$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: 8+Zs5oAOKl57mSpl7tH01/tLbN63Bi4/PMI94sIt3DM= Subject key identifier: E1:EE:28:B6:5A:99:76:52:23:BC:0F:48:38:67:BB:73:07:04:C8:39 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01CC Signing time: Mon 02 Jun 2025 16:34:07 +0000 Manifest this update: Mon 02 Jun 2025 16:34:06 +0000 Manifest next update: Mon 09 Jun 2025 16:34:06 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: FjBk0GvHzRdw3tp6DX62G6+swkv4e/cmiLp7X9QAqPI=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jun 2 16:34:06 2025 GMT Not After : Jun 9 16:34:06 2025 GMT Subject: CN=683dd27f-ce66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:61:de:2d:32:56:86:7c:05:59:c7:5b:82: 4d:20:fc:fd:f6:85:40:1d:1d:de:07:3d:3f:02:6f: fd:ec:ef:2c:13:08:a2:cb:ff:d5:13:bc:12:08:6c: 6c:70:ef:21:29:b3:b8:1b:17:73:db:6f:cb:96:3d: 2f:d7:92:e6:5d:eb:d7:e9:6f:e7:b1:7b:aa:13:a7: c8:33:dd:8b:f4:75:4a:9b:47:b1:25:69:f7:37:26: c4:8c:c3:3a:5b:4e:fa:9d:6b:95:96:6f:32:24:41: 32:89:8e:eb:02:63:ac:a2:34:1e:93:e8:be:11:b9: d1:01:d4:f2:e5:d6:39:f6:49:01:57:41:84:69:67: 67:b1:6b:20:34:86:0b:f5:c9:9d:d7:3a:99:c9:96: 02:db:72:3e:7a:0f:ff:22:b9:26:59:45:ae:78:a5: 01:03:b0:78:98:2a:a1:ae:18:15:f6:c5:9c:81:61: 23:c4:a9:0e:f0:52:5d:ed:36:68:58:6e:53:0b:78: 28:b7:1d:83:a9:a8:9b:20:1c:91:1c:d3:f2:4c:0e: 7f:d5:9b:c2:f3:73:6b:8b:da:52:2b:61:a6:20:27: 46:83:90:44:df:21:08:77:f7:1d:27:09:ee:06:cf: 89:d1:a5:77:9f:1e:bb:9f:dc:e8:b5:2d:00:4a:b0: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EE:28:B6:5A:99:76:52:23:BC:0F:48:38:67:BB:73:07:04:C8:39 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3b:98:08:52:08:d1:1f:2c:0d:66:e9:3c:91:70:4f:6c:62: 5c:cf:92:f9:7b:1a:06:db:1a:a4:bf:db:89:0b:73:67:bd:68: 7f:62:e7:12:cb:f2:82:9a:ec:58:e4:a7:e0:ea:c3:c5:d8:c6: 3d:ac:53:ed:59:07:41:ed:0c:5a:6b:89:25:3c:50:23:b7:4b: 46:4e:eb:12:3c:96:9e:df:54:87:43:43:f0:57:6a:4f:db:1d: 48:cc:ab:eb:ad:f8:01:88:ac:d9:87:f1:71:99:e3:5c:0b:54: 76:28:24:e2:fd:dd:d3:46:68:6a:c6:11:4a:1a:65:9c:0d:28: 8c:ec:31:0b:44:2c:9e:91:f8:a5:5c:de:39:9f:f7:ec:46:5c: a9:86:f5:49:f6:b9:72:ee:f6:e8:7f:d2:72:92:37:cb:37:b4: 5c:57:2a:3f:df:66:13:1b:c9:d0:63:f2:fc:6a:c9:63:c8:cf: 78:5b:11:cd:c0:9d:da:36:01:51:39:7f:91:86:5a:90:b3:c8: a1:fc:be:25:55:bf:56:a4:70:bb:fe:d9:1f:b9:e1:b3:ed:65: 0d:87:81:f1:79:38:56:ae:bb:4c:60:f6:60:20:74:bd:7d:9c: 94:6a:ff:77:7d:48:c0:ef:0a:1b:52:4d:b3:4d:36:f9:9d:33: 6d:97:2f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwNjAyMTYzNDA2WhcNMjUwNjA5MTYzNDA2WjAYMRYwFAYD VQQDEw02ODNkZDI3Zi1jZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwZh3i0yVoZ8BVnHW4JNIPz99oVAHR3eBz0/Am/97O8sEwiiy//VE7wSCGxs cO8hKbO4Gxdz22/Llj0v15LmXevX6W/nsXuqE6fIM92L9HVKm0exJWn3NybEjMM6 W076nWuVlm8yJEEyiY7rAmOsojQek+i+EbnRAdTy5dY59kkBV0GEaWdnsWsgNIYL 9cmd1zqZyZYC23I+eg//IrkmWUWueKUBA7B4mCqhrhgV9sWcgWEjxKkO8FJd7TZo WG5TC3gotx2DqaibIByRHNPyTA5/1ZvC83Nri9pSK2GmICdGg5BE3yEId/cdJwnu Bs+J0aV3nx67n9zotS0ASrDpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHuKLZa mXZSI7wPSDhnu3MHBMg5MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRO5gIUgjRHywNZuk8kXBPbGJcz5L5exoG2xqkv9uJC3NnvWh/YucS y/KCmuxY5Kfg6sPF2MY9rFPtWQdB7Qxaa4klPFAjt0tGTusSPJae31SHQ0PwV2pP 2x1IzKvrrfgBiKzZh/FxmeNcC1R2KCTi/d3TRmhqxhFKGmWcDSiM7DELRCyekfil XN45n/fsRlyphvVJ9rly7vbof9JykjfLN7RcVyo/32YTG8nQY/L8asljyM94WxHN wJ3aNgFROX+RhlqQs8ih/L4lVb9WpHC7/tkfueGz7WUNh4HxeThWrrtMYPZgIHS9 fZyUav93fUjA7wobUk2zTTb5nTNtly88 -----END CERTIFICATE-----Generated at Mon Jun 2 21:47:41 2025 by rpki-client