$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: ckwrA83ILojGoLV5/kCMNj2mrUXHbCRZpENEwORJB80= Subject key identifier: B6:61:AB:D9:49:C3:C4:20:20:04:F8:A8:29:4A:FA:F6:70:97:3C:2A Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 34A7 Signing time: Sat 31 May 2025 14:29:28 +0000 Manifest this update: Sat 31 May 2025 14:29:27 +0000 Manifest next update: Sat 07 Jun 2025 14:29:27 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: RHo3A8eNl52S7z9TcJ8U/2FwAqGdcAejYeHMAFc18Og=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: May 31 14:29:27 2025 GMT Not After : Jun 7 14:29:27 2025 GMT Subject: CN=683b1248-5a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b7:16:d4:4b:bf:ed:b7:81:43:9d:14:67:52: 11:76:cd:48:72:55:fd:19:da:f4:29:0f:8c:f4:d7: e6:97:b4:d1:01:4f:c8:51:8a:d7:2d:a4:92:83:5f: 47:fe:00:b8:a7:c7:ce:fb:1b:0f:83:b4:d9:98:9a: 3e:f0:5f:a5:18:fe:4e:81:b4:e7:2a:d2:63:00:76: 30:a0:9a:36:e6:b7:c5:36:0a:0d:f5:66:ab:c0:31: 94:e0:84:af:32:aa:a7:69:0a:57:cb:38:99:d3:fe: a3:34:3c:9b:c7:d9:e9:94:7a:4d:d2:a7:6d:91:0f: 8d:4b:1b:fc:7f:d4:62:de:b4:b6:5b:c0:31:08:c8: de:dc:13:d4:25:16:cc:c0:49:f8:73:c3:e3:f0:53: 7f:fc:60:af:31:fc:74:ed:db:18:cf:f4:03:b4:b7: 9e:6c:6d:e7:f3:8f:5e:d9:e2:86:44:57:29:a0:19: c6:81:2b:50:0e:ff:78:5b:ad:df:72:a9:7f:0e:81: 1a:7b:da:d7:3c:b5:2b:87:27:08:07:bd:b3:88:f4: 0f:ff:21:e8:af:2d:3d:e5:f8:fd:4f:f3:b5:55:70: 6d:77:04:5b:c9:56:7a:15:a6:c3:78:bc:7a:9e:d4: 5a:cf:08:bb:80:fc:ce:0a:4d:83:86:d4:7c:98:44: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:61:AB:D9:49:C3:C4:20:20:04:F8:A8:29:4A:FA:F6:70:97:3C:2A X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:73:40:d8:ba:28:c0:61:e6:f7:c0:50:e8:7f:4f:90:aa:b4: 17:b6:7c:f8:cc:af:58:a9:f4:17:7f:2b:f8:b4:66:0c:70:c1: 41:f1:72:ae:1a:32:56:07:69:6b:85:6d:01:1b:32:b9:e7:7b: d8:20:24:ea:fd:14:70:c7:a3:37:3f:f6:df:e1:81:86:e6:6d: f1:c4:c5:59:82:fe:f9:34:3b:b8:c3:98:6c:8f:37:64:07:fd: 1c:52:71:49:8b:f9:45:19:be:74:d7:a2:06:45:5b:ad:85:74: 1f:ad:7d:be:27:c0:e4:cf:b3:0e:91:cb:be:d6:12:5d:f3:54: 9c:27:db:b0:fc:d8:f7:dd:78:51:f7:34:e8:67:d2:94:ed:1b: 3a:2a:a8:c0:dd:4c:b8:46:aa:95:65:2a:dd:f0:9c:b1:82:2b: f8:ed:fd:49:93:c5:18:d0:6c:a8:7e:8b:e2:72:2a:1e:8f:7d: 10:2e:e4:bc:17:95:fc:eb:50:f2:e3:56:06:4f:77:11:e4:75: 6d:ba:fe:52:9a:84:8a:37:8e:25:c5:4b:b1:21:46:80:73:f9: d7:c7:c1:28:ec:64:c2:33:7a:51:b0:05:cd:c7:54:ed:14:00: ab:7f:aa:6d:72:d7:32:2e:2c:23:03:91:1d:50:3d:47:88:27: 16:4d:be:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwNTMxMTQyOTI3WhcNMjUwNjA3MTQyOTI3WjAYMRYwFAYD VQQDEw02ODNiMTI0OC01YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bcW1Eu/7beBQ50UZ1IRds1IclX9Gdr0KQ+M9Nfml7TRAU/IUYrXLaSSg19H /gC4p8fO+xsPg7TZmJo+8F+lGP5OgbTnKtJjAHYwoJo25rfFNgoN9WarwDGU4ISv MqqnaQpXyziZ0/6jNDybx9nplHpN0qdtkQ+NSxv8f9Ri3rS2W8AxCMje3BPUJRbM wEn4c8Pj8FN//GCvMfx07dsYz/QDtLeebG3n849e2eKGRFcpoBnGgStQDv94W63f cql/DoEae9rXPLUrhycIB72ziPQP/yHory095fj9T/O1VXBtdwRbyVZ6FabDeLx6 ntRazwi7gPzOCk2DhtR8mEQxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZhq9lJ w8QgIAT4qClK+vZwlzwqMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3c0DYuijAYeb3wFDof0+QqrQXtnz4zK9YqfQXfyv4tGYMcMFB8XKu GjJWB2lrhW0BGzK553vYICTq/RRwx6M3P/bf4YGG5m3xxMVZgv75NDu4w5hsjzdk B/0cUnFJi/lFGb5016IGRVuthXQfrX2+J8Dkz7MOkcu+1hJd81ScJ9uw/Nj33XhR 9zToZ9KU7Rs6KqjA3Uy4RqqVZSrd8Jyxgiv47f1Jk8UY0Gyofovicioej30QLuS8 F5X861Dy41YGT3cR5HVtuv5SmoSKN44lxUuxIUaAc/nXx8Eo7GTCM3pRsAXNx1Tt FACrf6ptctcyLiwjA5EdUD1HiCcWTb7K -----END CERTIFICATE-----Generated at Sat May 31 17:01:21 2025 by rpki-client