$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: Xulg2/gKaPLK+9sJCeG6RhZsQZoctIfT2dIxRb+aYbE= Subject key identifier: 13:01:C8:83:D1:5D:61:C9:D3:D2:6A:3E:B9:DB:84:5D:77:5C:81:C8 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 07DB Signing time: Thu 12 Jun 2025 20:48:14 +0000 Manifest this update: Thu 12 Jun 2025 20:48:14 +0000 Manifest next update: Thu 19 Jun 2025 20:48:14 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: LhmwKHW5HQatj51gKIDZ4FHFuptN96WYDrKD2BLtoKQ=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Jun 12 20:48:14 2025 GMT Not After : Jun 19 20:48:14 2025 GMT Subject: CN=684b3d0e-a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:06:26:73:19:18:59:d9:d0:ec:04:af:4a: 80:9c:19:f6:d8:88:90:26:77:98:a4:ff:51:7e:e3: df:b0:66:33:89:13:bc:a9:ff:66:69:3b:2c:13:79: 1d:b5:e4:77:3a:ef:a6:3e:46:88:a2:89:57:69:3f: ed:7d:0d:a5:6e:48:cc:47:e3:2f:16:36:28:3e:69: 2b:23:fb:e3:2d:99:ba:2a:7a:96:c6:5e:3b:10:19: c0:9a:e2:94:1b:33:bb:25:5b:8d:04:c7:1b:02:29: db:ab:3c:97:70:21:8e:8d:87:d0:96:e5:78:07:29: 66:76:35:13:3d:04:46:44:56:eb:53:23:98:06:37: 32:51:01:de:da:8d:4c:85:f7:8d:b7:c8:b5:37:7e: f8:b9:a2:88:e2:62:aa:8a:f3:ec:48:fb:d3:d8:ce: 58:12:87:af:50:5f:21:ff:09:8c:75:ef:cd:a8:98: ec:40:1d:ee:e6:85:93:4d:a2:af:c3:22:f6:e2:73: 54:f7:78:40:36:bc:3c:22:b7:72:2b:10:da:d7:2e: 3f:02:8f:0c:4b:5a:b4:ab:d1:7b:e4:49:11:c7:06: 99:bd:72:9a:f5:79:6e:d5:0e:6b:9f:01:68:8b:54: 62:74:93:1e:70:1d:2c:87:d4:e6:53:2c:5b:84:8b: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:C8:83:D1:5D:61:C9:D3:D2:6A:3E:B9:DB:84:5D:77:5C:81:C8 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cb:c0:b4:af:92:2a:92:ea:eb:aa:4a:bc:05:b0:f5:6f:82: f4:6d:5b:10:f7:14:4e:59:03:fc:17:55:b5:41:ec:28:53:5a: c4:ee:d6:3d:7a:8d:7d:78:f6:35:c1:10:c6:0a:26:79:b6:e9: bc:9a:9f:8a:41:87:77:d8:14:6f:bd:72:c5:e5:74:97:25:6f: d8:05:81:0c:ff:d7:41:91:1a:16:30:8f:1a:a8:4a:f1:7c:10: e3:e3:f0:d4:cb:fd:e3:4b:2f:5d:df:96:01:a3:89:63:7d:d7: 43:14:b4:5a:f7:f6:2e:6a:1d:55:0c:4b:77:29:f7:ec:d0:b6: d0:96:c3:0b:ed:b2:15:f6:29:30:10:53:37:97:9f:de:fa:e9: d0:90:ce:34:7e:74:94:2b:8d:72:44:5c:97:87:b8:14:5a:92: 86:7c:c1:0f:04:d8:94:b1:6c:c4:34:0a:22:e6:3f:3d:34:fb: 0c:e4:a8:82:93:e4:10:73:96:ed:ca:fb:d8:7d:75:e5:16:71: ee:a6:8e:41:9b:19:77:a7:10:19:85:0e:2e:8b:a9:17:3c:ca: 7b:b7:2f:92:13:2c:18:97:2e:89:97:d3:3c:90:dd:f3:a6:ff: 78:65:50:37:06:af:9a:05:84:c7:5e:4d:8b:16:bb:3e:10:22: 56:a9:e3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUwNjEyMjA0ODE0WhcNMjUwNjE5MjA0ODE0WjAYMRYwFAYD VQQDEw02ODRiM2QwZS1hOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmIGJnMZGFnZ0OwEr0qAnBn22IiQJneYpP9RfuPfsGYziRO8qf9maTssE3kd teR3Ou+mPkaIoolXaT/tfQ2lbkjMR+MvFjYoPmkrI/vjLZm6KnqWxl47EBnAmuKU GzO7JVuNBMcbAinbqzyXcCGOjYfQluV4BylmdjUTPQRGRFbrUyOYBjcyUQHe2o1M hfeNt8i1N374uaKI4mKqivPsSPvT2M5YEoevUF8h/wmMde/NqJjsQB3u5oWTTaKv wyL24nNU93hANrw8IrdyKxDa1y4/Ao8MS1q0q9F75EkRxwaZvXKa9Xlu1Q5rnwFo i1RidJMecB0sh9TmUyxbhItKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMByIPR XWHJ09JqPrnbhF13XIHIMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWy8C0r5Iqkurrqkq8BbD1b4L0bVsQ9xROWQP8F1W1QewoU1rE7tY9 eo19ePY1wRDGCiZ5tum8mp+KQYd32BRvvXLF5XSXJW/YBYEM/9dBkRoWMI8aqErx fBDj4/DUy/3jSy9d35YBo4ljfddDFLRa9/Yuah1VDEt3Kffs0LbQlsML7bIV9ikw EFM3l5/e+unQkM40fnSUK41yRFyXh7gUWpKGfMEPBNiUsWzENAoi5j89NPsM5KiC k+QQc5btyvvYfXXlFnHupo5Bmxl3pxAZhQ4ui6kXPMp7ty+SEywYly6Jl9M8kN3z pv94ZVA3Bq+aBYTHXk2LFrs+ECJWqeP7 -----END CERTIFICATE-----Generated at Sat Jun 14 16:22:09 2025 by rpki-client