$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: 7xWiVHPX+rXzBZPEFWcaUnhWQGAQt2RqPMUz19TJFiA= Subject key identifier: 17:20:4F:7A:3B:50:0E:0A:A4:63:58:BB:D5:F9:7A:50:B9:44:CC:0E Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 03FF Signing time: Sat 31 May 2025 00:39:28 +0000 Manifest this update: Sat 31 May 2025 00:39:28 +0000 Manifest next update: Sat 07 Jun 2025 00:39:28 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: Q40ThP+yPGqWiHSIzjbjvsn+q//+gXMYFYUy1lsPKNY=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: vU7fQooVaJk/8bmjfMJwzmIcKpCJVNxNvX0SFPwtzeQ=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: GmAluyp1SMa2XHtQwLg3qsZiugrvAjRv/8qqPdWoOr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: May 31 00:39:28 2025 GMT Not After : Jun 7 00:39:28 2025 GMT Subject: CN=683a4fc0-6ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:82:de:ca:dd:3e:47:93:8f:07:42:f5:8a: 38:4e:d0:aa:b0:a3:18:6f:fe:a1:f2:e3:d1:42:c8: 2e:cf:d9:59:18:c2:19:a1:69:83:de:4e:53:10:ec: 43:bd:69:fb:31:46:e8:e2:b3:39:f5:5f:16:c1:d4: d0:28:d4:75:1b:98:82:14:b0:fa:b9:a3:a5:a4:bc: 1a:f5:7c:75:57:e9:9f:eb:89:be:99:9f:60:4b:94: 7f:b5:75:0f:0e:36:80:c9:52:04:2b:09:49:29:40: b6:e7:58:d7:50:8d:80:39:59:04:9d:d7:dd:36:95: 2e:88:6a:1d:8a:18:37:63:94:95:76:18:b7:61:22: 2c:7f:c8:d4:83:b0:8e:69:6c:94:5c:6d:a7:10:18: a7:18:a8:08:e4:2f:10:7a:77:61:2f:c7:ce:ce:f3: b3:d4:8f:95:f6:a5:c9:c7:e5:f0:54:f6:1c:f5:fa: 82:2a:72:03:89:10:be:88:11:e7:74:36:46:0b:8b: f1:ca:b2:d7:9e:90:23:0e:d8:ee:61:fc:d1:5d:f8: 1a:d8:95:9b:df:7a:b7:69:04:ab:fd:26:7f:49:da: b2:12:86:a3:58:97:4b:15:3a:58:cf:21:80:fd:4f: f5:5e:29:bf:8d:04:22:40:66:33:d1:eb:eb:8b:58: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:4F:7A:3B:50:0E:0A:A4:63:58:BB:D5:F9:7A:50:B9:44:CC:0E X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c9:21:78:01:df:22:71:3e:11:64:fd:0e:27:3c:c1:d2:e0: 2d:7b:f9:3b:9e:47:d2:19:67:cf:ef:36:c2:4d:08:1a:8d:ee: 9f:b8:f6:9f:71:eb:fc:34:ef:75:56:8d:1e:1c:1d:14:01:26: 03:d9:94:11:7d:d9:c2:1e:a7:a3:69:62:47:e6:60:0e:f0:79: 99:d0:f9:c3:75:d2:6b:22:79:fd:5d:e4:54:e0:a0:2f:84:e5: 2b:04:ec:09:5c:31:cf:81:0e:bc:4a:8c:14:87:bd:ee:50:c2: 67:9c:a6:ca:b9:2c:16:dd:89:c3:74:fe:e3:0e:ee:2c:1f:40: ef:a8:9f:06:28:6e:41:de:75:7d:c5:cc:2d:60:ca:0d:4e:f7: bc:62:10:3a:26:67:13:34:fe:7f:1e:72:da:c1:24:e5:ea:ab: 21:cf:6b:79:37:67:d9:3b:54:de:b5:f7:fd:f1:0d:75:90:6d: 2f:83:c8:8f:c3:81:cc:6d:02:d9:d9:dc:d5:ad:3b:97:2e:d4: 10:6c:ba:0f:f3:f7:ad:69:9b:62:36:82:e2:3a:89:17:ba:70: 12:64:a5:f2:e8:aa:f3:56:df:29:2d:a4:86:73:a9:2c:f5:eb: 6b:27:7c:6c:44:65:1e:f3:72:ab:10:c4:bc:7b:73:83:d4:53: 33:98:0c:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUwNTMxMDAzOTI4WhcNMjUwNjA3MDAzOTI4WjAYMRYwFAYD VQQDEw02ODNhNGZjMC02Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/OC3srdPkeTjwdC9Yo4TtCqsKMYb/6h8uPRQsguz9lZGMIZoWmD3k5TEOxD vWn7MUbo4rM59V8WwdTQKNR1G5iCFLD6uaOlpLwa9Xx1V+mf64m+mZ9gS5R/tXUP DjaAyVIEKwlJKUC251jXUI2AOVkEndfdNpUuiGodihg3Y5SVdhi3YSIsf8jUg7CO aWyUXG2nEBinGKgI5C8QendhL8fOzvOz1I+V9qXJx+XwVPYc9fqCKnIDiRC+iBHn dDZGC4vxyrLXnpAjDtjuYfzRXfga2JWb33q3aQSr/SZ/SdqyEoajWJdLFTpYzyGA /U/1Xim/jQQiQGYz0evri1gMxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcgT3o7 UA4KpGNYu9X5elC5RMwOMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKySF4Ad8icT4RZP0OJzzB0uAte/k7nkfSGWfP7zbCTQgaje6fuPaf cev8NO91Vo0eHB0UASYD2ZQRfdnCHqejaWJH5mAO8HmZ0PnDddJrInn9XeRU4KAv hOUrBOwJXDHPgQ68SowUh73uUMJnnKbKuSwW3YnDdP7jDu4sH0DvqJ8GKG5B3nV9 xcwtYMoNTve8YhA6JmcTNP5/HnLawSTl6qshz2t5N2fZO1Tetff98Q11kG0vg8iP w4HMbQLZ2dzVrTuXLtQQbLoP8/etaZtiNoLiOokXunASZKXy6KrzVt8pLaSGc6ks 9etrJ3xsRGUe83KrEMS8e3OD1FMzmAyX -----END CERTIFICATE-----Generated at Sat May 31 17:37:50 2025 by rpki-client