$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: ftDaK88CGK98qh7r9FxG2ifvVKDsXgEgGe2endQjCUM= Subject key identifier: C3:0E:29:55:CD:79:05:DA:0F:2D:23:AE:03:89:16:04:3D:CA:A7:A6 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0C39 Signing time: Sat 31 May 2025 18:35:37 +0000 Manifest this update: Sat 31 May 2025 18:35:36 +0000 Manifest next update: Sat 07 Jun 2025 18:35:36 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: gwbPkBD+M5fD5N4i/62B8OBrMof6+lJnIGkmUu5soA0=) 2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) 3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: hdydafQMMkJvIt5EBnS/YGAF8bc0IukS3bIy5kaR5Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: May 31 18:35:36 2025 GMT Not After : Jun 7 18:35:36 2025 GMT Subject: CN=683b4bf9-1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:33:1d:ce:41:b2:0e:b8:8f:f5:e2:3f:0a: 0e:60:3a:c7:b5:47:e3:6e:97:30:46:85:f1:15:f9: 3f:b7:0a:46:ce:ff:e5:b0:84:d1:59:42:18:58:80: 45:98:d5:29:cc:4e:12:56:ca:40:b0:c7:cb:5b:64: 95:e2:3d:96:8b:36:b9:85:16:04:55:04:f0:74:8c: 92:a8:9b:e8:20:b6:d7:af:88:2f:04:e0:1d:4a:15: cd:24:5a:1d:5d:23:16:14:55:59:bd:6d:28:d6:29: 11:04:8f:81:6c:19:51:46:25:83:b0:ed:49:29:2b: e2:98:7d:4f:96:47:7d:ea:f3:22:8a:8f:48:52:00: 93:bb:e0:e4:c8:12:27:ef:a3:e8:9d:25:63:a3:22: fe:19:42:f2:5f:61:1b:04:91:de:29:3d:af:c8:25: bd:74:0b:34:c4:b6:d0:2b:ed:61:19:c0:54:e9:e2: b8:de:42:f1:0b:9a:dd:62:9c:11:74:00:5d:87:47: 00:29:6c:a0:bd:41:78:aa:2f:82:ef:6b:1c:27:10: 78:94:da:48:d4:10:2c:a9:34:34:cb:e9:88:a3:7f: 84:de:a1:55:04:cb:e8:d1:73:05:cf:d0:34:45:16: b2:03:60:14:d9:8b:a2:0a:f4:2a:41:d1:34:2d:ed: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:29:55:CD:79:05:DA:0F:2D:23:AE:03:89:16:04:3D:CA:A7:A6 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:2a:42:42:83:b9:19:bd:6b:db:a3:b1:5d:2e:bc:b4:0d: 10:13:17:a1:ee:8e:f9:1c:3d:0d:23:66:ec:1e:3e:27:c9:a5: b3:25:95:6a:c2:54:92:cd:dc:b8:3b:bb:d8:e4:a2:11:a5:e0: 82:ec:80:70:88:3a:9e:2a:ed:8e:7e:14:b9:44:f9:e4:d1:d1: 2a:47:0f:a6:72:11:84:5f:2a:73:bb:ac:b0:52:39:aa:f1:cb: 74:ef:dc:a0:bd:d9:c0:57:37:d7:2f:80:0e:0e:51:c5:8b:51: 2b:0a:bc:f1:6b:63:91:24:d8:fb:4a:10:1a:b6:30:98:4f:e1: 48:c9:bd:9c:19:e8:34:22:7f:5d:89:c8:e2:11:ea:2f:d7:da: 22:78:98:35:35:5f:d2:83:b2:a8:9c:9f:33:c9:6b:24:bc:94: b7:d6:fc:1a:73:41:6c:bb:9b:a4:9f:ee:ae:15:cf:69:97:9b: dc:b6:cb:36:d6:68:4f:d8:24:be:e8:38:54:e2:b2:31:3c:30: c3:82:44:2a:d1:3c:b4:52:af:dd:98:23:ff:ac:ce:d6:93:7e: 2c:f6:ed:b0:cf:c4:ec:fc:6e:af:89:a4:13:be:95:82:92:a8: cf:28:63:4a:3d:39:8f:1c:ab:ca:e1:b5:0a:66:f1:d5:ad:a5: 33:be:e3:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjUwNTMxMTgzNTM2WhcNMjUwNjA3MTgzNTM2WjAYMRYwFAYD VQQDEw02ODNiNGJmOS0xZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TgzHc5Bsg64j/XiPwoOYDrHtUfjbpcwRoXxFfk/twpGzv/lsITRWUIYWIBF mNUpzE4SVspAsMfLW2SV4j2Wiza5hRYEVQTwdIySqJvoILbXr4gvBOAdShXNJFod XSMWFFVZvW0o1ikRBI+BbBlRRiWDsO1JKSvimH1Plkd96vMiio9IUgCTu+DkyBIn 76PonSVjoyL+GULyX2EbBJHeKT2vyCW9dAs0xLbQK+1hGcBU6eK43kLxC5rdYpwR dABdh0cAKWygvUF4qi+C72scJxB4lNpI1BAsqTQ0y+mIo3+E3qFVBMvo0XMFz9A0 RRayA2AU2YuiCvQqQdE0Le2bpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMOKVXN eQXaDy0jrgOJFgQ9yqemMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO/CpCQoO5Gb1r26OxXS68tA0QExeh7o75HD0NI2bsHj4nyaWzJZVq wlSSzdy4O7vY5KIRpeCC7IBwiDqeKu2OfhS5RPnk0dEqRw+mchGEXypzu6ywUjmq 8ct079ygvdnAVzfXL4AODlHFi1ErCrzxa2ORJNj7ShAatjCYT+FIyb2cGeg0In9d icjiEeov19oieJg1NV/Sg7KonJ8zyWskvJS31vwac0Fsu5ukn+6uFc9pl5vctss2 1mhP2CS+6DhU4rIxPDDDgkQq0Ty0Uq/dmCP/rM7Wk34s9u2wz8Ts/G6viaQTvpWC kqjPKGNKPTmPHKvK4bUKZvHVraUzvuNs -----END CERTIFICATE-----Generated at Mon Jun 2 07:22:12 2025 by rpki-client