$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: XOcNkNg707a+5pnbDv8gEUKEI+Ac6tTDz7UOkNx2yXM= Subject key identifier: F5:71:47:72:5B:FA:B1:6A:F7:4B:AC:02:E5:70:24:8B:46:08:D0:0F Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 99 Signing time: Mon 21 Jul 2025 06:39:19 +0000 Manifest this update: Mon 21 Jul 2025 06:39:18 +0000 Manifest next update: Mon 28 Jul 2025 06:39:18 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: aDDpJlPMAh0h41Mq0ufKWTjRm99qVQEyyVDK9fzBDmA=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: Nw7bdEXIt94l0l1M2JoUcNpjGgfJnBtSbrpDec58/34=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: DTme312dtWhjs1JFg94y153qtB+lMbeMxpbcIu8vIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Jul 21 06:39:18 2025 GMT Not After : Jul 28 06:39:18 2025 GMT Subject: CN=687de097-d6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:dd:30:86:1a:ed:44:88:21:c2:a9:09:37: c8:93:1d:53:ac:57:16:d2:5e:f2:ca:7f:3d:b6:94: 07:87:5f:aa:4f:94:fb:74:57:79:57:c6:e7:2f:4e: 44:d4:a9:f6:f1:47:c9:59:91:69:f8:2c:1e:3c:9d: 2c:4b:b7:98:f3:d2:be:41:f5:a0:58:d4:42:99:d5: f1:1b:07:1d:71:49:23:18:74:9e:3b:a0:19:45:95: 74:66:3d:7b:cd:4e:3f:21:48:2f:ff:48:e2:f1:8b: 6e:71:24:29:e4:e2:b4:8a:c7:08:59:09:32:24:6e: 37:19:68:6a:2c:ec:c5:7e:30:aa:08:32:ff:ff:3c: 84:d4:13:bb:43:2b:f7:49:ba:ca:37:b1:32:d9:f8: 58:d8:6c:cc:67:68:10:a6:e1:bd:cb:c2:d4:09:2f: 92:60:be:e7:26:18:d8:5d:6a:97:68:82:2c:b7:c9: d4:c2:7f:b0:7e:5e:77:02:f7:c0:58:be:93:c4:86: 91:03:d3:f0:bc:0b:bc:5d:af:cf:cf:38:75:86:5b: bf:ef:18:ea:ac:28:69:2c:91:96:56:b6:66:f1:a3: e9:5a:f7:0c:75:c9:6b:df:88:82:c1:fb:b7:6f:c2: 3d:01:46:7a:75:e9:eb:7f:19:cf:dd:d6:ad:ad:de: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:47:72:5B:FA:B1:6A:F7:4B:AC:02:E5:70:24:8B:46:08:D0:0F X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:fc:c4:f3:e0:8d:52:6e:6a:29:f4:ef:28:26:f0:35:9c: 64:be:7b:8d:6d:e1:be:1e:54:48:26:6f:69:22:4d:fb:f0:61: ef:6e:4c:f6:22:3b:a3:5a:d6:02:c0:d9:48:79:4e:0c:0d:5d: 5b:eb:03:ee:75:6a:be:09:b2:0f:23:92:63:af:10:15:b9:7c: d1:bf:17:77:87:3c:aa:2f:b8:59:b6:22:09:1e:28:7a:5d:b5: 1b:89:cf:4d:af:84:b2:d9:b6:13:81:42:d2:c9:37:f8:99:81: 79:c4:3e:6e:1f:e9:9b:b2:70:38:11:d8:7a:8d:b9:9b:e1:81: c0:24:ea:d0:5b:3a:ed:a2:f9:47:8b:2e:ec:3e:e9:08:27:ac: 42:03:31:83:06:04:90:e4:72:d4:64:46:04:a3:ad:a3:5c:eb: 89:66:0f:22:f3:da:92:5f:29:08:4a:93:56:ac:8d:98:5c:0e: 88:67:bf:f8:49:5c:dd:7c:c0:87:21:a4:b0:ea:b6:94:b5:dd: 14:a8:76:bd:48:b3:00:98:4e:c6:30:26:1d:ff:79:17:a3:f7: 65:ad:95:fc:a0:e9:72:06:c0:3c:78:b0:4c:86:91:20:ce:2d: 1b:d3:c9:a5:9f:8f:ee:55:6a:d2:00:ac:44:68:d7:4f:bf:3f: 77:1e:0b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwNzIxMDYzOTE4WhcNMjUwNzI4MDYzOTE4WjAYMRYwFAYD VQQDEw02ODdkZTA5Ny1kNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5brdMIYa7USIIcKpCTfIkx1TrFcW0l7yyn89tpQHh1+qT5T7dFd5V8bnL05E 1Kn28UfJWZFp+CwePJ0sS7eY89K+QfWgWNRCmdXxGwcdcUkjGHSeO6AZRZV0Zj17 zU4/IUgv/0ji8YtucSQp5OK0iscIWQkyJG43GWhqLOzFfjCqCDL//zyE1BO7Qyv3 SbrKN7Ey2fhY2GzMZ2gQpuG9y8LUCS+SYL7nJhjYXWqXaIIst8nUwn+wfl53AvfA WL6TxIaRA9PwvAu8Xa/Pzzh1hlu/7xjqrChpLJGWVrZm8aPpWvcMdclr34iCwfu3 b8I9AUZ6denrfxnP3datrd4yWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVxR3Jb +rFq90usAuVwJItGCNAPMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEgfzE8+CNUm5qKfTvKCbwNZxkvnuNbeG+HlRIJm9pIk378GHvbkz2 IjujWtYCwNlIeU4MDV1b6wPudWq+CbIPI5JjrxAVuXzRvxd3hzyqL7hZtiIJHih6 XbUbic9Nr4Sy2bYTgULSyTf4mYF5xD5uH+mbsnA4Edh6jbmb4YHAJOrQWzrtovlH iy7sPukIJ6xCAzGDBgSQ5HLUZEYEo62jXOuJZg8i89qSXykISpNWrI2YXA6IZ7/4 SVzdfMCHIaSw6raUtd0UqHa9SLMAmE7GMCYd/3kXo/dlrZX8oOlyBsA8eLBMhpEg zi0b08mln4/uVWrSAKxEaNdPvz93HgvH -----END CERTIFICATE-----Generated at Mon Jul 21 13:07:40 2025 by rpki-client