$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: vdngKHekYOLkAqWdm8alQZXahUbXFQkd73FE/efNPtA= Subject key identifier: CF:1C:C1:EF:D6:58:78:B2:02:A3:50:C6:62:D9:99:E0:31:65:74:7D Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 01E7 Signing time: Sat 07 Jun 2025 02:13:33 +0000 Manifest this update: Sat 07 Jun 2025 02:13:33 +0000 Manifest next update: Sat 14 Jun 2025 02:13:33 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: fsOpj3i6+Yl8qc9Aow6QOwiz0t6Ab/4Dx4di/q3Xd1w=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: JoMqVSrjZm4JfXMaz6xrPhG5LHTOXjmhXw4j9hZGE8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Jun 7 02:13:33 2025 GMT Not After : Jun 14 02:13:33 2025 GMT Subject: CN=6843a04d-c732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:13:b9:4a:75:8d:b1:df:6a:e5:d8:58:db: b4:86:dc:ee:a2:c9:7f:90:89:a9:b7:4c:98:05:d7: 52:1d:bb:77:bf:a7:dc:a7:34:09:63:48:7b:82:84: 3d:56:c6:50:bc:dd:07:e5:2f:2c:e7:12:4b:3d:1f: 98:fd:14:1f:c2:e4:45:6d:fe:01:5b:25:ca:24:f9: 1e:24:be:6e:d9:59:6e:4a:68:40:42:33:8b:04:75: 8b:1f:4e:df:d0:12:bb:22:b3:da:52:5a:dc:38:45: ab:e0:54:78:3c:2c:c1:41:45:c4:2e:88:a5:6f:d9: 57:2a:e6:da:a5:16:d5:5e:f0:e9:f8:ec:fc:5c:1d: e4:d0:51:4a:24:a5:de:e1:45:41:ad:b0:eb:06:ac: 65:d6:ad:fc:ed:d6:1f:af:a0:05:f6:fa:e5:74:31: f6:5e:d9:88:a4:9c:98:c0:1a:aa:d5:f0:ab:5b:02: 02:ef:f6:42:76:56:5e:b1:41:8c:7a:2e:e3:27:cb: 25:e0:fe:be:a9:cd:14:de:ef:56:85:33:08:85:44: 28:25:45:57:d2:11:52:d1:6f:bd:45:0a:89:7a:d6: 23:87:69:ed:0b:80:1a:d5:10:7a:50:bb:9e:5b:77: 30:92:fe:f3:7c:96:39:6d:a1:ee:9a:38:f6:b4:a1: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1C:C1:EF:D6:58:78:B2:02:A3:50:C6:62:D9:99:E0:31:65:74:7D X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f7:26:a1:eb:ef:c5:80:45:92:88:b5:4b:ae:87:62:3c:9f: 9f:1f:72:c0:d8:ef:35:08:8b:d9:20:33:a3:5c:52:3b:bd:58: 33:23:56:10:6f:ba:1e:9f:1e:33:aa:20:a8:84:88:49:01:24: 1a:a2:7c:6e:4d:b7:ed:a4:b6:8f:43:6d:dd:74:5c:15:36:89: 5c:50:96:21:cd:71:9c:06:ec:9f:8f:d0:5f:13:5e:dd:a2:8b: a3:fe:9a:f6:33:5f:2e:c0:f1:a4:1b:85:04:74:df:95:ba:3e: 10:82:f0:cb:34:ff:3f:fc:ae:5a:54:83:48:cf:c9:db:d8:65: 78:50:f0:4c:20:e7:9d:d9:e4:a2:22:95:1c:35:be:59:20:7f: b7:86:e2:e4:2f:e5:0d:81:f1:6d:79:d4:a6:30:c6:fb:8b:fa: 85:f9:0e:6f:58:34:8f:dd:53:b9:2f:a2:fa:f2:5b:57:c6:89: 42:ff:16:72:48:88:5c:21:7b:38:20:f5:2c:28:c7:e3:68:bf: f3:6e:d2:11:73:b7:ad:05:98:96:c1:a2:86:9d:7c:87:b0:c5: ba:c8:cb:b1:6d:81:d4:1b:3e:e9:4b:9c:47:81:e7:fa:35:f5: 84:dc:4c:33:57:a8:96:8f:37:df:97:ca:d3:94:65:b1:05:28: 86:d0:fe:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUwNjA3MDIxMzMzWhcNMjUwNjE0MDIxMzMzWjAYMRYwFAYD VQQDEw02ODQzYTA0ZC1jNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0noTuUp1jbHfauXYWNu0htzuosl/kImpt0yYBddSHbt3v6fcpzQJY0h7goQ9 VsZQvN0H5S8s5xJLPR+Y/RQfwuRFbf4BWyXKJPkeJL5u2VluSmhAQjOLBHWLH07f 0BK7IrPaUlrcOEWr4FR4PCzBQUXELoilb9lXKubapRbVXvDp+Oz8XB3k0FFKJKXe 4UVBrbDrBqxl1q387dYfr6AF9vrldDH2XtmIpJyYwBqq1fCrWwIC7/ZCdlZesUGM ei7jJ8sl4P6+qc0U3u9WhTMIhUQoJUVX0hFS0W+9RQqJetYjh2ntC4Aa1RB6ULue W3cwkv7zfJY5baHumjj2tKFJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8cwe/W WHiyAqNQxmLZmeAxZXR9MB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp9yah6+/FgEWSiLVLrodiPJ+fH3LA2O81CIvZIDOjXFI7vVgzI1YQ b7oenx4zqiCohIhJASQaonxuTbftpLaPQ23ddFwVNolcUJYhzXGcBuyfj9BfE17d oouj/pr2M18uwPGkG4UEdN+Vuj4QgvDLNP8//K5aVINIz8nb2GV4UPBMIOed2eSi IpUcNb5ZIH+3huLkL+UNgfFtedSmMMb7i/qF+Q5vWDSP3VO5L6L68ltXxolC/xZy SIhcIXs4IPUsKMfjaL/zbtIRc7etBZiWwaKGnXyHsMW6yMuxbYHUGz7pS5xHgef6 NfWE3EwzV6iWjzffl8rTlGWxBSiG0P5A -----END CERTIFICATE-----Generated at Sat Jun 7 05:26:18 2025 by rpki-client