$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: UJVnVhPPUkUGUJ/F3uBCifrwRWaajAZXEcwPP6cRUHo= Subject key identifier: 04:29:64:4B:F7:55:5B:C9:F4:F5:C0:DF:D0:4A:8E:B1:BC:A6:0D:8A Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 192A Signing time: Fri 30 May 2025 17:47:47 +0000 Manifest this update: Fri 30 May 2025 17:47:47 +0000 Manifest next update: Fri 06 Jun 2025 17:47:47 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: USmVoX4eyqEkwar9/1/gPmnsVk/p/a0/zOOuJGn7W8g=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: May 30 17:47:47 2025 GMT Not After : Jun 6 17:47:47 2025 GMT Subject: CN=6839ef43-fb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:5d:ac:d5:1b:c6:36:20:0e:a7:c3:e9:11: 19:e3:7e:ed:b7:ac:57:a8:72:6c:0f:c2:cc:7e:50: 77:32:4a:aa:78:00:af:5b:48:39:ec:a3:6d:e5:ee: c0:7b:8b:fc:ad:c5:7a:73:5c:dc:e4:05:f7:50:59: 40:81:01:c8:b3:e0:0a:43:de:66:e3:fa:86:1b:80: 32:c1:d0:db:51:fa:f0:ca:66:a4:71:2d:80:e5:a2: e1:aa:d3:32:6f:c0:8d:56:6d:fc:21:a8:44:17:5c: 1a:b1:b2:64:5a:ec:43:7b:4d:02:56:32:ba:65:26: 9e:7b:20:05:cb:38:3b:5f:11:10:04:da:a1:81:99: 87:d9:a6:45:d3:a7:61:7e:91:87:ca:f3:29:c5:81: 94:01:b1:04:da:6c:c0:d6:62:60:ec:f8:a7:f7:20: 61:76:78:47:5e:36:cc:f1:a3:73:85:f7:6e:83:8f: e3:6b:f1:16:86:a7:b7:1c:d3:e5:aa:4b:51:08:e9: 2b:cb:42:d6:33:fa:e3:2f:77:a5:ee:de:e1:32:c4: 7c:74:da:73:81:a1:67:55:4e:f2:78:3f:6a:61:cb: c9:0a:2d:d5:cc:34:41:24:18:7c:f6:c4:72:19:a5: 1e:f0:db:4c:35:ed:29:98:3e:9c:13:c4:66:04:c5: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:64:4B:F7:55:5B:C9:F4:F5:C0:DF:D0:4A:8E:B1:BC:A6:0D:8A X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e5:6f:c9:1f:2f:e0:22:63:34:d4:9d:4d:ee:5e:fa:3d:16: ae:7e:b6:5c:7a:79:2a:f5:ec:51:a1:4d:b4:a8:68:a4:19:8c: e4:59:ff:1d:4c:38:c8:f5:4b:a4:b4:fb:dd:4d:e1:36:35:4e: 3c:78:e1:5d:1e:eb:9c:5e:92:1a:27:e4:e7:16:4a:f8:97:1d: 2b:16:83:c8:8f:1c:f9:30:24:68:b4:a3:7a:5c:ef:a1:2f:bd: 94:17:50:e8:5f:05:fb:d0:cc:67:f1:13:f8:5d:51:fa:7c:2b: 5b:ca:bc:3d:35:da:28:9c:14:a7:61:0a:8e:0c:10:47:44:37: 99:07:4a:a4:b2:d6:a2:15:ec:a5:e2:1e:09:0a:f3:49:3a:96: f5:bb:27:b5:52:50:5a:90:c9:a6:cf:75:1d:bf:61:c2:50:d8: 8d:4e:ef:8c:a0:f8:9a:e3:de:0b:07:d2:45:4a:ce:94:82:eb: 2c:a0:05:29:13:1b:2b:3e:ed:ad:03:38:28:a6:27:1d:dd:2c: cc:cd:2f:aa:ce:1c:55:5b:9c:a3:d7:46:fa:b0:8a:4b:97:d1: 13:cd:b6:6c:9a:e5:4b:12:b3:96:31:28:7b:63:13:a4:05:7f: c3:02:ef:d5:09:77:5b:72:d5:11:49:81:02:eb:7c:11:d1:e8: b7:0b:8b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNTMwMTc0NzQ3WhcNMjUwNjA2MTc0NzQ3WjAYMRYwFAYD VQQDEw02ODM5ZWY0My1mYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaldrNUbxjYgDqfD6REZ437tt6xXqHJsD8LMflB3MkqqeACvW0g57KNt5e7A e4v8rcV6c1zc5AX3UFlAgQHIs+AKQ95m4/qGG4AywdDbUfrwymakcS2A5aLhqtMy b8CNVm38IahEF1wasbJkWuxDe00CVjK6ZSaeeyAFyzg7XxEQBNqhgZmH2aZF06dh fpGHyvMpxYGUAbEE2mzA1mJg7Pin9yBhdnhHXjbM8aNzhfdug4/ja/EWhqe3HNPl qktRCOkry0LWM/rjL3el7t7hMsR8dNpzgaFnVU7yeD9qYcvJCi3VzDRBJBh89sRy GaUe8NtMNe0pmD6cE8RmBMUriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQpZEv3 VVvJ9PXA39BKjrG8pg2KMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF5W/JHy/gImM01J1N7l76PRaufrZcenkq9exRoU20qGikGYzkWf8d TDjI9UuktPvdTeE2NU48eOFdHuucXpIaJ+TnFkr4lx0rFoPIjxz5MCRotKN6XO+h L72UF1DoXwX70Mxn8RP4XVH6fCtbyrw9NdoonBSnYQqODBBHRDeZB0qkstaiFeyl 4h4JCvNJOpb1uye1UlBakMmmz3Udv2HCUNiNTu+MoPia494LB9JFSs6UgussoAUp ExsrPu2tAzgopicd3SzMzS+qzhxVW5yj10b6sIpLl9ETzbZsmuVLErOWMSh7YxOk BX/DAu/VCXdbctURSYEC63wR0ei3C4uj -----END CERTIFICATE-----Generated at Sat May 31 17:14:39 2025 by rpki-client