$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft File: TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft (raw, json) Hash identifier: J7KaUaZWaiPTVeXPXqweKsSabaKHWwjCy6Yr1vmbu+Y= Subject key identifier: B8:E6:72:DD:79:6F:50:E8:A0:C2:18:0A:9B:36:3B:1C:90:8C:D8:6A Authority key identifier: 4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B Certificate issuer: /CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft Manifest number: 7B Signing time: Sat 31 May 2025 06:15:40 +0000 Manifest this update: Sat 31 May 2025 06:15:40 +0000 Manifest next update: Sat 07 Jun 2025 06:15:40 +0000 Files and hashes: 1: TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl (hash: ymyNUNL2Q/Kwqg/QmGBjoufFJWkAGiNmrXS8/RjcFjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Validity Not Before: May 31 06:15:40 2025 GMT Not After : Jun 7 06:15:40 2025 GMT Subject: CN=683a9e8c-ebb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:f8:56:73:a4:79:30:c0:02:6c:13:86:0d: e4:8a:69:89:a8:37:f8:07:d2:8b:39:ba:2a:76:11: ba:44:97:52:14:bf:69:88:cb:0a:87:b7:3f:e6:52: 8c:49:5d:e3:c8:31:5a:bf:81:2e:9b:af:cf:1d:39: 4f:11:1a:d0:1a:b8:2d:19:60:1c:dc:67:63:d5:94: 8f:9e:19:e0:47:ec:41:10:08:96:32:8a:16:94:16: 5f:7e:57:4c:4c:f3:1d:26:fd:c2:43:fa:bf:4d:62: 08:b5:ab:d7:51:df:94:f7:4d:8f:9a:82:e0:ee:99: a5:f7:3a:49:df:0b:4d:8b:bd:56:22:dd:8a:a2:f0: 29:ff:95:d3:22:f5:17:cb:52:13:d3:b9:36:c8:f5: 65:ac:3f:18:fa:30:0e:a4:9a:e3:1c:ee:33:b6:64: 15:56:1e:1d:3b:38:65:0b:93:c0:8a:09:2a:8f:a6: c1:2f:f5:ab:dd:e3:2c:6b:79:9d:46:95:b6:dd:4f: 7d:c8:80:78:db:da:18:a0:55:86:9d:1c:1f:ff:c7: 7b:4d:04:1d:9e:a8:8d:fe:f8:7e:93:d6:6d:2a:95: 07:06:16:43:16:d5:26:e1:c2:11:e7:01:91:8d:78: 37:c1:60:58:b2:8e:49:e5:37:34:58:48:b8:85:70: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E6:72:DD:79:6F:50:E8:A0:C2:18:0A:9B:36:3B:1C:90:8C:D8:6A X509v3 Authority Key Identifier: keyid:4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:40:b2:be:5a:35:e8:9e:1a:e5:f1:ac:0a:29:70:9d:a2:05: c0:8b:a7:d1:05:eb:de:7e:3c:79:c6:b8:cd:d9:6a:1f:c2:4f: 1f:ca:06:be:bd:59:7b:25:83:f7:19:f3:ff:85:8a:69:ab:12: 44:8d:8f:fb:88:89:f4:a4:27:85:d1:c6:2a:b5:cc:dc:b3:1f: f7:60:f4:cf:19:06:8e:81:5c:16:f1:4e:b4:3c:90:be:ea:16: 69:79:5a:34:f8:c9:8a:bb:37:5c:77:46:9c:da:59:26:a5:a2: 39:ec:d9:3e:0b:eb:d3:aa:73:03:8d:97:db:88:00:a3:aa:e8: 50:c9:50:23:6d:85:01:71:2a:89:f7:1a:f1:06:cf:f5:64:32: 5a:b2:9e:da:8d:f6:86:6d:07:8c:ff:d7:7b:43:45:7c:8d:1e: e0:a7:55:aa:c8:32:e2:38:2a:a5:3a:a3:bb:78:d9:5a:51:f4: 83:97:53:37:54:6c:8d:bc:2d:b9:5e:2f:06:44:f2:3e:df:bd: ba:44:70:98:19:a2:4a:7a:25:b1:bf:7e:d9:fd:b5:b8:cb:ea: b0:18:ac:d3:95:7e:09:22:a4:79:6a:6d:0f:b1:dd:c3:70:ad: 89:29:ab:69:7f:e3:9e:12:97:60:29:42:e8:dd:34:00:4e:96: fa:55:15:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoNENCNTFFRTg3QzgyMkU4RTZDQjA1NDI4NENCMDdFNENG MjRGOTIxQjAeFw0yNTA1MzEwNjE1NDBaFw0yNTA2MDcwNjE1NDBaMBgxFjAUBgNV BAMTDTY4M2E5ZThjLWViYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKk/hWc6R5MMACbBOGDeSKaYmoN/gH0os5uip2EbpEl1IUv2mIywqHtz/mUoxJ XePIMVq/gS6br88dOU8RGtAauC0ZYBzcZ2PVlI+eGeBH7EEQCJYyihaUFl9+V0xM 8x0m/cJD+r9NYgi1q9dR35T3TY+aguDumaX3OknfC02LvVYi3Yqi8Cn/ldMi9RfL UhPTuTbI9WWsPxj6MA6kmuMc7jO2ZBVWHh07OGULk8CKCSqPpsEv9avd4yxreZ1G lbbdT33IgHjb2higVYadHB//x3tNBB2eqI3++H6T1m0qlQcGFkMW1SbhwhHnAZGN eDfBYFiyjknlNzRYSLiFcABNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuOZy3Xlv UOigwhgKmzY7HJCM2GowHwYDVR0jBBgwFoAUTLUe6HyCLo5ssFQoTLB+TPJPkhsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzkyREZGQzc4ODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81c3NGUW9UTEItVFBKUGto cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExVZTZIeUNMbzVzc0ZRb1RMQi1UUEpQa2hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzkyREZGQzc4ODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81 c3NGUW9UTEItVFBKUGtocy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1Asr5aNeieGuXxrAopcJ2iBcCLp9EF695+PHnGuM3Zah/CTx/KBr69 WXslg/cZ8/+FimmrEkSNj/uIifSkJ4XRxiq1zNyzH/dg9M8ZBo6BXBbxTrQ8kL7q Fml5WjT4yYq7N1x3RpzaWSalojns2T4L69OqcwONl9uIAKOq6FDJUCNthQFxKon3 GvEGz/VkMlqyntqN9oZtB4z/13tDRXyNHuCnVarIMuI4KqU6o7t42VpR9IOXUzdU bI28LbleLwZE8j7fvbpEcJgZokp6JbG/ftn9tbjL6rAYrNOVfgkipHlqbQ+x3cNw rYkpq2l/454Sl2ApQujdNABOlvpVFeQ= -----END CERTIFICATE-----Generated at Sat May 31 16:30:36 2025 by rpki-client