$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: 2MP1DcB1uOghgH/SQl4PoAeABcok3fomw3+ckrNP8zg= Subject key identifier: 05:75:9A:0A:6C:80:71:EE:E8:68:28:DB:09:73:B6:6B:D7:34:08:D6 Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 053C Signing time: Fri 30 May 2025 23:39:16 +0000 Manifest this update: Fri 30 May 2025 23:39:15 +0000 Manifest next update: Fri 06 Jun 2025 23:39:15 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: I8TchPs1zr4tMCwAgRkwbGI/tGZqIXCZOedGWELBzq0=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: YGvbQnTcIdlfOTH6YnyF9Rzx2xpGEbYHp7xYeN5ch34=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: WH1se2Qhy8RI1ONvLaN4qa1WrKYL/nqvZGw9A9exjh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: May 30 23:39:15 2025 GMT Not After : Jun 6 23:39:15 2025 GMT Subject: CN=683a41a3-8e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:c0:4d:87:af:6c:30:dd:9d:ec:7d:23:5c: 31:c8:44:4e:3a:98:2f:72:7c:a7:a7:dd:2a:b6:7a: 06:79:0a:6a:8a:e2:03:78:04:2b:02:1c:69:d8:e3: af:89:7f:37:33:2f:9d:6f:69:86:35:11:79:74:2d: 77:36:5c:c1:11:30:27:80:46:3b:83:d5:f5:e6:82: 34:40:0f:4a:df:44:ba:df:38:a2:de:53:fe:ae:65: 7d:9e:05:95:51:bd:1b:d9:a4:4d:bb:f7:b8:e2:80: 47:d2:dc:60:52:ee:6a:86:0d:77:1b:8b:99:06:62: 6f:ec:7a:c9:f1:fc:ad:d0:91:14:3e:3a:97:2c:c5: 01:6e:ab:f8:67:6d:ab:44:e2:48:fc:ef:94:fd:69: 0a:cf:7f:a4:24:71:63:cb:c3:74:d6:1e:21:d9:d5: 06:af:3d:5a:03:9d:5c:82:ee:17:91:d5:97:44:af: 5d:6b:bf:a1:4e:bc:aa:8f:ba:ee:7f:b5:ea:69:03: 9e:59:b5:db:0a:ac:6d:1c:70:2d:28:7c:9f:ed:3d: 85:fe:2f:05:7f:5b:29:cc:fc:10:c0:d1:ca:ff:cb: bd:6b:7c:3c:32:42:82:87:4c:62:cf:61:05:40:4f: 25:85:21:f8:1d:16:b0:1d:65:98:ec:9e:b2:4e:fc: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:9A:0A:6C:80:71:EE:E8:68:28:DB:09:73:B6:6B:D7:34:08:D6 X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:bb:ba:ac:97:a0:b0:8a:c6:25:e3:03:dd:7f:99:60:9e: 9f:89:b5:a9:14:7a:a9:4d:a6:08:78:be:91:ac:b3:06:95:3f: 33:d3:d0:49:3a:f9:5c:16:db:de:82:03:05:ff:c2:41:af:59: fd:69:5a:e9:c2:0c:71:de:5e:a5:47:be:9c:6e:0e:90:e0:06: 13:59:ca:e0:a1:e8:a4:0f:9e:24:69:d7:7b:06:bf:96:62:34: 09:50:b1:28:d7:f1:ac:9c:ca:a0:f0:62:0d:18:70:31:b4:21: cb:1f:b9:f4:01:9d:53:51:44:c9:7e:63:1e:55:56:2f:42:a5: f5:9f:a5:b4:71:26:9e:99:d0:d2:67:d1:1f:c1:2d:9d:df:9e: 1f:f0:89:83:d7:78:3a:5d:ee:e1:6b:42:40:bb:d8:e2:65:56: ec:9d:c4:80:f4:21:9c:c3:d5:23:90:54:eb:24:ab:aa:a0:d5: df:1b:55:b6:da:f9:ed:5f:20:eb:b7:68:0b:7d:16:58:dd:b8: c4:bc:a8:1d:13:50:7a:ea:bb:56:a6:a3:58:15:6b:3f:d3:1d: 7c:3d:ff:91:99:32:f1:25:51:a4:2b:92:d3:74:5e:fd:47:23: ec:86:e1:f3:7d:f1:1c:9d:fe:15:b4:ab:3d:d6:04:1a:13:21: 1d:25:b0:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUwNTMwMjMzOTE1WhcNMjUwNjA2MjMzOTE1WjAYMRYwFAYD VQQDEw02ODNhNDFhMy04ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkjATYevbDDdnex9I1wxyEROOpgvcnynp90qtnoGeQpqiuIDeAQrAhxp2OOv iX83My+db2mGNRF5dC13NlzBETAngEY7g9X15oI0QA9K30S63zii3lP+rmV9ngWV Ub0b2aRNu/e44oBH0txgUu5qhg13G4uZBmJv7HrJ8fyt0JEUPjqXLMUBbqv4Z22r ROJI/O+U/WkKz3+kJHFjy8N01h4h2dUGrz1aA51cgu4XkdWXRK9da7+hTryqj7ru f7XqaQOeWbXbCqxtHHAtKHyf7T2F/i8Ff1spzPwQwNHK/8u9a3w8MkKCh0xiz2EF QE8lhSH4HRawHWWY7J6yTvyYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV1mgps gHHu6Ggo2wlztmvXNAjWMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Tru6rJegsIrGJeMD3X+ZYJ6fibWpFHqpTaYIeL6RrLMGlT8z09BJ OvlcFtveggMF/8JBr1n9aVrpwgxx3l6lR76cbg6Q4AYTWcrgoeikD54kadd7Br+W YjQJULEo1/GsnMqg8GINGHAxtCHLH7n0AZ1TUUTJfmMeVVYvQqX1n6W0cSaemdDS Z9EfwS2d354f8ImD13g6Xe7ha0JAu9jiZVbsncSA9CGcw9UjkFTrJKuqoNXfG1W2 2vntXyDrt2gLfRZY3bjEvKgdE1B66rtWpqNYFWs/0x18Pf+RmTLxJVGkK5LTdF79 RyPshuHzffEcnf4VtKs91gQaEyEdJbD0 -----END CERTIFICATE-----Generated at Sat May 31 16:25:52 2025 by rpki-client