$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: aWRGRsBw1St/sD23AzUtvVcUo2HYuKMr1ACZfJH01I0= Subject key identifier: 3D:FD:9E:99:01:58:C6:DF:2E:B7:DA:94:9D:7A:FB:97:5B:B5:BC:32 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 09B6 Signing time: Fri 06 Jun 2025 20:06:15 +0000 Manifest this update: Fri 06 Jun 2025 20:06:15 +0000 Manifest next update: Fri 13 Jun 2025 20:06:15 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: RC063D6b6wieeaI9koGu43TRzB5qYzWgCvGwjh47pUE=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Uf8LYTZNddjyS9MPn91LjVgsJA/mrFvn5q0EDwmn+i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 20:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Jun 6 20:06:15 2025 GMT Not After : Jun 13 20:06:15 2025 GMT Subject: CN=68434a37-6728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:1f:a7:c7:3b:33:c5:b1:f9:df:80:f8:f3: d1:2a:ed:59:22:72:d1:75:6d:a9:88:64:0b:0d:1c: 3e:f8:5f:9c:79:5a:fc:a1:dc:d3:56:3a:42:92:02: 1c:82:8a:ba:33:00:36:a1:ff:9f:3b:e9:d6:29:45: b6:ef:51:44:49:e4:67:15:47:7e:c8:e3:d5:48:ef: 50:41:b9:12:b7:15:f7:62:c0:78:07:cd:0e:48:ba: 99:f7:01:c3:6d:36:15:e0:a3:c0:c0:fd:a4:28:f8: 30:ba:1d:fd:27:d1:86:05:4e:ab:a5:fe:8d:1a:01: 54:19:a3:16:78:61:93:10:16:21:12:29:0f:a7:e3: df:aa:74:f3:ec:6e:ef:5a:3a:27:69:a6:cb:44:35: 8e:bb:ef:02:d4:71:87:f0:f8:a3:fb:76:db:f2:ef: b3:4c:71:90:2b:e1:49:a5:51:72:2d:df:6e:bf:95: 29:ab:7a:f2:31:97:c1:0f:df:1e:d9:19:ab:2f:cd: 18:57:c8:fd:e0:40:c0:e5:b5:9e:fd:c8:ef:c2:0b: 7c:9d:71:4c:4c:c6:46:e4:f7:be:ce:67:bf:8d:ae: c3:df:89:82:ef:d8:7e:52:7f:61:70:f6:08:e3:bb: 64:95:c9:a9:ff:10:1d:b0:3b:7b:7f:b0:80:3f:74: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FD:9E:99:01:58:C6:DF:2E:B7:DA:94:9D:7A:FB:97:5B:B5:BC:32 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a7:db:c1:dd:24:15:17:f6:bf:a1:2b:69:f0:13:59:63:f2: 67:4c:cd:83:8b:e4:11:3b:1c:5f:84:3f:3a:89:da:5e:65:11: 96:f8:62:fd:1f:85:f9:25:f2:32:0d:08:26:de:8e:e8:cc:fb: b6:20:47:72:1b:07:14:0d:9d:29:31:d2:f8:da:87:45:3e:8d: 63:3f:6f:a4:ce:ac:5f:16:04:39:a1:dd:04:ab:19:05:c5:fd: 9d:52:dc:50:80:92:1d:8a:37:49:c2:16:07:0e:de:8d:19:44: 43:85:9f:0f:1d:21:c9:bf:a4:64:a7:3f:f3:89:a3:08:01:45: a3:91:5c:a9:11:86:25:57:1b:cf:8f:e1:40:22:d7:82:d9:ba: 15:40:fe:a9:15:85:70:b5:13:9c:16:f7:73:d2:68:77:a4:4a: 5a:4a:c8:77:ac:d3:32:2d:15:f5:83:19:fb:96:50:25:fc:6d: 19:f0:5e:f7:06:e9:36:1a:27:8a:b8:83:ca:40:f2:b5:9c:3e: 08:52:31:96:e9:5e:05:ca:9c:f8:2c:59:b1:c5:ac:c4:35:c6: 99:62:6a:d5:b3:ed:c1:c3:bb:c8:46:2d:25:dd:75:32:b1:d4: 11:7a:47:d3:da:a7:c8:a9:75:63:5c:4b:22:5b:e0:cf:47:6f: 9a:12:bb:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUwNjA2MjAwNjE1WhcNMjUwNjEzMjAwNjE1WjAYMRYwFAYD VQQDEw02ODQzNGEzNy02NzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pYfp8c7M8Wx+d+A+PPRKu1ZInLRdW2piGQLDRw++F+ceVr8odzTVjpCkgIc goq6MwA2of+fO+nWKUW271FESeRnFUd+yOPVSO9QQbkStxX3YsB4B80OSLqZ9wHD bTYV4KPAwP2kKPgwuh39J9GGBU6rpf6NGgFUGaMWeGGTEBYhEikPp+PfqnTz7G7v WjonaabLRDWOu+8C1HGH8Pij+3bb8u+zTHGQK+FJpVFyLd9uv5Upq3ryMZfBD98e 2RmrL80YV8j94EDA5bWe/cjvwgt8nXFMTMZG5Pe+zme/ja7D34mC79h+Un9hcPYI 47tklcmp/xAdsDt7f7CAP3RcAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD39npkB WMbfLrfalJ16+5dbtbwyMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbp9vB3SQVF/a/oStp8BNZY/JnTM2Di+QROxxfhD86idpeZRGW+GL9 H4X5JfIyDQgm3o7ozPu2IEdyGwcUDZ0pMdL42odFPo1jP2+kzqxfFgQ5od0EqxkF xf2dUtxQgJIdijdJwhYHDt6NGURDhZ8PHSHJv6Rkpz/ziaMIAUWjkVypEYYlVxvP j+FAIteC2boVQP6pFYVwtROcFvdz0mh3pEpaSsh3rNMyLRX1gxn7llAl/G0Z8F73 Buk2GieKuIPKQPK1nD4IUjGW6V4Fypz4LFmxxazENcaZYmrVs+3Bw7vIRi0l3XUy sdQRekfT2qfIqXVjXEsiW+DPR2+aErvL -----END CERTIFICATE-----Generated at Sat Jun 7 12:26:50 2025 by rpki-client