$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: Ealu6Xvkit/TR+2MbCzEUqMtLCKrjrse/vSH6w/AtDA= Subject key identifier: 78:2F:23:F9:30:14:FD:22:62:B6:D6:E8:B6:E3:1A:E9:96:FD:EA:FA Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 011A Signing time: Sat 31 May 2025 04:33:15 +0000 Manifest this update: Sat 31 May 2025 04:33:14 +0000 Manifest next update: Sat 07 Jun 2025 04:33:14 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: mfg2sy/udVXS9V2icMJEFS09/sTiMinUoff5/QppA3g=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: May 31 04:33:14 2025 GMT Not After : Jun 7 04:33:14 2025 GMT Subject: CN=683a868b-2756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:e2:5c:9c:53:72:83:95:79:61:2a:6e:94: 60:c8:00:08:38:c1:31:17:56:f9:07:3c:d3:e0:c9: b8:13:56:1d:38:2a:ba:d5:fa:ec:85:b6:bf:dd:4b: 89:c9:7d:93:bd:f5:65:d0:b5:94:db:a6:b1:15:e4: f9:16:f2:17:3f:17:c8:73:87:98:14:e8:89:a5:d3: 6e:8a:d9:72:76:eb:be:99:c1:e6:0b:c9:24:f6:2b: 20:f2:57:4d:75:f4:7f:50:ca:4b:0d:7f:d5:b8:f8: 6f:4a:eb:01:70:c6:e5:6b:38:52:99:6c:0f:4e:4c: bf:31:c1:8d:3f:31:2a:10:e8:4e:66:c7:d1:83:9c: 04:b3:c4:55:77:5c:29:a2:be:b0:4c:a6:04:9e:43: 4d:36:d0:82:12:05:d0:21:b0:59:09:98:f9:5e:21: d5:53:02:59:c8:9d:24:c9:8a:22:d2:b8:12:ab:04: cd:e2:0d:52:46:a5:f3:67:3a:36:07:74:90:98:0c: a3:f1:95:94:54:32:5e:1c:30:3a:b6:b0:af:0e:a9: 2b:9f:86:6a:51:d7:a6:63:c5:9c:56:15:69:9a:ba: 33:d8:ac:65:87:22:1f:33:4a:78:09:85:69:fc:71: 2c:4c:42:13:c9:ae:28:39:fd:c6:38:0c:6b:6a:99: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2F:23:F9:30:14:FD:22:62:B6:D6:E8:B6:E3:1A:E9:96:FD:EA:FA X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4f:a4:0e:4e:1f:15:db:57:13:6c:09:fa:0b:d0:fd:2e:78: 58:41:68:38:5f:ed:b4:e4:c6:b6:5a:3f:21:cb:f3:88:c1:21: 10:5d:68:48:80:3f:b4:42:2f:6c:1a:c3:b1:d9:70:7e:5a:93: 6f:e3:8e:76:87:6c:05:12:fe:7e:15:ae:ac:29:b9:37:99:1d: db:f0:2c:4d:99:65:3a:49:0a:c0:a5:41:bb:64:44:dd:66:8b: 01:62:69:ae:e0:2c:f8:34:fb:88:83:1f:e4:4c:5f:d2:0e:6e: ec:12:db:2d:c5:30:6d:31:b6:d7:21:b0:8e:38:d0:bd:04:04: 03:c1:54:ba:9e:6b:2d:3f:f1:2b:ed:38:3c:ea:78:61:30:d8: 0a:e2:dc:ac:b3:1c:f0:86:f7:cd:4a:f0:d8:25:6f:21:ea:73: 3b:c9:3b:bd:f0:06:bb:c9:f3:82:af:92:23:34:a7:bd:2e:9a: 77:66:35:9d:bc:b6:85:ad:94:5e:81:41:bf:7c:97:08:cf:8f: c2:46:4c:6a:d5:f9:0b:c0:5d:03:3f:63:89:7e:8b:f5:0b:4a: d3:d6:33:5c:a8:c5:a0:a2:92:8f:9f:11:61:62:e0:bf:14:f4: 26:1d:c9:20:7c:f2:27:aa:b9:59:d0:05:2c:31:86:83:49:7e: 00:99:06:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUwNTMxMDQzMzE0WhcNMjUwNjA3MDQzMzE0WjAYMRYwFAYD VQQDEw02ODNhODY4Yi0yNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW7iXJxTcoOVeWEqbpRgyAAIOMExF1b5BzzT4Mm4E1YdOCq61frshba/3UuJ yX2TvfVl0LWU26axFeT5FvIXPxfIc4eYFOiJpdNuitlyduu+mcHmC8kk9isg8ldN dfR/UMpLDX/VuPhvSusBcMblazhSmWwPTky/McGNPzEqEOhOZsfRg5wEs8RVd1wp or6wTKYEnkNNNtCCEgXQIbBZCZj5XiHVUwJZyJ0kyYoi0rgSqwTN4g1SRqXzZzo2 B3SQmAyj8ZWUVDJeHDA6trCvDqkrn4ZqUdemY8WcVhVpmroz2KxlhyIfM0p4CYVp /HEsTEITya4oOf3GOAxrapm8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgvI/kw FP0iYrbW6LbjGumW/er6MB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpT6QOTh8V21cTbAn6C9D9LnhYQWg4X+205Ma2Wj8hy/OIwSEQXWhI gD+0Qi9sGsOx2XB+WpNv4452h2wFEv5+Fa6sKbk3mR3b8CxNmWU6SQrApUG7ZETd ZosBYmmu4Cz4NPuIgx/kTF/SDm7sEtstxTBtMbbXIbCOONC9BAQDwVS6nmstP/Er 7Tg86nhhMNgK4tyssxzwhvfNSvDYJW8h6nM7yTu98Aa7yfOCr5IjNKe9Lpp3ZjWd vLaFrZRegUG/fJcIz4/CRkxq1fkLwF0DP2OJfov1C0rT1jNcqMWgopKPnxFhYuC/ FPQmHckgfPInqrlZ0AUsMYaDSX4AmQau -----END CERTIFICATE-----Generated at Sat May 31 16:33:03 2025 by rpki-client