$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: QcY9ZFB0qABFucIy0vhRMrpiklRsVkxr3lA0bzI9BY0= Subject key identifier: 9D:3F:A2:A3:09:B3:F9:AE:74:1D:7F:2D:EF:4D:3B:46:AD:CA:3F:55 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 06 Signing time: Sat 31 May 2025 07:45:05 +0000 Manifest this update: Sat 31 May 2025 07:45:04 +0000 Manifest next update: Sat 07 Jun 2025 07:45:04 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: 4mDCqrtP3DHsPN56YPmM26B2Hg6s9OgHx1rww2w2Mno=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: May 31 07:45:04 2025 GMT Not After : Jun 7 07:45:04 2025 GMT Subject: CN=683ab380-f5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:dd:61:95:de:c4:b1:ab:09:83:d3:32:96: 1f:c0:cb:33:4e:9c:a5:27:dd:ba:91:28:3c:cf:67: e7:0e:97:7a:80:55:b0:2f:2d:b7:8f:58:97:3f:fb: e9:48:d3:7e:8c:7b:47:3b:96:09:7f:e7:f7:a0:9c: fe:a7:bc:9f:cf:04:50:5b:70:1b:ae:50:92:19:9c: 58:4b:f1:da:5d:a6:2f:a2:44:66:aa:a1:5f:8e:c8: f0:70:a4:e6:bd:fd:91:98:b0:05:44:46:f4:51:19: 69:e8:bd:8e:84:a0:5c:ec:7d:0c:38:bb:bf:c7:ff: 1a:ab:56:5e:2b:7f:df:f7:fc:82:56:f4:37:d0:40: 71:55:4a:9c:99:db:bd:3f:83:ae:3f:79:d1:38:b1: 0a:10:84:73:0e:69:7c:b2:3e:79:47:14:af:0f:e0: ce:12:2e:a3:2c:8f:e9:b6:cf:9c:b0:b9:fc:a8:33: 54:fd:43:16:fb:78:17:df:38:dc:3d:c9:f7:5f:30: 85:2a:ed:2c:ec:67:c4:02:f1:a6:44:44:9b:14:90: e8:52:db:0e:a0:55:97:8c:1b:2b:c1:48:17:ba:4b: e0:33:85:47:47:6b:a8:c2:09:fb:11:10:16:24:4e: b2:01:b5:7f:c9:4e:97:c8:08:c1:41:91:29:ac:e3: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:A2:A3:09:B3:F9:AE:74:1D:7F:2D:EF:4D:3B:46:AD:CA:3F:55 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d7:63:37:49:77:0e:bf:8b:54:c5:65:2a:70:b6:7c:f7:68: 14:f1:82:97:ec:47:fe:18:56:f2:84:8f:74:78:95:b5:aa:eb: de:f8:57:0e:25:29:b8:99:72:e1:8b:bf:e2:57:09:7f:76:b8: fb:4b:e5:21:58:09:a9:3c:27:b3:14:de:5e:62:1f:79:c7:6a: 2a:80:c9:34:97:45:c6:5e:e4:5e:02:fa:09:07:ed:0b:78:e9: 65:ef:57:15:47:15:1e:f1:4b:07:62:cf:df:5d:b2:59:54:46: be:85:5c:fd:d9:1b:0b:70:bd:9d:b4:05:6d:15:dd:06:a1:1d: d8:58:c5:d0:3b:53:27:33:44:ac:53:50:bf:a4:54:1c:84:26: 15:6c:16:6f:e1:02:91:61:78:31:67:07:42:4d:c1:b9:5c:e7: c5:f9:54:f6:27:d1:a1:e1:69:23:9f:63:30:9b:bd:ba:a5:3c: 98:07:02:37:2c:a6:7d:b0:ca:1a:28:e7:1f:08:36:69:d5:67: f0:b6:89:d4:44:cc:c4:9d:bf:15:55:72:7a:44:98:be:89:2b: 51:91:31:20:f2:57:fa:a1:dd:76:ae:da:29:86:2c:5e:f2:f4: b8:56:08:c7:b9:91:13:38:71:e5:02:7d:45:f0:dc:bf:15:af: e2:b3:0f:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTA1MzEwNzQ1MDRaFw0yNTA2MDcwNzQ1MDRaMBgxFjAUBgNV BAMTDTY4M2FiMzgwLWY1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5X91hld7EsasJg9Mylh/AyzNOnKUn3bqRKDzPZ+cOl3qAVbAvLbePWJc/++lI 036Me0c7lgl/5/egnP6nvJ/PBFBbcBuuUJIZnFhL8dpdpi+iRGaqoV+OyPBwpOa9 /ZGYsAVERvRRGWnovY6EoFzsfQw4u7/H/xqrVl4rf9/3/IJW9DfQQHFVSpyZ270/ g64/edE4sQoQhHMOaXyyPnlHFK8P4M4SLqMsj+m2z5ywufyoM1T9Qxb7eBffONw9 yfdfMIUq7SzsZ8QC8aZERJsUkOhS2w6gVZeMGyvBSBe6S+AzhUdHa6jCCfsREBYk TrIBtX/JTpfICMFBkSms4x8fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnT+iowmz +a50HX8t7007Rq3KP1UwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3XYzdJdw6/i1TFZSpwtnz3aBTxgpfsR/4YVvKEj3R4lbWq6974Vw4l KbiZcuGLv+JXCX92uPtL5SFYCak8J7MU3l5iH3nHaiqAyTSXRcZe5F4C+gkH7Qt4 6WXvVxVHFR7xSwdiz99dsllURr6FXP3ZGwtwvZ20BW0V3QahHdhYxdA7UyczRKxT UL+kVByEJhVsFm/hApFheDFnB0JNwblc58X5VPYn0aHhaSOfYzCbvbqlPJgHAjcs pn2wyhoo5x8INmnVZ/C2idREzMSdvxVVcnpEmL6JK1GRMSDyV/qh3Xau2imGLF7y 9LhWCMe5kRM4ceUCfUXw3L8Vr+KzDxw= -----END CERTIFICATE-----Generated at Sat May 31 16:47:51 2025 by rpki-client