$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: HKpv6M1W2TmhLQ6GocwEe9VQd5PqCgc3cgRv5a9bFuw= Subject key identifier: 96:8E:A2:85:28:EC:FD:99:03:B4:38:1B:B5:22:C5:85:D8:7D:A5:E5 Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 23 Signing time: Sat 31 May 2025 07:25:12 +0000 Manifest this update: Sat 31 May 2025 07:25:12 +0000 Manifest next update: Sat 07 Jun 2025 07:25:12 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: KVD2NmXDhPIjmnZ7bHjPHXPGKKFEO99fjfKpC6wVl9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: May 31 07:25:12 2025 GMT Not After : Jun 7 07:25:12 2025 GMT Subject: CN=683aaed8-1bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:fd:f1:d7:6b:78:7f:96:8f:d4:f3:61:c2: a1:1f:7e:7d:29:7b:4f:4e:da:9e:01:53:23:7e:b7: 1e:bd:3f:ac:e6:37:cf:41:ae:15:46:a6:62:ed:14: 12:76:38:e7:b9:52:0b:99:df:0b:ac:f1:ac:51:ca: 9d:de:2b:fd:75:62:3e:b2:05:9d:b6:7f:64:52:93: 97:28:82:1f:05:5b:d0:b6:24:7f:b7:8b:91:c2:4c: df:fc:4f:c1:ef:58:cd:96:72:b0:10:54:56:77:05: e5:de:d1:df:c8:6c:b2:83:b2:40:f2:81:11:3e:d7: 34:7c:c9:cb:58:aa:9d:a8:c3:d6:85:70:89:6a:fd: 0c:31:ff:7f:a2:0c:a5:d2:83:d5:08:86:fa:84:3d: fe:d4:5b:fe:d0:5e:9f:0e:89:09:72:1c:1f:36:fd: 46:a5:ff:ba:9d:3c:4c:f4:44:5b:8c:1e:e0:45:57: c0:29:37:24:09:50:02:b5:b5:29:56:41:1b:73:56: bb:be:61:29:fd:7b:6b:7a:99:61:19:a8:a6:c0:b8: 0c:9d:4a:1f:19:f6:00:0c:f4:01:67:d2:50:31:97: 22:4a:83:0f:49:40:59:7e:7e:f4:fb:64:b4:1e:91: 81:2d:21:b7:c5:b3:a8:51:8c:8a:6f:d6:e6:d0:05: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8E:A2:85:28:EC:FD:99:03:B4:38:1B:B5:22:C5:85:D8:7D:A5:E5 X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:1f:1b:a7:c1:a8:1f:26:72:47:0f:59:85:74:90:4c:5c: 45:af:14:49:9f:08:c9:07:13:c2:6b:8e:40:9e:e6:2e:43:eb: ce:06:79:07:73:8d:cf:2b:ce:a6:ce:38:a9:2b:b9:34:4d:85: 74:98:64:82:a0:1a:8f:67:83:5a:14:ad:1a:98:ec:e6:4c:a7: fc:ab:0c:51:9e:79:a0:aa:00:f9:f8:51:3e:01:f3:cf:cd:5c: 17:d6:bc:aa:1f:df:73:9d:9c:44:fa:84:f1:4e:f8:92:9f:da: 1f:ed:a5:e6:be:15:6f:99:3d:6d:9d:77:c0:f6:e0:30:34:f9: 47:7a:9b:9f:73:ee:74:94:32:57:70:75:47:02:39:36:a6:e1: 3f:c8:0f:75:61:08:c1:f2:32:c1:5e:5c:d0:68:8d:84:5a:b8: 27:21:9a:86:a4:a0:e6:26:ac:87:24:c9:c9:7f:ad:19:5a:e1: 8d:1c:fb:58:59:d8:ae:87:1a:8c:87:6a:da:47:8e:dc:21:15: 73:82:75:8b:5d:7c:b0:7d:a0:1c:3f:d0:83:a5:59:e1:6e:fb: 68:7d:eb:f2:13:83:11:6b:e6:90:a2:84:43:f5:05:65:a3:fa: 48:8a:e8:ea:88:41:40:8e:0e:15:e3:a4:ec:6b:f2:ad:0b:37: d7:7e:07:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA1MzEwNzI1MTJaFw0yNTA2MDcwNzI1MTJaMBgxFjAUBgNV BAMTDTY4M2FhZWQ4LTFiZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL8f3x12t4f5aP1PNhwqEffn0pe09O2p4BUyN+tx69P6zmN89BrhVGpmLtFBJ2 OOe5UguZ3wus8axRyp3eK/11Yj6yBZ22f2RSk5cogh8FW9C2JH+3i5HCTN/8T8Hv WM2WcrAQVFZ3BeXe0d/IbLKDskDygRE+1zR8yctYqp2ow9aFcIlq/Qwx/3+iDKXS g9UIhvqEPf7UW/7QXp8OiQlyHB82/Ual/7qdPEz0RFuMHuBFV8ApNyQJUAK1tSlW QRtzVru+YSn9e2t6mWEZqKbAuAydSh8Z9gAM9AFn0lAxlyJKgw9JQFl+fvT7ZLQe kYEtIbfFs6hRjIpv1ubQBUB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlo6ihSjs /ZkDtDgbtSLFhdh9peUwHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIkXHxunwagfJnJHD1mFdJBMXEWvFEmfCMkHE8JrjkCe5i5D684GeQdz jc8rzqbOOKkruTRNhXSYZIKgGo9ng1oUrRqY7OZMp/yrDFGeeaCqAPn4UT4B88/N XBfWvKof33OdnET6hPFO+JKf2h/tpea+FW+ZPW2dd8D24DA0+Ud6m59z7nSUMldw dUcCOTam4T/ID3VhCMHyMsFeXNBojYRauCchmoakoOYmrIckycl/rRla4Y0c+1hZ 2K6HGoyHatpHjtwhFXOCdYtdfLB9oBw/0IOlWeFu+2h96/ITgxFr5pCihEP1BWWj +kiK6OqIQUCODhXjpOxr8q0LN9d+B3s= -----END CERTIFICATE-----Generated at Sat May 31 16:39:46 2025 by rpki-client