$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: v36haGLZT30Y9FA1YoUzB9BBYyzpW8ab2AX8nPsmmDQ= Subject key identifier: 03:81:93:AA:0D:63:CE:28:EF:63:C1:5D:18:81:58:D1:91:D8:B3:4C Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 0724 Signing time: Fri 30 May 2025 22:00:51 +0000 Manifest this update: Fri 30 May 2025 22:00:51 +0000 Manifest next update: Fri 06 Jun 2025 22:00:51 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: lcyjtKoHi9b+727ZaH7stP8Scc/Yp+gg7PnngJsryUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: May 30 22:00:51 2025 GMT Not After : Jun 6 22:00:51 2025 GMT Subject: CN=683a2a93-4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:78:b4:52:36:57:91:de:93:cb:a8:e9:dc: 52:93:70:5f:55:35:bb:73:9d:23:e1:1b:42:09:ae: 59:12:ca:b5:bf:e4:f0:cf:7a:2d:19:33:59:7b:69: 0d:de:fc:18:59:45:f7:af:7b:b7:90:2a:38:54:aa: 66:2a:cd:15:7c:35:7b:db:02:55:f1:d8:2d:4b:1e: ac:64:a5:0a:af:74:2f:bb:6d:a1:0c:8a:8e:b0:7e: 57:89:35:6c:15:86:5e:79:5e:32:dc:99:53:af:af: 70:83:90:b1:e0:34:e5:90:a4:94:29:38:7a:d3:f9: fb:f8:ae:f4:7a:6c:97:80:f0:0c:6d:c7:fd:fb:ef: 0c:15:df:01:4d:51:5c:ae:61:da:71:57:cb:98:c8: d5:5b:40:5b:d6:a9:0f:69:97:fe:9a:66:30:33:bd: c3:20:01:10:cd:23:4a:8a:86:d9:da:28:f7:bd:19: 84:31:2d:7e:5c:c4:92:e0:06:90:c2:0f:f4:fc:24: 7e:d5:b7:1a:0b:7f:f7:8a:34:ca:dd:30:e9:67:3c: c4:e0:4f:83:60:45:04:42:ca:ab:5b:a6:d5:2c:15: 32:7d:57:88:98:7d:0d:d4:8f:5d:f8:17:37:67:c7: f0:b9:92:40:65:99:49:15:ad:d7:58:ff:9f:c0:95: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:93:AA:0D:63:CE:28:EF:63:C1:5D:18:81:58:D1:91:D8:B3:4C X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:81:d5:40:fb:71:12:2d:6d:68:d5:28:32:c8:16:0f:c1:87: 25:f6:3c:88:06:0d:9a:d1:15:a4:f3:d1:33:9d:b0:01:11:ca: 0f:5f:ba:a7:a0:63:73:cf:ce:d2:d2:23:d4:19:28:3c:7d:66: f2:ef:cd:64:9d:ec:2e:bc:a7:8c:e7:72:d2:39:9b:2a:3b:08: e4:64:5e:85:f6:7c:20:0d:99:c4:0f:5e:58:ad:4d:34:0c:8f: d0:de:9e:fc:d1:f9:f5:e9:8f:0b:5e:58:f6:de:1a:0e:9c:e7: f5:07:8f:0d:7f:2d:36:d2:cf:25:99:33:65:b8:55:ed:e1:f8: 27:db:2d:04:23:17:3c:00:06:c1:08:65:3c:bb:6a:0a:a0:f7: 96:47:8b:09:1e:e8:65:1e:f6:5d:ff:55:19:3e:82:85:c2:66: d8:25:9b:d1:08:df:ad:6a:6e:32:fd:ab:ee:76:2b:9e:30:d2: da:ca:0b:e7:3c:46:0c:44:a8:c6:02:a8:6f:d1:79:82:a2:e9: 1e:c5:0b:72:4c:8d:bc:07:82:e8:fc:6e:e0:6f:e7:da:d9:f3: 3b:43:83:95:30:96:c0:8f:25:ca:df:71:d1:d6:2f:b9:7f:bd: 01:cd:ea:33:02:21:0b:65:2c:c7:f6:80:a8:d7:c1:a9:8c:47: 32:63:6e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwNTMwMjIwMDUxWhcNMjUwNjA2MjIwMDUxWjAYMRYwFAYD VQQDEw02ODNhMmE5My00Mjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf94tFI2V5Hek8uo6dxSk3BfVTW7c50j4RtCCa5ZEsq1v+Twz3otGTNZe2kN 3vwYWUX3r3u3kCo4VKpmKs0VfDV72wJV8dgtSx6sZKUKr3Qvu22hDIqOsH5XiTVs FYZeeV4y3JlTr69wg5Cx4DTlkKSUKTh60/n7+K70emyXgPAMbcf9++8MFd8BTVFc rmHacVfLmMjVW0Bb1qkPaZf+mmYwM73DIAEQzSNKiobZ2ij3vRmEMS1+XMSS4AaQ wg/0/CR+1bcaC3/3ijTK3TDpZzzE4E+DYEUEQsqrW6bVLBUyfVeImH0N1I9d+Bc3 Z8fwuZJAZZlJFa3XWP+fwJXZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOBk6oN Y84o72PBXRiBWNGR2LNMMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtgdVA+3ESLW1o1SgyyBYPwYcl9jyIBg2a0RWk89EznbABEcoPX7qn oGNzz87S0iPUGSg8fWby781knewuvKeM53LSOZsqOwjkZF6F9nwgDZnED15YrU00 DI/Q3p780fn16Y8LXlj23hoOnOf1B48Nfy020s8lmTNluFXt4fgn2y0EIxc8AAbB CGU8u2oKoPeWR4sJHuhlHvZd/1UZPoKFwmbYJZvRCN+tam4y/avudiueMNLaygvn PEYMRKjGAqhv0XmCoukexQtyTI28B4Lo/G7gb+fa2fM7Q4OVMJbAjyXK33HR1i+5 f70BzeozAiELZSzH9oCo18GpjEcyY26F -----END CERTIFICATE-----Generated at Sat May 31 16:56:11 2025 by rpki-client