$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: 8xEK6wThTdJasfqTkTmSzIa3t3uLB4fUXEKcGyaKh9w= Subject key identifier: 2B:A6:A0:59:F2:43:71:2A:9E:69:6C:61:9D:DE:96:37:2D:4A:22:EA Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 0161 Signing time: Sat 31 May 2025 03:43:27 +0000 Manifest this update: Sat 31 May 2025 03:43:27 +0000 Manifest next update: Sat 07 Jun 2025 03:43:27 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: ofPUNGboZW6yOatZFzamu8pC8S8LMYDZBaKb+OR3IhA=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: jrfajkzWNlsvAr6jtiSvKXf4OLBkBX1A+geXt7uM8x0=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: 1cQQOK0ed7AR7pXnZkKn7gGxMj9Q4EK17LvtfvZmkck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: May 31 03:43:27 2025 GMT Not After : Jun 7 03:43:27 2025 GMT Subject: CN=683a7adf-00cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:ff:e1:59:5b:76:7c:0d:93:6c:75:c7:50: be:e1:4f:9b:ce:f8:80:98:3b:82:b0:36:11:3d:b5: 85:95:d4:08:cf:bf:49:83:a8:e1:7f:df:53:04:33: a8:69:59:dd:70:74:a5:1f:23:3d:82:64:1a:ac:89: a7:f0:2f:40:95:da:ec:4a:8a:53:ac:34:66:df:07: e9:94:ec:e8:43:58:35:62:a3:84:bb:b2:43:7f:6e: 80:81:56:ca:f1:c4:c3:40:95:98:60:c6:26:3b:85: 6f:a7:03:d5:bc:5a:94:af:7f:e0:6d:62:88:0a:cb: 08:1f:f9:18:24:1f:fa:e4:b5:44:8e:63:cb:90:cd: 14:61:14:36:99:43:8c:b1:bf:2f:6c:af:76:37:96: f1:51:62:5a:eb:e3:23:c4:8c:d6:6f:df:f7:a6:8b: ff:db:c0:e2:c3:f4:ad:62:14:f1:56:18:26:f4:42: 49:10:91:41:59:b0:27:08:bc:e0:fa:ee:0b:ce:e5: 62:dc:b6:1d:39:ef:70:2a:fc:2d:ee:f4:e7:e3:19: 4c:4b:1d:7c:cb:ab:82:a1:f0:86:04:21:a2:49:db: 83:dc:15:db:7f:87:73:5a:b6:d1:bb:0d:85:aa:df: f3:ab:62:a8:c4:f3:d4:0e:b8:70:79:ea:86:2c:6d: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A6:A0:59:F2:43:71:2A:9E:69:6C:61:9D:DE:96:37:2D:4A:22:EA X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:78:b5:40:1e:19:c7:2e:9d:7a:01:8e:c0:39:61:e6:4d:03: 00:a8:d2:37:0c:15:e3:11:32:40:75:4f:e2:3a:3e:91:7c:c9: ca:d2:95:35:df:47:80:db:d9:f4:45:bf:47:ee:b7:fc:06:5c: e1:7b:a6:33:61:13:86:bc:b7:e2:19:aa:87:bd:ce:40:fc:7a: 2a:70:b5:ae:1d:73:26:54:38:85:4a:03:f6:02:95:7f:b4:7f: 11:c0:c8:98:c6:85:c2:85:f8:4d:17:01:3f:d8:c2:88:3f:d6: 68:45:30:d0:ec:a5:34:49:86:10:66:78:3c:6a:e0:80:10:dd: 24:70:9f:0d:32:1a:42:cf:01:88:6a:03:ed:e5:0f:11:a3:7d: ca:c0:86:8e:b0:0b:38:b1:e4:d2:44:a3:31:fc:b7:a9:d7:87: 8d:c4:2a:0c:8b:71:15:bb:e8:89:e2:67:96:30:12:9d:28:9a: 3f:01:3d:8e:63:38:8c:78:61:e6:36:23:84:7e:c6:60:ef:b4: f9:a0:45:e4:6e:70:d2:fc:1c:d5:55:ff:84:e6:b4:75:a8:54: ca:53:66:ef:70:51:22:19:35:0d:05:9d:ae:93:4f:43:0c:8b: 3d:23:7e:e4:df:bb:87:04:c2:c1:75:38:03:60:7b:de:54:32: 33:54:86:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwNTMxMDM0MzI3WhcNMjUwNjA3MDM0MzI3WjAYMRYwFAYD VQQDEw02ODNhN2FkZi0wMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcL/4VlbdnwNk2x1x1C+4U+bzviAmDuCsDYRPbWFldQIz79Jg6jhf99TBDOo aVndcHSlHyM9gmQarImn8C9AldrsSopTrDRm3wfplOzoQ1g1YqOEu7JDf26AgVbK 8cTDQJWYYMYmO4VvpwPVvFqUr3/gbWKICssIH/kYJB/65LVEjmPLkM0UYRQ2mUOM sb8vbK92N5bxUWJa6+MjxIzWb9/3pov/28Diw/StYhTxVhgm9EJJEJFBWbAnCLzg +u4LzuVi3LYdOe9wKvwt7vTn4xlMSx18y6uCofCGBCGiSduD3BXbf4dzWrbRuw2F qt/zq2KoxPPUDrhweeqGLG3pzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCumoFny Q3EqnmlsYZ3eljctSiLqMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQeLVAHhnHLp16AY7AOWHmTQMAqNI3DBXjETJAdU/iOj6RfMnK0pU1 30eA29n0Rb9H7rf8Blzhe6YzYROGvLfiGaqHvc5A/HoqcLWuHXMmVDiFSgP2ApV/ tH8RwMiYxoXChfhNFwE/2MKIP9ZoRTDQ7KU0SYYQZng8auCAEN0kcJ8NMhpCzwGI agPt5Q8Ro33KwIaOsAs4seTSRKMx/Lep14eNxCoMi3EVu+iJ4meWMBKdKJo/AT2O YziMeGHmNiOEfsZg77T5oEXkbnDS/BzVVf+E5rR1qFTKU2bvcFEiGTUNBZ2uk09D DIs9I37k37uHBMLBdTgDYHveVDIzVIbE -----END CERTIFICATE-----Generated at Sat May 31 17:56:26 2025 by rpki-client