$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: pz1IlfQA+SMRAFp1fdImpMody+KdnO65vV8o2qljtD0= Subject key identifier: 7A:F7:21:B0:6D:DB:E2:96:6A:79:64:37:7A:DF:A9:38:EB:AF:18:3A Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0A2F Signing time: Fri 30 May 2025 20:56:44 +0000 Manifest this update: Fri 30 May 2025 20:56:43 +0000 Manifest next update: Fri 06 Jun 2025 20:56:43 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: Q6wZznWhNGNx+H+vdYqXhGIHd5h9ILKCuJixsIC280U=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: May 30 20:56:43 2025 GMT Not After : Jun 6 20:56:43 2025 GMT Subject: CN=683a1b8c-d7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:ef:f0:d9:07:a0:29:6a:27:7f:1a:7f:63: af:58:c6:6d:a6:e0:03:56:ee:23:ae:f0:4e:88:f3: ba:b6:19:83:ae:cb:c3:8e:a4:c0:6f:24:c3:53:1d: 0b:f1:c3:e9:97:c1:27:ff:8c:b9:36:d2:37:d4:4f: 2d:8f:52:24:95:12:53:c1:f8:ef:da:56:7b:24:61: 04:e2:2c:67:d0:75:11:b9:42:a6:c9:c1:14:5b:b5: 98:ae:19:a0:e5:e8:79:43:fa:2c:6a:24:0b:bf:3f: f1:0f:e3:76:34:ef:4c:42:71:1b:bf:1f:94:76:a6: e0:de:6f:4a:36:62:c8:15:50:49:90:ed:f0:31:5c: 08:d7:66:5b:6a:02:55:79:1a:8b:94:ee:ce:9a:f7: ca:e7:77:24:06:60:32:7b:35:f9:81:00:1c:d9:04: 6f:7e:be:d0:b7:d9:f3:a9:d4:aa:6b:61:f1:2e:a1: bd:fd:6a:48:07:4d:9c:1f:aa:1a:33:e9:9f:a0:98: 76:33:da:d3:3b:55:e2:29:67:02:57:ca:2c:ba:85: fc:30:40:6a:63:4d:2a:70:06:cc:52:8d:3e:e2:83: b0:79:fd:03:34:e4:e8:86:4c:67:40:4e:de:fb:ca: 73:a4:d7:a8:a1:2e:11:3e:3f:3e:15:cf:f6:75:6a: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:21:B0:6D:DB:E2:96:6A:79:64:37:7A:DF:A9:38:EB:AF:18:3A X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:39:54:47:91:fd:c4:40:8d:a7:fe:36:75:33:96:5f:b4:c4: 6b:f4:74:07:b3:41:17:3d:a0:ee:0b:0a:93:4a:86:51:35:c9: 18:7b:68:17:de:45:f7:d7:47:8f:4b:03:4e:76:22:85:63:ed: 53:3b:a5:19:d1:84:b6:e6:ee:13:88:5f:81:af:c4:e8:63:ae: 40:7b:cf:12:06:fc:a5:66:7b:84:e2:a3:90:53:ce:5e:5f:db: 6b:e9:ba:f4:6a:7a:b3:e1:e6:9d:c3:f1:d3:c0:45:68:15:c5: 9d:e6:ec:43:bd:c1:eb:f6:e5:a8:7f:0c:74:c3:0f:6e:2a:50: 74:24:ed:25:bd:a5:31:c1:eb:17:b8:47:2b:af:87:91:e9:15: 04:6c:4f:84:9b:ff:58:20:68:20:31:fb:e4:6b:6b:e5:7f:84: 64:7b:73:ca:5b:d2:33:1e:bd:c8:54:36:03:1d:1f:a6:03:33: 26:cc:41:13:39:24:47:aa:cb:0a:75:2d:0d:03:7a:15:91:a4: 9c:df:6c:13:19:61:8b:f0:a9:4a:57:88:37:2c:6f:01:53:07: df:10:0c:70:cd:6a:12:a1:a8:0e:5f:e0:67:98:b9:12:64:3f: 6c:10:40:f6:c6:3e:db:c1:c8:21:f6:e0:82:43:4a:c2:f8:48: d7:27:59:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwNTMwMjA1NjQzWhcNMjUwNjA2MjA1NjQzWjAYMRYwFAYD VQQDEw02ODNhMWI4Yy1kN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ibv8NkHoClqJ38af2OvWMZtpuADVu4jrvBOiPO6thmDrsvDjqTAbyTDUx0L 8cPpl8En/4y5NtI31E8tj1IklRJTwfjv2lZ7JGEE4ixn0HURuUKmycEUW7WYrhmg 5eh5Q/osaiQLvz/xD+N2NO9MQnEbvx+Udqbg3m9KNmLIFVBJkO3wMVwI12ZbagJV eRqLlO7OmvfK53ckBmAyezX5gQAc2QRvfr7Qt9nzqdSqa2HxLqG9/WpIB02cH6oa M+mfoJh2M9rTO1XiKWcCV8osuoX8MEBqY00qcAbMUo0+4oOwef0DNOTohkxnQE7e +8pzpNeooS4RPj8+Fc/2dWrE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr3IbBt 2+KWanlkN3rfqTjrrxg6MB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXOVRHkf3EQI2n/jZ1M5ZftMRr9HQHs0EXPaDuCwqTSoZRNckYe2gX 3kX310ePSwNOdiKFY+1TO6UZ0YS25u4TiF+Br8ToY65Ae88SBvylZnuE4qOQU85e X9tr6br0anqz4eadw/HTwEVoFcWd5uxDvcHr9uWofwx0ww9uKlB0JO0lvaUxwesX uEcrr4eR6RUEbE+Em/9YIGggMfvka2vlf4Rke3PKW9IzHr3IVDYDHR+mAzMmzEET OSRHqssKdS0NA3oVkaSc32wTGWGL8KlKV4g3LG8BUwffEAxwzWoSoagOX+BnmLkS ZD9sEED2xj7bwcgh9uCCQ0rC+EjXJ1mu -----END CERTIFICATE-----Generated at Sat May 31 17:31:59 2025 by rpki-client