$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: E5KDjrw6pzWwENxxe6W4qwQvQ2m9tCEDFFyrKY1sQCE= Subject key identifier: FF:8E:7B:DD:FE:40:23:86:65:7D:16:27:71:C5:AB:B2:E9:11:36:28 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C55 Signing time: Fri 30 May 2025 18:33:26 +0000 Manifest this update: Fri 30 May 2025 18:33:26 +0000 Manifest next update: Fri 06 Jun 2025 18:33:26 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: rgh63zDwi2G/H/Lvv/BhO1dD+NBKNzS+tKE6Hm5p0DY=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: May 30 18:33:26 2025 GMT Not After : Jun 6 18:33:26 2025 GMT Subject: CN=6839f9f6-92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:a5:8b:77:12:84:78:65:f3:a7:19:fa:d9: 38:b7:cf:6e:f4:39:06:1b:14:33:a8:8c:26:76:9f: 19:29:a5:98:f6:cd:39:11:63:16:c8:7b:f8:aa:76: de:42:5a:84:6d:18:07:ce:d7:db:d9:00:4c:f7:6c: a1:89:b6:27:7f:6c:dd:dd:33:af:4b:3c:57:0d:63: af:4c:a0:ba:34:6e:71:5d:73:3b:7f:32:c8:99:c9: 4d:59:3b:aa:a2:2f:2d:71:6c:af:6e:3c:79:40:28: dc:b8:14:79:a5:7a:24:12:83:70:7e:d7:0f:e3:5c: 0a:97:01:01:d7:b2:35:6c:1e:ad:d1:7c:7f:70:d5: fc:23:d0:ce:9b:df:8d:20:1c:f5:01:70:28:a2:e4: fb:06:86:7f:70:76:ab:05:58:85:6b:01:aa:5c:20: 30:1a:99:cf:32:60:7b:ed:fd:b8:93:9a:ba:20:4e: 0f:c8:11:7d:e8:66:af:46:f7:c0:17:5f:70:26:7d: 3d:74:91:50:ac:07:61:e0:1d:ac:4d:79:f9:5a:b9: 48:89:ca:64:02:e1:b7:e4:79:b5:ea:95:0d:58:55: e6:8d:b5:82:22:37:0b:85:af:24:ee:be:89:53:ab: 36:35:0f:2f:7e:d3:de:53:9f:17:68:88:30:5e:39: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:7B:DD:FE:40:23:86:65:7D:16:27:71:C5:AB:B2:E9:11:36:28 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:6d:79:d2:25:1d:81:4b:d4:7b:0c:2e:e8:79:55:5e:42:54: c4:b3:75:5f:e8:1e:40:4a:ff:d0:3e:40:5c:30:12:67:5b:27: 91:d8:ee:4c:db:28:74:bb:50:75:68:9b:f0:81:26:38:03:24: 4b:bf:47:e4:32:c9:2a:e6:00:b4:12:f2:b1:e2:7d:62:8d:9c: ac:b2:c2:b0:ed:89:01:9b:a1:2f:9f:b1:92:5f:78:42:1e:33: 14:96:36:4b:7e:c3:86:0f:7f:e9:7a:7b:34:3b:fe:7d:10:ad: fd:ad:47:d8:48:82:20:fe:41:37:3a:9d:5b:da:0c:d8:c3:b0: d8:28:9b:5a:00:32:5f:a2:34:15:a2:3d:e1:cc:d3:26:3f:73: bc:09:57:fd:c8:11:78:04:e6:79:ac:48:2b:12:0a:4d:a0:c9: 7b:7c:4f:c5:91:7e:6e:c9:c6:13:84:bc:2a:da:2d:ad:da:d3: 39:1e:e0:c9:27:8b:ad:77:59:68:4b:c7:71:16:53:61:f9:53: cd:9f:ba:9e:89:c6:f9:33:15:6d:64:21:73:31:37:05:31:b3: 8e:d7:f5:f9:5a:c8:77:7b:09:fa:37:69:a6:50:9a:f5:e5:4d: 02:aa:8f:d5:02:2c:52:17:2d:09:47:60:05:9a:db:4c:13:83: e0:61:94:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNTMwMTgzMzI2WhcNMjUwNjA2MTgzMzI2WjAYMRYwFAYD VQQDEw02ODM5ZjlmNi05MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8Gli3cShHhl86cZ+tk4t89u9DkGGxQzqIwmdp8ZKaWY9s05EWMWyHv4qnbe QlqEbRgHztfb2QBM92yhibYnf2zd3TOvSzxXDWOvTKC6NG5xXXM7fzLImclNWTuq oi8tcWyvbjx5QCjcuBR5pXokEoNwftcP41wKlwEB17I1bB6t0Xx/cNX8I9DOm9+N IBz1AXAoouT7BoZ/cHarBViFawGqXCAwGpnPMmB77f24k5q6IE4PyBF96GavRvfA F19wJn09dJFQrAdh4B2sTXn5WrlIicpkAuG35Hm16pUNWFXmjbWCIjcLha8k7r6J U6s2NQ8vftPeU58XaIgwXjke4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+Oe93+ QCOGZX0WJ3HFq7LpETYoMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmbXnSJR2BS9R7DC7oeVVeQlTEs3Vf6B5ASv/QPkBcMBJnWyeR2O5M 2yh0u1B1aJvwgSY4AyRLv0fkMskq5gC0EvKx4n1ijZysssKw7YkBm6Evn7GSX3hC HjMUljZLfsOGD3/pens0O/59EK39rUfYSIIg/kE3Op1b2gzYw7DYKJtaADJfojQV oj3hzNMmP3O8CVf9yBF4BOZ5rEgrEgpNoMl7fE/FkX5uycYThLwq2i2t2tM5HuDJ J4utd1loS8dxFlNh+VPNn7qeicb5MxVtZCFzMTcFMbOO1/X5Wsh3ewn6N2mmUJr1 5U0Cqo/VAixSFy0JR2AFmttME4PgYZSF -----END CERTIFICATE-----Generated at Sat May 31 16:29:30 2025 by rpki-client