$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: xQtIgLPZWIT3stUEsW/+7RTZV6Iyp77Rwsq5fGrvoH4= Subject key identifier: 6E:2D:48:5C:80:95:7B:C6:48:26:53:33:E5:00:77:32:6F:BB:84:8E Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: BE Signing time: Tue 03 Jun 2025 06:05:43 +0000 Manifest this update: Tue 03 Jun 2025 06:05:43 +0000 Manifest next update: Tue 10 Jun 2025 06:05:43 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: F3zxIOxd52uu5PO2Jclg8L7tZ/ve2YXbzgTvnRr8bqE=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Jun 3 06:05:43 2025 GMT Not After : Jun 10 06:05:43 2025 GMT Subject: CN=683e90b7-ba29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:d8:97:b8:fd:05:78:23:d7:e3:68:0d:e9: fa:69:6c:86:d1:54:27:a7:c3:86:c4:51:87:79:ee: 67:ae:ce:07:34:e8:40:ef:f8:d7:3e:a9:42:b1:86: 70:8a:4c:b8:92:59:ef:af:6c:8f:63:71:15:9a:31: 1c:93:e1:b9:76:04:94:39:a9:5f:41:5c:c4:2d:92: 37:a7:55:fc:63:92:aa:ac:5f:77:5d:79:2b:b2:24: 24:f9:ab:5b:42:f6:21:f4:05:db:cc:ae:30:06:8b: 44:8e:39:af:74:79:9e:c1:4e:14:3b:36:17:4c:4a: 80:f5:44:b1:a5:e1:50:6a:23:35:a5:ce:aa:c1:6b: a2:5d:41:dc:be:a9:7a:5b:5a:1f:1e:86:fc:9a:e3: 24:d8:a9:98:66:0c:97:09:5b:39:77:e8:ea:32:8f: a1:ef:e7:1a:c7:15:cd:50:07:06:50:77:e8:9e:bc: bd:60:da:4a:30:7c:fc:e9:db:2d:1d:6b:6b:71:c0: 8d:a3:4f:fe:5e:d0:e6:40:42:96:aa:d4:3c:0e:77: a4:0c:3f:91:c0:4c:bb:9a:38:3e:c9:ee:a3:19:13: 95:97:be:da:28:8c:d1:50:16:84:5c:6c:ff:20:0c: e6:a5:11:e7:7a:af:05:3e:9e:e4:c3:88:e0:64:e3: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:48:5C:80:95:7B:C6:48:26:53:33:E5:00:77:32:6F:BB:84:8E X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a9:a1:c9:02:38:14:cc:93:92:d3:87:a5:60:a7:5c:82:68: 40:f0:fb:90:ed:91:79:ed:cc:08:79:da:27:c1:0e:32:50:5b: 10:a2:d9:81:0d:a6:d0:b5:d3:25:3d:ad:1f:6a:91:69:d4:9a: 89:b3:55:11:0f:03:41:08:33:60:ef:2f:a0:9e:2f:0d:2a:c5: 59:27:fc:2a:50:6c:a8:88:51:89:f4:06:ff:7c:dd:e6:19:b1: 41:ef:7b:54:6c:29:c1:af:d5:23:7d:11:bb:d8:52:8b:cf:6d: 59:e6:bf:f1:71:67:cd:45:74:60:0c:74:ca:ff:7d:72:47:92: c9:b8:6b:9c:d7:43:47:41:07:de:de:a8:71:37:1d:f3:1a:25: 60:c7:60:dc:11:63:70:a0:09:13:a8:16:7a:26:c6:01:88:01: 78:f8:f1:20:1f:39:bc:9e:7e:fd:dd:4d:e8:f9:81:eb:4b:bb: 03:53:be:c7:6c:03:13:1f:81:15:89:d8:1f:71:7b:cc:32:f7: 9e:53:23:ad:ae:98:74:92:2a:d5:ba:87:6a:2b:f8:56:a7:20: 4e:04:9f:2f:40:84:ca:77:ac:cd:ab:63:94:c5:f1:73:8c:05: d4:36:6a:80:cf:95:24:bc:bc:ca:c5:cf:37:94:25:25:c8:75: e2:5a:1a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUwNjAzMDYwNTQzWhcNMjUwNjEwMDYwNTQzWjAYMRYwFAYD VQQDEw02ODNlOTBiNy1iYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32TYl7j9BXgj1+NoDen6aWyG0VQnp8OGxFGHee5nrs4HNOhA7/jXPqlCsYZw iky4klnvr2yPY3EVmjEck+G5dgSUOalfQVzELZI3p1X8Y5KqrF93XXkrsiQk+atb QvYh9AXbzK4wBotEjjmvdHmewU4UOzYXTEqA9USxpeFQaiM1pc6qwWuiXUHcvql6 W1ofHob8muMk2KmYZgyXCVs5d+jqMo+h7+caxxXNUAcGUHfonry9YNpKMHz86dst HWtrccCNo0/+XtDmQEKWqtQ8DnekDD+RwEy7mjg+ye6jGROVl77aKIzRUBaEXGz/ IAzmpRHneq8FPp7kw4jgZONtBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4tSFyA lXvGSCZTM+UAdzJvu4SOMB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1qaHJAjgUzJOS04elYKdcgmhA8PuQ7ZF57cwIedonwQ4yUFsQotmB DabQtdMlPa0fapFp1JqJs1URDwNBCDNg7y+gni8NKsVZJ/wqUGyoiFGJ9Ab/fN3m GbFB73tUbCnBr9UjfRG72FKLz21Z5r/xcWfNRXRgDHTK/31yR5LJuGuc10NHQQfe 3qhxNx3zGiVgx2DcEWNwoAkTqBZ6JsYBiAF4+PEgHzm8nn793U3o+YHrS7sDU77H bAMTH4EVidgfcXvMMveeUyOtrph0kirVuodqK/hWpyBOBJ8vQITKd6zNq2OUxfFz jAXUNmqAz5UkvLzKxc83lCUlyHXiWhpY -----END CERTIFICATE-----Generated at Wed Jun 4 00:16:40 2025 by rpki-client