$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: vrQqb8PH1y0xDQloBosQF5sIdRRUdJsP838E+mjsiSA= Subject key identifier: 84:00:00:1F:A3:EC:39:FE:C4:3C:CA:F4:90:1A:A5:B2:B3:3D:72:F0 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 01D1 Signing time: Sat 31 May 2025 02:35:31 +0000 Manifest this update: Sat 31 May 2025 02:35:30 +0000 Manifest next update: Sat 07 Jun 2025 02:35:30 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: IzTOF7VJYvEr8A+yOmHy7q3ND5XW7RN85I8AsWEqIx0=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: May 31 02:35:30 2025 GMT Not After : Jun 7 02:35:30 2025 GMT Subject: CN=683a6af3-8d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:76:0f:aa:76:3c:5e:fe:d0:d3:c7:74:91: 48:08:c6:c6:91:19:1b:b6:f3:f2:9a:af:31:ae:66: 37:94:52:c1:10:55:e4:14:7d:bd:5c:e2:4d:a3:59: 14:07:66:d0:e2:39:4b:ad:8c:71:7b:09:02:6a:85: 2b:6c:a3:4d:60:e4:46:ab:50:6a:e1:78:8b:74:5a: 4b:b6:36:93:30:8c:39:30:43:c7:51:0f:77:7b:c8: 79:76:e3:66:18:88:b4:07:57:8c:c2:ac:cc:ae:8b: 44:31:8d:d3:27:54:a2:a7:8b:3f:fb:a9:4b:3d:e0: 02:5a:6f:03:f3:b3:64:e4:74:dc:3f:cb:99:19:e2: ca:15:de:d2:94:f9:c3:a6:02:9f:bb:c2:2c:cc:56: 39:2d:72:0e:0a:e4:15:35:24:72:a2:41:a9:17:09: 06:dc:16:df:f5:dc:31:0c:15:11:21:65:a9:2d:41: 5f:d2:8b:38:90:17:d4:38:84:ab:cf:7e:ae:70:aa: e7:cb:b7:13:53:6b:c8:19:17:79:6c:80:fe:a1:6c: 97:60:36:43:1c:d4:9a:d3:83:a2:fc:85:4a:52:f9: 6c:88:30:87:d7:68:43:0f:6c:99:ed:a0:c1:34:9f: 0a:8c:97:9d:d8:57:71:41:c6:7f:fb:ae:86:bc:b0: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:00:1F:A3:EC:39:FE:C4:3C:CA:F4:90:1A:A5:B2:B3:3D:72:F0 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:52:54:00:67:80:8e:71:fd:d0:ab:c9:7a:21:57:12:15:01: 72:84:8c:58:38:12:76:0c:2e:54:bd:4a:d7:b9:f2:ff:d0:64: 17:19:66:73:56:24:44:95:dc:fa:a0:33:b0:9e:08:a5:f6:43: 37:71:e0:ed:88:c2:3c:04:08:2f:0f:56:da:09:be:f2:f9:b9: 00:04:fe:f3:97:b7:0b:c8:3d:84:7b:f9:e4:9d:59:2d:52:69: e6:3a:81:d5:36:6e:a7:b8:51:4d:df:94:59:dd:95:3a:f3:86: 93:57:aa:61:78:aa:d9:e6:ab:ab:11:4d:17:ee:df:1a:89:26: 65:0e:59:ce:9e:13:3f:74:63:74:cf:e4:77:b2:52:f9:a5:ce: 9d:f9:5f:9e:86:be:3d:ae:9c:d3:39:cc:fc:c9:a7:03:5d:a1: ef:25:ab:73:86:3f:bc:eb:d6:9a:bc:e3:5f:a9:f6:36:90:65: f5:40:ed:fe:58:5c:58:d4:b5:fe:0d:56:94:29:95:eb:0a:4a: d4:f1:62:46:80:43:e5:48:e1:75:96:91:f9:cc:03:b8:cd:73: e0:81:ee:77:ad:a6:e7:4d:f6:a0:f5:25:b4:07:7f:b9:f0:ed: ef:bc:2a:e5:88:7e:54:18:58:28:30:de:3e:64:68:94:ef:ed: ac:ba:19:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwNTMxMDIzNTMwWhcNMjUwNjA3MDIzNTMwWjAYMRYwFAYD VQQDEw02ODNhNmFmMy04ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNJ2D6p2PF7+0NPHdJFICMbGkRkbtvPymq8xrmY3lFLBEFXkFH29XOJNo1kU B2bQ4jlLrYxxewkCaoUrbKNNYORGq1Bq4XiLdFpLtjaTMIw5MEPHUQ93e8h5duNm GIi0B1eMwqzMrotEMY3TJ1Sip4s/+6lLPeACWm8D87Nk5HTcP8uZGeLKFd7SlPnD pgKfu8IszFY5LXIOCuQVNSRyokGpFwkG3Bbf9dwxDBURIWWpLUFf0os4kBfUOISr z36ucKrny7cTU2vIGRd5bID+oWyXYDZDHNSa04Oi/IVKUvlsiDCH12hDD2yZ7aDB NJ8KjJed2FdxQcZ/+66GvLD0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQAAB+j 7Dn+xDzK9JAapbKzPXLwMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5UlQAZ4COcf3Qq8l6IVcSFQFyhIxYOBJ2DC5UvUrXufL/0GQXGWZz ViREldz6oDOwngil9kM3ceDtiMI8BAgvD1baCb7y+bkABP7zl7cLyD2Ee/nknVkt UmnmOoHVNm6nuFFN35RZ3ZU684aTV6pheKrZ5qurEU0X7t8aiSZlDlnOnhM/dGN0 z+R3slL5pc6d+V+ehr49rpzTOcz8yacDXaHvJatzhj+869aavONfqfY2kGX1QO3+ WFxY1LX+DVaUKZXrCkrU8WJGgEPlSOF1lpH5zAO4zXPgge53rabnTfag9SW0B3+5 8O3vvCrliH5UGFgoMN4+ZGiU7+2suhkl -----END CERTIFICATE-----Generated at Sat May 31 17:06:32 2025 by rpki-client