$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: 5FbDTVLxEd+dokIvFqlmNaPdaJPe1AfnIUD7kEb+9s0= Subject key identifier: 0B:0E:87:D4:39:D1:15:DB:68:5A:B8:61:7F:99:86:F8:8A:44:CE:78 Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 2C Signing time: Mon 09 Jun 2025 06:42:39 +0000 Manifest this update: Mon 09 Jun 2025 06:42:39 +0000 Manifest next update: Mon 16 Jun 2025 06:42:39 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: bAY/Klrskfkd+tuJRYCkTAV8+L7Y/yaWiYuYx3+oou0=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 06:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Jun 9 06:42:39 2025 GMT Not After : Jun 16 06:42:39 2025 GMT Subject: CN=6846825f-5c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:6e:eb:86:fa:ad:c7:33:1e:12:9b:0a:de: c6:51:2e:0b:4d:e3:4b:54:b0:a2:ab:02:ab:63:4f: 63:a2:cf:53:5a:a0:69:16:7b:87:ef:20:6c:ae:d5: 2d:d6:82:a9:e9:c8:e5:72:00:40:6d:01:17:7e:03: 8f:d9:05:34:e7:4f:48:43:8a:7c:cc:95:0b:36:74: 95:33:bf:e4:40:58:1f:f6:66:e7:60:72:d5:a5:a0: 5b:c2:28:b7:8a:57:2d:a1:24:5c:76:0a:90:3a:83: 73:e3:22:ca:b6:aa:16:92:58:31:ef:05:ba:31:19: 5c:6d:3b:d0:35:0a:82:3e:96:4f:4c:eb:b0:b1:a0: c2:bb:1f:bd:f9:2f:1a:4d:a5:07:7a:33:06:5f:a1: 4b:41:c8:a0:1f:57:b3:85:9f:51:f3:ff:56:60:b1: b1:6a:fc:0d:ea:dd:d4:cd:d1:e5:cf:02:01:8e:f8: e8:8e:86:a7:5f:3b:f6:1d:37:8c:55:53:e9:63:fd: 2a:a8:01:bf:c8:bd:95:0e:13:ca:cf:e2:e1:96:e0: 67:a4:d8:f5:cb:5f:3e:b0:76:0f:c5:dd:cc:5a:8c: d4:a2:ba:9b:4f:87:ca:75:e3:0d:8c:9e:e7:54:2e: 88:7c:4e:59:1a:37:50:13:02:45:9a:4b:6e:42:c5: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0E:87:D4:39:D1:15:DB:68:5A:B8:61:7F:99:86:F8:8A:44:CE:78 X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f9:f3:c6:0c:7d:9c:10:18:5a:99:dd:96:8f:06:ef:ad:62: d9:82:60:d9:33:d5:00:3b:50:01:c6:66:fa:a5:6e:56:6c:4b: 40:5a:f2:f6:bd:09:b4:ad:5d:e4:b6:72:44:3f:9a:59:ef:87: 3d:a8:c6:5d:86:f1:39:74:bb:b7:b3:3e:2e:d8:0b:b7:2c:27: f8:a8:32:46:a6:6d:a5:58:aa:b6:b2:01:95:3d:93:fd:8a:cc: 20:9c:ba:62:64:65:2d:51:1e:b0:19:50:d6:98:d3:9b:e7:df: 62:4e:45:17:8f:46:cf:5e:ee:7d:9c:1e:80:8a:ae:0a:34:8b: 73:77:d3:93:d2:60:ac:5f:e7:19:05:1a:83:9f:40:77:6a:1e: 0f:14:6d:9d:87:dd:2d:be:7a:1f:97:d2:ff:2b:ce:01:df:bd: 8a:bd:62:f0:16:78:fb:f2:55:8a:7b:b6:6e:a2:ac:47:69:33: 6a:cc:71:79:e8:e4:59:21:15:70:97:94:aa:33:7e:83:c4:07: d1:1f:8b:62:8d:02:81:7c:d3:cf:7b:b3:96:c0:f0:0c:d2:ad: e3:65:64:f0:bd:fe:b2:15:b6:af:a2:aa:d5:f3:9c:c5:41:9a: 97:65:1d:b9:8c:51:cc:de:b6:4a:98:cb:04:c9:c0:c8:8e:d2: 69:0a:8b:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA2MDkwNjQyMzlaFw0yNTA2MTYwNjQyMzlaMBgxFjAUBgNV BAMTDTY4NDY4MjVmLTVjMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/uG7rhvqtxzMeEpsK3sZRLgtN40tUsKKrAqtjT2Oiz1NaoGkWe4fvIGyu1S3W gqnpyOVyAEBtARd+A4/ZBTTnT0hDinzMlQs2dJUzv+RAWB/2ZudgctWloFvCKLeK Vy2hJFx2CpA6g3PjIsq2qhaSWDHvBboxGVxtO9A1CoI+lk9M67CxoMK7H735LxpN pQd6MwZfoUtByKAfV7OFn1Hz/1ZgsbFq/A3q3dTN0eXPAgGO+OiOhqdfO/YdN4xV U+lj/SqoAb/IvZUOE8rP4uGW4Gek2PXLXz6wdg/F3cxajNSiuptPh8p14w2MnudU Loh8TlkaN1ATAkWaS25CxU4lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCw6H1DnR FdtoWrhhf5mG+IpEzngwHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHj588YMfZwQGFqZ3ZaPBu+tYtmCYNkz1QA7UAHGZvqlblZsS0Ba8va9 CbStXeS2ckQ/mlnvhz2oxl2G8Tl0u7ezPi7YC7csJ/ioMkambaVYqrayAZU9k/2K zCCcumJkZS1RHrAZUNaY05vn32JORRePRs9e7n2cHoCKrgo0i3N305PSYKxf5xkF GoOfQHdqHg8UbZ2H3S2+eh+X0v8rzgHfvYq9YvAWePvyVYp7tm6irEdpM2rMcXno 5FkhFXCXlKozfoPEB9Efi2KNAoF80897s5bA8AzSreNlZPC9/rIVtq+iqtXznMVB mpdlHbmMUczetkqYywTJwMiO0mkKixI= -----END CERTIFICATE-----Generated at Mon Jun 9 20:18:11 2025 by rpki-client