8:d0:c9:9e:4c:f1:4f:e4:ab:96:54:e8: 4e:d5:05:bb:52:ed:38:06:bc:b2:f3:90:ac:0a:e5: 5a:0c:10:4f:0f:df:f6:96:4e:37:e2:fa:66:29:4a: fc:9f:1b:34:45:ea:a5:17:05:31:be:ac:91:18:5e: d3:8f:09:e5:7e:55:5a:43:f4:d5:51:1c:1e:cf:79: 94:04:e4:ea:83:fa:55:aa:c0:cf:da:16:02:2c:22: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3E:DD:AD:4D:E8:29:AF:B5:55:B8:92:80:2D:82:B4:42:6F:8B:1B X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7b:0b:0c:cb:f2:04:38:2f:72:2d:fa:a0:ef:27:08:14:d3: 87:2e:ed:9e:77:c1:0c:0b:e0:00:6e:92:91:a0:1a:fb:e7:8e: 1c:df:38:93:2e:45:af:84:47:6e:90:20:53:ea:d2:2f:6e:51: 7b:be:25:62:33:f2:e8:4f:88:03:d2:92:43:89:7a:84:26:84: e4:89:9f:c9:01:c1:6d:2f:49:87:0a:de:67:e9:cb:1e:87:5e: 03:ad:ee:aa:67:c8:a9:33:b3:34:d6:c3:2a:35:4c:bd:d0:4d: e4:a9:67:16:b1:28:81:4b:f4:60:99:4c:b5:37:5a:f4:69:95: eb:37:9c:d6:0f:df:ca:f7:3d:a8:14:25:62:93:48:05:53:7a: 02:bd:c4:c0:9d:44:72:f6:fa:40:56:ee:cf:60:2b:c2:a4:a2: 19:e2:87:fe:ce:cd:e6:13:63:5a:ce:8c:3e:b5:f9:f1:80:fc: 78:ff:63:0a:53:30:b7:1c:ca:d3:f0:a5:0b:28:2b:4f:2e:b1: cf:92:6e:31:3a:89:88:84:5f:73:45:2c:fd:3d:8e:a9:ea:79: 3f:ff:06:b3:ba:91:1a:93:39:4c:70:d9:39:f1:ff:78:d2:8f: 44:1e:79:d5:53:28:f9:50:37:5d:95:51:14:b8:8b:25:24:d6: bc:21:58:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTA3MTkwODA5NDFaFw0yNTA3MjYwODA5NDFaMBgxFjAUBgNV BAMTDTY4N2I1MmM1LTk5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM3znLWxsBnVm3eAs/t6CBp4nU9sZ89aRXbDbMBuYANXjNaIjzG3c2E194U3UO 75lAo4AABEkR4BRuHTQ2LOriSH8LgmxZA4hxddox6bDXnU0Ryg91QR6Qfo4JyTgj IrCmlAKqd9NJ1vmId1NxffFXarjfE0QFFCOLP7/T4YDigP1GePU4B2dRv7VZDkyW PDyFlmqy+JviJSyQsivoqtZYJxkmmRIwDfjQyZ5M8U/kq5ZU6E7VBbtS7TgGvLLz kKwK5VoMEE8P3/aWTjfi+mYpSvyfGzRF6qUXBTG+rJEYXtOPCeV+VVpD9NVRHB7P eZQE5OqD+lWqwM/aFgIsIgnDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDj7drU3o Ka+1VbiSgC2CtEJvixswHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALR7CwzL8gQ4L3It+qDvJwgU04cu7Z53wQwL4ABukpGgGvvnjhzfOJMu Ra+ER26QIFPq0i9uUXu+JWIz8uhPiAPSkkOJeoQmhOSJn8kBwW0vSYcK3mfpyx6H XgOt7qpnyKkzszTWwyo1TL3QTeSpZxaxKIFL9GCZTLU3WvRples3nNYP38r3PagU JWKTSAVTegK9xMCdRHL2+kBW7s9gK8Kkohnih/7OzeYTY1rOjD61+fGA/Hj/YwpT MLccytPwpQsoK08usc+SbjE6iYiEX3NFLP09jqnqeT//BrO6kRqTOUxw2Tnx/3jS j0QeedVTKPlQN12VURS4iyUk1rwhWCw= -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:18 2025 by rpki-client