$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: m8eo9ymWImGWwgwhqRI1Nh3Ob8TP2035w3q+WrIFeAM= Subject key identifier: 49:6F:D2:9F:C4:6F:65:28:43:63:F1:5A:63:47:53:FD:BB:FB:0A:F5 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: AD Signing time: Fri 13 Jun 2025 05:00:58 +0000 Manifest this update: Fri 13 Jun 2025 05:00:57 +0000 Manifest next update: Fri 20 Jun 2025 05:00:57 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: bhowdiSJodYhmn+kY5nqIc9OHrq4Wrre5qWUJF7bo+Y=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Jun 13 05:00:57 2025 GMT Not After : Jun 20 05:00:57 2025 GMT Subject: CN=684bb089-30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:e1:f7:35:7f:c2:e4:ff:98:80:ed:2e:c1: d5:9e:e3:1f:45:1b:e2:15:44:d3:43:75:c0:d3:07: 8b:fc:f6:dc:11:7e:89:df:fd:c2:13:ed:a7:26:84: 63:fd:0e:76:a3:f9:f5:04:6e:e8:f9:48:fa:95:c5: dd:00:1a:97:0b:ae:4f:ae:b7:9c:7f:79:42:0b:9a: 9f:d9:ef:e8:a4:8b:2f:8e:82:2d:04:ea:c8:80:41: b6:8d:bd:e7:e9:82:2c:da:75:dd:e4:71:28:f0:86: 42:8e:a8:fb:37:9f:48:9c:97:a2:b3:62:ea:fb:7f: a1:e3:bf:2a:ae:36:ba:0f:4d:13:39:1d:5c:79:94: ef:b2:c6:4f:c4:4e:a8:00:c0:b4:f6:95:be:ff:2d: 64:01:ac:be:55:b7:63:66:cf:93:6a:e4:a9:86:3e: 7f:33:d5:78:92:41:01:c8:98:cb:43:13:9b:d9:37: aa:ef:75:a2:46:5d:a6:17:ad:2d:1f:43:cd:a6:c4: 7a:0f:01:d1:1b:11:48:a7:98:2a:f5:75:31:55:9a: 0d:34:15:6e:60:30:3c:34:f2:2f:8c:8e:2d:89:7d: 9c:48:f2:a9:3c:a5:29:77:9e:05:74:c2:07:24:09: e1:38:2b:ef:03:fc:af:c7:15:3d:03:ba:e3:c8:de: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6F:D2:9F:C4:6F:65:28:43:63:F1:5A:63:47:53:FD:BB:FB:0A:F5 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ad:f8:1c:4c:12:f4:a5:86:27:89:28:61:75:4c:d0:1e:d1: fe:ce:1a:9e:14:d3:15:92:ea:e6:d9:ee:55:45:85:07:1a:08: 0a:b8:94:28:ca:2b:ba:78:bb:d8:17:bb:af:74:15:bb:09:6c: 33:a2:be:71:4a:ad:ee:54:c2:b4:fb:74:c3:09:43:2c:f1:f8: 95:77:77:30:00:91:19:3a:50:8a:5b:b8:61:59:c4:e9:6a:c5: 50:ce:3c:8d:84:17:5f:56:70:b4:59:2b:25:9f:9d:22:f4:60: a2:fa:da:c4:c8:1a:d7:8b:f5:1b:3a:35:24:41:f5:b7:b9:0d: 82:97:3f:1a:4f:88:f9:08:96:23:39:81:01:33:02:0f:b1:0a: 5b:21:7b:83:c8:40:e6:88:d8:d9:32:c4:96:9b:e7:ba:67:d5: 39:e1:68:71:d5:24:bb:bf:8c:7d:46:de:9f:2c:a7:f5:75:03: 8d:a8:47:17:9a:b2:eb:a2:ed:f6:e5:f8:0f:4b:ad:e9:71:ef: 19:fb:d0:64:ae:67:79:8c:29:e8:7a:c5:b9:9c:fb:81:32:79: 63:d7:a3:35:0e:38:f5:da:95:fb:65:97:31:c5:60:62:b5:fd: 06:52:29:b4:a0:74:54:ff:33:4c:a2:35:61:3a:80:b0:2f:c3: de:63:f0:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwNjEzMDUwMDU3WhcNMjUwNjIwMDUwMDU3WjAYMRYwFAYD VQQDEw02ODRiYjA4OS0zMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLXh9zV/wuT/mIDtLsHVnuMfRRviFUTTQ3XA0weL/PbcEX6J3/3CE+2nJoRj /Q52o/n1BG7o+Uj6lcXdABqXC65Prrecf3lCC5qf2e/opIsvjoItBOrIgEG2jb3n 6YIs2nXd5HEo8IZCjqj7N59InJeis2Lq+3+h478qrja6D00TOR1ceZTvssZPxE6o AMC09pW+/y1kAay+VbdjZs+TauSphj5/M9V4kkEByJjLQxOb2Teq73WiRl2mF60t H0PNpsR6DwHRGxFIp5gq9XUxVZoNNBVuYDA8NPIvjI4tiX2cSPKpPKUpd54FdMIH JAnhOCvvA/yvxxU9A7rjyN6lNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElv0p/E b2UoQ2PxWmNHU/27+wr1MB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIrfgcTBL0pYYniShhdUzQHtH+zhqeFNMVkurm2e5VRYUHGggKuJQo yiu6eLvYF7uvdBW7CWwzor5xSq3uVMK0+3TDCUMs8fiVd3cwAJEZOlCKW7hhWcTp asVQzjyNhBdfVnC0WSsln50i9GCi+trEyBrXi/UbOjUkQfW3uQ2Clz8aT4j5CJYj OYEBMwIPsQpbIXuDyEDmiNjZMsSWm+e6Z9U54Whx1SS7v4x9Rt6fLKf1dQONqEcX mrLrou325fgPS63pce8Z+9Bkrmd5jCnoesW5nPuBMnlj16M1Djj12pX7ZZcxxWBi tf0GUim0oHRU/zNMojVhOoCwL8PeY/AJ -----END CERTIFICATE-----Generated at Fri Jun 13 18:22:46 2025 by rpki-client