$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: EhCEoFEkgHehlAWj8d5bmB5PooBrzMGQb+j5WOdrUpI= Subject key identifier: 99:33:FE:0A:18:4F:6B:B6:6B:56:78:3C:BA:A7:3C:E3:36:84:59:B4 Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: D6 Signing time: Mon 21 Jul 2025 05:44:15 +0000 Manifest this update: Mon 21 Jul 2025 05:44:14 +0000 Manifest next update: Mon 28 Jul 2025 05:44:14 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: e87DNkMlxW94YqQkh37LyhpRq0IkvT9TCJCmzItsDwY=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Jul 21 05:44:14 2025 GMT Not After : Jul 28 05:44:14 2025 GMT Subject: CN=687dd3af-5ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:8d:a4:80:14:85:85:2c:55:da:6d:ae:02: f0:7b:b1:59:f8:5c:a2:e4:26:58:a2:72:20:01:52: 87:21:7e:62:53:4a:94:c2:2a:f3:26:59:9c:75:5d: 5c:7e:31:9b:69:a3:64:06:bc:a0:bb:46:62:95:a5: fc:9e:bd:dd:b9:32:50:59:d9:75:76:26:d5:07:4a: 01:9c:26:68:d2:d7:7f:b4:53:45:59:8a:5a:de:95: dc:77:2c:d5:60:ef:4b:b6:61:66:29:2a:ca:7d:e1: e1:d8:bd:a1:00:91:5f:c1:ce:10:f8:90:f1:a6:ff: 49:da:79:87:82:15:4e:a5:2b:5a:0f:d0:bc:78:dc: 8c:66:9a:21:6a:57:2c:ab:47:c4:58:29:70:b3:59: f1:30:42:2b:0f:c9:eb:57:c4:9e:85:9d:82:76:4e: e3:87:bd:9b:7d:9c:a0:67:fc:4d:89:64:f3:92:df: 10:c8:33:52:b3:bb:cd:25:04:d6:47:3b:61:b9:07: ec:ae:b9:6a:f7:19:c4:24:ae:8e:b2:44:e5:90:c1: 9f:4e:5d:25:de:6a:7f:0d:a4:c5:83:1d:1c:ef:2c: 5a:2a:52:c8:99:c1:2c:86:a5:c7:62:8a:64:78:cf: 8d:2f:65:c2:24:dd:2d:8f:37:f2:45:bc:8b:b6:98: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:33:FE:0A:18:4F:6B:B6:6B:56:78:3C:BA:A7:3C:E3:36:84:59:B4 X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:60:5b:50:21:09:81:e7:a9:ff:4d:05:da:3b:99:59:d9:25: b5:12:09:d2:a0:d3:a8:e2:8a:82:20:7e:4d:89:47:a9:6e:e4: ff:d9:e2:cf:e4:c4:e0:cc:94:29:eb:ac:46:f5:6a:24:be:4f: 3e:8d:f3:4d:45:84:b3:ee:67:2d:6c:04:36:8b:d1:48:4f:a9: 3b:5c:db:c4:2c:11:fc:ba:a1:67:9f:40:af:10:d6:06:dd:6a: 0e:94:47:97:5a:c8:a8:ac:fb:54:64:ae:be:2a:ca:78:2b:9e: 5e:eb:09:15:68:1c:7a:e0:1b:b7:50:58:23:2b:c5:16:0e:d4: 93:30:c4:6e:e7:5b:d4:23:e0:b1:cc:09:f2:ec:bc:5f:3d:46: e6:db:59:ac:55:be:d3:5c:7d:e8:1e:93:00:45:69:6f:c4:36: 28:76:81:ef:36:a9:22:8b:bc:13:69:ea:21:8a:47:60:08:db: db:3d:26:62:37:58:52:33:8b:cb:09:ef:62:db:24:a1:32:2b: 2f:22:06:47:ef:62:13:37:5d:0e:db:68:53:f2:45:2d:04:69: 7f:5c:25:6f:17:d6:0b:e9:b6:04:64:85:ea:91:ca:86:7c:ec: 7b:cf:c0:fb:39:8f:07:55:b7:5b:e4:2e:4c:da:16:bf:f7:bf: e3:bf:25:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUwNzIxMDU0NDE0WhcNMjUwNzI4MDU0NDE0WjAYMRYwFAYD VQQDEw02ODdkZDNhZi01Y2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLiNpIAUhYUsVdptrgLwe7FZ+Fyi5CZYonIgAVKHIX5iU0qUwirzJlmcdV1c fjGbaaNkBrygu0ZilaX8nr3duTJQWdl1dibVB0oBnCZo0td/tFNFWYpa3pXcdyzV YO9LtmFmKSrKfeHh2L2hAJFfwc4Q+JDxpv9J2nmHghVOpStaD9C8eNyMZpohalcs q0fEWClws1nxMEIrD8nrV8SehZ2Cdk7jh72bfZygZ/xNiWTzkt8QyDNSs7vNJQTW RzthuQfsrrlq9xnEJK6OskTlkMGfTl0l3mp/DaTFgx0c7yxaKlLImcEshqXHYopk eM+NL2XCJN0tjzfyRbyLtphr7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkz/goY T2u2a1Z4PLqnPOM2hFm0MB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABYFtQIQmB56n/TQXaO5lZ2SW1EgnSoNOo4oqCIH5NiUepbuT/2eLP 5MTgzJQp66xG9Wokvk8+jfNNRYSz7mctbAQ2i9FIT6k7XNvELBH8uqFnn0CvENYG 3WoOlEeXWsiorPtUZK6+Ksp4K55e6wkVaBx64Bu3UFgjK8UWDtSTMMRu51vUI+Cx zAny7LxfPUbm21msVb7TXH3oHpMARWlvxDYodoHvNqkii7wTaeohikdgCNvbPSZi N1hSM4vLCe9i2yShMisvIgZH72ITN10O22hT8kUtBGl/XCVvF9YL6bYEZIXqkcqG fOx7z8D7OY8HVbdb5C5M2ha/97/jvyVN -----END CERTIFICATE-----Generated at Mon Jul 21 07:52:11 2025 by rpki-client