$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft File: TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json) Hash identifier: Fp71Euvem1iOIFUCofYdCSN+wD4n2sxyiQSjqnFkqeg= Subject key identifier: 26:CA:0B:B8:87:BB:D9:4A:D6:FB:B5:05:F3:0F:4F:F6:AB:94:92:0F Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 Certificate issuer: /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Certificate serial: 0755 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft Manifest number: 0755 Signing time: Fri 30 May 2025 21:50:00 +0000 Manifest this update: Fri 30 May 2025 21:49:59 +0000 Manifest next update: Fri 06 Jun 2025 21:49:59 +0000 Files and hashes: 1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: YnmhEks6UE8TNHdmEwE+wktxAGdth6OGtpjegvCoyJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1877 (0x755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Validity Not Before: May 30 21:49:59 2025 GMT Not After : Jun 6 21:49:59 2025 GMT Subject: CN=683a2808-37ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:b5:13:36:4d:ab:a5:05:a6:81:ad:ad:9d: de:5f:7e:9b:0c:7c:37:93:05:30:51:ef:62:59:49: bb:79:b6:38:2e:df:5a:4b:4a:ad:52:fa:41:98:9c: c9:e6:d7:50:ff:8b:37:e7:a0:53:e2:2f:a4:f6:ce: 71:ae:88:52:fd:85:94:f5:0f:98:49:c5:3f:26:6b: 3e:63:16:4b:2b:92:56:b9:59:e4:de:ed:be:ef:c5: 05:23:14:f5:02:5a:75:8a:35:af:66:63:18:fe:76: 10:f8:7c:de:92:27:75:c1:2a:03:82:a3:4f:e5:05: 4a:05:27:f8:9e:ab:63:59:7c:80:9b:f4:7b:13:d0: 41:c3:5c:04:d0:fe:fc:b1:66:f7:91:83:a1:64:fe: 4d:4d:08:8c:2d:cd:2b:b5:d2:a9:3b:cf:8c:34:ab: c6:53:af:84:f7:dc:51:44:8e:4a:a7:e9:a9:43:98: 05:26:21:6b:d5:a7:78:ed:57:23:8d:cd:a2:24:84: 59:b1:ba:85:f8:0f:de:e3:dd:bb:8b:42:d6:08:3d: 8b:c4:25:d9:a5:ab:a6:02:2b:78:67:52:1f:93:e7: f0:18:69:40:75:4e:a8:21:32:66:95:87:81:d3:de: d4:53:a5:b4:bb:ec:17:32:24:fc:8d:c3:a8:23:0c: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:0B:B8:87:BB:D9:4A:D6:FB:B5:05:F3:0F:4F:F6:AB:94:92:0F X509v3 Authority Key Identifier: keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:6a:99:27:ff:2e:14:7c:9a:87:ec:44:b6:b4:0e:ec:09: aa:b4:58:c9:8f:d7:97:c2:28:fd:e0:fb:d6:75:be:68:e7:43: c7:b7:81:30:de:1b:8c:56:f4:de:9e:6d:01:4e:00:97:af:a4: 4a:a6:a0:4d:0b:26:14:7b:a8:c2:a7:9a:2d:49:ef:b0:a8:bd: 9f:f4:b7:2c:8b:a7:c3:d5:6c:78:4f:72:73:2d:95:88:d4:a1: ac:f5:a5:a8:e2:e2:f0:4b:d9:88:a7:6e:cd:62:90:5d:f5:0c: ef:60:da:2a:c4:37:5f:44:74:34:0e:79:c7:c7:35:40:46:de: 26:6f:18:65:17:45:fb:f4:c3:15:90:d2:3e:c4:96:15:a8:06: 3c:a1:93:85:63:ff:de:ae:f0:b9:38:18:96:b3:85:72:35:32: f3:ca:25:e9:f0:01:5d:a7:95:a7:30:78:49:6d:21:ce:0f:56: d8:43:a1:4a:1f:41:51:e8:01:2e:39:ac:e8:7a:9d:bf:50:8b: 12:02:ff:df:6e:d5:a7:e1:49:d4:b4:4b:c7:63:dc:3b:1a:37: 24:b5:8e:e0:d6:dc:1a:2f:3d:47:4a:8f:49:36:dc:20:dd:5e: 7f:f1:92:d6:92:ce:3c:fa:63:39:4e:45:c2:02:b8:46:38:e3: 09:3c:17:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMyRDk3ODVDMDBD QUVFRDZFNDQwHhcNMjUwNTMwMjE0OTU5WhcNMjUwNjA2MjE0OTU5WjAYMRYwFAYD VQQDEw02ODNhMjgwOC0zN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfa1EzZNq6UFpoGtrZ3eX36bDHw3kwUwUe9iWUm7ebY4Lt9aS0qtUvpBmJzJ 5tdQ/4s356BT4i+k9s5xrohS/YWU9Q+YScU/Jms+YxZLK5JWuVnk3u2+78UFIxT1 Alp1ijWvZmMY/nYQ+Hzekid1wSoDgqNP5QVKBSf4nqtjWXyAm/R7E9BBw1wE0P78 sWb3kYOhZP5NTQiMLc0rtdKpO8+MNKvGU6+E99xRRI5Kp+mpQ5gFJiFr1ad47Vcj jc2iJIRZsbqF+A/e4927i0LWCD2LxCXZpaumAit4Z1Ifk+fwGGlAdU6oITJmlYeB 097UU6W0u+wXMiT8jcOoIwzQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbKC7iH u9lK1vu1BfMPT/arlJIPMB8GA1UdIwQYMBaAFE0CTX7pO/BuePIMLZeFwAyu7W5E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI4OC8yRTMzRjhCMDFG RTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhHNTQ4Z3d0bDRYQURLN3Ri a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RRSk5mdWs3OEc1NDhnd3RsNFhBREs3dGJrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhH NTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz9mqZJ/8uFHyah+xEtrQO7AmqtFjJj9eXwij94PvWdb5o50PHt4Ew 3huMVvTenm0BTgCXr6RKpqBNCyYUe6jCp5otSe+wqL2f9Lcsi6fD1Wx4T3JzLZWI 1KGs9aWo4uLwS9mIp27NYpBd9QzvYNoqxDdfRHQ0DnnHxzVARt4mbxhlF0X79MMV kNI+xJYVqAY8oZOFY//ervC5OBiWs4VyNTLzyiXp8AFdp5WnMHhJbSHOD1bYQ6FK H0FR6AEuOazoep2/UIsSAv/fbtWn4UnUtEvHY9w7GjcktY7g1twaLz1HSo9JNtwg 3V5/8ZLWks48+mM5TkXCArhGOOMJPBcV -----END CERTIFICATE-----Generated at Sat May 31 17:51:31 2025 by rpki-client