$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: eskBK5+jA4P4Ddd1Ik/9FNbZpZnGfi4OEYJZCVrTI/c= Subject key identifier: 51:14:5A:E5:6C:D8:55:8F:87:DF:92:9C:D4:FF:2C:07:71:B7:D9:B4 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 22 Signing time: Sat 31 May 2025 07:26:27 +0000 Manifest this update: Sat 31 May 2025 07:26:26 +0000 Manifest next update: Sat 07 Jun 2025 07:26:26 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: xiAue3q1g705ERgL1a0GE5L63PHJUz3XUHEWEct0YPE=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: wilBGqna+OfcXED1b/uTuE5R5bjXwDBDwAo+DwpXl+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: May 31 07:26:26 2025 GMT Not After : Jun 7 07:26:26 2025 GMT Subject: CN=683aaf22-5d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:5b:ac:ff:61:5e:e0:67:fc:55:cd:ee:2a: 61:e5:c9:1e:04:7e:55:ec:c8:e6:b8:64:2a:a3:b5: f9:41:24:80:ce:75:83:1d:54:97:80:08:82:82:8e: 9c:f3:8b:bf:50:f0:62:fb:7a:c3:d8:12:4e:50:2a: 2f:0d:cd:b2:c4:fe:60:b8:ad:6c:f1:2c:73:d0:dc: 5b:18:af:f2:51:f3:9f:ab:96:92:55:7b:6c:47:5c: 3e:12:f3:6c:52:22:fe:c7:28:cf:ca:7e:bf:2e:64: 3f:81:6c:0e:d1:b0:4e:48:8f:56:5f:44:66:ef:d6: 90:03:7a:b4:c4:75:d2:3e:f6:63:7f:12:74:84:b3: 5e:9e:e0:d0:a2:ae:a0:91:b8:44:07:39:1e:94:69: b4:9b:eb:45:e9:63:91:2d:67:d4:0d:2d:ba:f7:27: a1:08:01:8a:ef:39:7e:4a:37:19:38:76:cf:a3:8f: 25:63:7b:3e:e6:50:90:99:ef:42:66:32:b5:f0:c5: 16:5e:d3:e9:81:a5:5f:09:52:11:3f:fc:12:b8:65: 39:c0:2b:e2:92:70:83:6e:e3:8d:56:89:56:df:92: 77:a6:3f:00:10:0e:52:92:34:0d:fe:8d:92:a4:61: ee:6c:4b:6c:de:14:ae:9f:6c:09:bd:be:59:97:26: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:5A:E5:6C:D8:55:8F:87:DF:92:9C:D4:FF:2C:07:71:B7:D9:B4 X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:3e:8b:19:3a:71:0f:06:cd:62:83:64:07:a5:46:e3:70:98: 59:48:1c:84:2a:30:36:8a:15:20:a8:38:7e:9c:1d:8a:21:e8: aa:fe:58:c5:29:ad:5f:f8:a7:e4:e9:11:e7:d7:a0:4c:b0:f9: dd:21:8a:66:52:69:cd:36:e3:96:7a:e5:88:43:f4:36:1f:49: bf:b3:cc:64:fd:4c:25:dc:74:20:ca:43:98:46:fa:0f:f4:9c: 62:01:a7:13:56:66:72:2b:cf:b9:b6:32:7b:51:5b:6b:36:8a: dd:50:53:3b:42:dd:1d:86:e8:62:e5:30:6f:0f:11:fc:91:6b: 80:28:90:65:44:9c:c3:01:28:1c:35:5d:bc:bf:61:7e:78:72: d3:c4:cb:60:c2:b9:a2:f2:20:7e:be:c7:17:f1:34:62:20:d1: 82:ad:9f:67:f9:49:d8:6f:f1:0b:cc:05:75:85:d7:37:65:59: d2:1e:bf:08:62:a3:bb:0c:25:99:21:2e:bb:93:06:e3:57:28: c0:fd:3f:2d:f3:84:24:37:91:69:10:5a:9d:60:46:16:e6:91: d5:91:74:fc:a1:eb:ef:ba:ef:4f:25:ba:76:d9:49:8a:7b:02: 28:7f:56:d3:0a:75:ea:f7:44:e6:bd:ab:9c:14:6e:08:f4:32: 35:42:3a:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA1MzEwNzI2MjZaFw0yNTA2MDcwNzI2MjZaMBgxFjAUBgNV BAMTDTY4M2FhZjIyLTVkNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjv1us/2Fe4Gf8Vc3uKmHlyR4EflXsyOa4ZCqjtflBJIDOdYMdVJeACIKCjpzz i79Q8GL7esPYEk5QKi8NzbLE/mC4rWzxLHPQ3FsYr/JR85+rlpJVe2xHXD4S82xS Iv7HKM/Kfr8uZD+BbA7RsE5Ij1ZfRGbv1pADerTEddI+9mN/EnSEs16e4NCirqCR uEQHOR6UabSb60XpY5EtZ9QNLbr3J6EIAYrvOX5KNxk4ds+jjyVjez7mUJCZ70Jm MrXwxRZe0+mBpV8JUhE//BK4ZTnAK+KScINu441WiVbfknemPwAQDlKSNA3+jZKk Ye5sS2zeFK6fbAm9vlmXJmiRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUURRa5WzY VY+H35Kc1P8sB3G32bQwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADk+ixk6cQ8GzWKDZAelRuNwmFlIHIQqMDaKFSCoOH6cHYoh6Kr+WMUp rV/4p+TpEefXoEyw+d0himZSac0245Z65YhD9DYfSb+zzGT9TCXcdCDKQ5hG+g/0 nGIBpxNWZnIrz7m2MntRW2s2it1QUztC3R2G6GLlMG8PEfyRa4AokGVEnMMBKBw1 Xby/YX54ctPEy2DCuaLyIH6+xxfxNGIg0YKtn2f5Sdhv8QvMBXWF1zdlWdIevwhi o7sMJZkhLruTBuNXKMD9Py3zhCQ3kWkQWp1gRhbmkdWRdPyh6++6708lunbZSYp7 Aih/VtMKder3ROa9q5wUbgj0MjVCOhs= -----END CERTIFICATE-----Generated at Sat May 31 17:18:49 2025 by rpki-client