$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: RD7VTskdp1TeSPocW2BkTtzzx+T4gDCnzGn2SdVwTO0= Subject key identifier: 61:9D:06:34:24:FA:11:24:31:C6:D3:C6:E7:97:C1:C5:38:72:0D:D1 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 0872 Signing time: Fri 30 May 2025 20:53:27 +0000 Manifest this update: Fri 30 May 2025 20:53:26 +0000 Manifest next update: Fri 06 Jun 2025 20:53:26 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: meGDEJGETARJoe60OFL1xAJk6JpZqy1vfGAlfOMTmkQ=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Yvl58W31jTaXrFpKwLiylkuL3NEb2f8QrSD0rbbSX2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: May 30 20:53:26 2025 GMT Not After : Jun 6 20:53:26 2025 GMT Subject: CN=683a1ac7-0762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:dd:c5:dd:d5:88:9b:48:25:be:dd:e5:f5: be:5c:6b:1a:02:6f:36:47:2e:9f:49:90:1c:55:74: 95:35:9b:77:8a:36:d0:b9:e1:11:e6:46:af:5c:0e: bd:62:2a:41:7c:ec:48:f9:3c:14:67:1a:61:ec:f9: 68:ca:d3:b2:4f:62:0d:ea:89:5a:ef:1e:69:4f:9d: 8f:bb:b6:66:0c:01:67:92:04:08:91:c3:cd:47:0d: e5:0f:67:ee:ff:73:08:09:a9:a6:87:bb:06:ee:c0: 5e:99:15:5e:4d:cd:50:1c:0d:4a:4c:04:6c:45:01: 13:12:bb:c4:07:ba:25:74:b7:95:bd:af:b1:99:51: 0c:77:75:e7:df:b9:bc:50:ce:5b:5a:36:c8:ee:ef: e6:00:e6:d7:fb:ed:6f:2c:c5:26:9c:62:cf:44:d0: b8:fb:64:21:72:cc:e3:96:60:6a:39:38:7b:ac:7c: 3e:05:15:29:19:23:80:3e:92:59:08:b5:80:62:5e: 65:88:74:c8:b2:77:27:17:98:98:a2:c6:76:19:b2: c5:57:2a:40:e2:ce:49:a6:72:13:2d:53:5e:bb:ac: 6e:60:62:f3:e2:14:55:92:30:37:9f:0f:3a:30:e9: 06:3f:b9:3d:5d:d4:a4:65:64:33:5c:33:30:5a:b1: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:06:34:24:FA:11:24:31:C6:D3:C6:E7:97:C1:C5:38:72:0D:D1 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2e:f8:3c:57:6d:a6:ef:46:a6:dd:60:3d:25:b5:0c:99:11: b1:e4:00:2c:b4:ff:74:79:cf:c1:1f:ab:8e:85:7d:8f:f5:2a: 1b:13:2f:bb:5f:db:69:47:ea:c6:ce:51:87:a1:42:30:dd:7b: c8:85:3f:98:58:45:f3:4d:2f:f5:43:f5:54:26:cc:12:26:2a: f2:22:4b:eb:50:4d:41:28:ac:e4:7b:00:43:d8:f6:cf:33:94: a8:0d:a1:68:7e:a5:f1:55:74:e9:b4:39:5d:cc:ea:22:d3:1f: 75:9e:97:39:ec:78:d9:55:d4:14:a5:a9:71:8d:1e:d7:ad:88: fc:64:7c:31:16:4b:57:57:90:31:22:14:38:df:bb:fd:8b:8d: fa:f4:d6:ea:35:5e:49:02:a6:de:ef:c1:2e:54:67:d5:12:51: fb:8e:3f:6d:41:6b:f9:3e:19:33:38:d8:77:ae:1e:21:48:06: ea:da:43:06:14:e6:0b:89:78:29:30:c5:98:37:b2:a7:84:3b: 48:e4:39:cf:cc:c6:97:9c:ee:2f:76:5a:d2:5c:63:b1:c9:7a: f6:18:2c:44:9b:80:9b:ae:45:39:fd:c1:fc:f5:4d:bc:41:53: 69:da:e5:bd:3c:de:95:42:1f:9e:ac:84:b0:d3:74:a9:8a:77: 2b:c9:74:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUwNTMwMjA1MzI2WhcNMjUwNjA2MjA1MzI2WjAYMRYwFAYD VQQDEw02ODNhMWFjNy0wNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ljdxd3ViJtIJb7d5fW+XGsaAm82Ry6fSZAcVXSVNZt3ijbQueER5kavXA69 YipBfOxI+TwUZxph7PloytOyT2IN6ola7x5pT52Pu7ZmDAFnkgQIkcPNRw3lD2fu /3MICammh7sG7sBemRVeTc1QHA1KTARsRQETErvEB7oldLeVva+xmVEMd3Xn37m8 UM5bWjbI7u/mAObX++1vLMUmnGLPRNC4+2QhcszjlmBqOTh7rHw+BRUpGSOAPpJZ CLWAYl5liHTIsncnF5iYosZ2GbLFVypA4s5JpnITLVNeu6xuYGLz4hRVkjA3nw86 MOkGP7k9XdSkZWQzXDMwWrFQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGdBjQk +hEkMcbTxueXwcU4cg3RMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTLvg8V22m70am3WA9JbUMmRGx5AAstP90ec/BH6uOhX2P9SobEy+7 X9tpR+rGzlGHoUIw3XvIhT+YWEXzTS/1Q/VUJswSJiryIkvrUE1BKKzkewBD2PbP M5SoDaFofqXxVXTptDldzOoi0x91npc57HjZVdQUpalxjR7XrYj8ZHwxFktXV5Ax IhQ437v9i4369NbqNV5JAqbe78EuVGfVElH7jj9tQWv5PhkzONh3rh4hSAbq2kMG FOYLiXgpMMWYN7KnhDtI5DnPzMaXnO4vdlrSXGOxyXr2GCxEm4CbrkU5/cH89U28 QVNp2uW9PN6VQh+erISw03SpincryXSQ -----END CERTIFICATE-----Generated at Sat May 31 16:40:47 2025 by rpki-client