$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: q9Wi1PbybIr48/9LoTrOXT31oMxhyp7OLI1vKFKvrnA= Subject key identifier: 82:CE:BB:D1:E9:2C:52:5C:8C:EA:85:4D:F4:77:A7:E7:C8:EC:2C:8E Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0142 Signing time: Sat 31 May 2025 03:58:33 +0000 Manifest this update: Sat 31 May 2025 03:58:32 +0000 Manifest next update: Sat 07 Jun 2025 03:58:32 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: xOp++awhaj03urLZ2IPuwYK4wwqwL3Ym5C/MIbr8bVQ=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: DsVxbJQBFvHguy7znDHJZ9CR2UmTMow8V9P9QuFVJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: May 31 03:58:32 2025 GMT Not After : Jun 7 03:58:32 2025 GMT Subject: CN=683a7e69-312b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c4:68:76:7a:77:ec:81:e3:af:c1:7e:3a:9e: c4:39:2e:15:f7:44:70:fb:4a:d5:ec:38:96:38:7d: a2:8e:c5:c3:b1:30:af:9b:25:06:2e:95:f4:ff:b8: 73:d3:eb:a6:37:83:19:bc:3d:4b:0e:61:cf:4d:98: 5b:6b:b9:83:dc:b8:52:a5:34:2e:05:77:ae:cb:a4: 53:de:c4:e0:05:ab:55:f9:10:68:54:7a:53:52:de: c7:3f:58:3f:45:85:d4:76:9f:ce:b0:93:74:29:93: eb:ca:6b:93:4b:a6:81:37:ad:34:08:1d:8e:7e:49: 1a:e9:22:cc:da:66:7e:b8:e2:49:aa:a8:73:67:26: b9:b8:70:d9:1a:10:19:f4:60:19:0a:f9:e2:71:f5: e2:a0:83:08:f0:37:4a:9b:f8:95:8c:e6:b0:ed:93: c7:a2:e6:90:e5:50:26:2d:f6:45:e6:d1:b6:e9:cf: 19:3c:7b:79:df:97:96:07:71:36:a7:41:38:f3:fd: 76:96:4f:b0:6d:91:aa:e2:b1:3b:1f:76:ce:da:be: 12:3e:57:94:48:4a:b5:38:81:a5:6b:a1:5f:90:b3: 3b:24:b7:80:d1:5f:f5:f3:ed:be:b2:80:e0:26:f2: 3b:fb:97:f2:ef:9f:71:e6:15:c2:1c:9f:5a:22:2d: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:BB:D1:E9:2C:52:5C:8C:EA:85:4D:F4:77:A7:E7:C8:EC:2C:8E X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2b:b9:0d:59:fa:95:51:bd:67:5a:07:52:e0:71:c8:fd:e6: f1:a3:5b:20:57:b8:25:4e:53:b6:16:a0:5a:8a:87:87:dc:bf: 70:5c:36:ad:73:38:70:26:64:22:99:2e:e6:ac:e9:61:ec:ac: a7:f2:49:ec:9c:4a:4e:38:51:21:9c:74:d7:86:07:1f:13:d9: 33:ea:68:be:46:4d:30:34:00:48:b6:83:6e:31:f0:82:6e:b9: de:1e:c8:7a:a4:92:09:67:02:0f:a9:bb:be:2e:a2:41:9a:a4: 3f:e0:c4:00:34:9d:bc:e0:b0:30:95:fe:49:0a:c3:c0:f5:20: 7d:34:ef:11:d7:ac:5b:5a:d4:7a:75:2e:05:29:7e:95:71:a6: e7:72:af:42:cc:5e:b3:56:56:86:64:b6:bc:c0:37:dc:c3:16: 18:00:cc:4d:8b:eb:ec:0a:0d:aa:1a:84:fd:9b:e7:eb:3d:30: f0:b4:37:75:38:e6:80:46:6d:33:b1:20:0d:25:67:4d:ca:6d: 05:47:fe:7d:cf:37:84:fc:d4:16:26:e1:ff:4f:55:e5:66:0e: fd:d4:65:8b:3b:72:63:2d:e8:ff:29:8a:d1:9f:27:c3:d5:7a: 1a:69:7d:7e:ea:b9:56:60:25:f9:b9:c9:19:13:12:40:d0:11: 6d:d1:7e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUwNTMxMDM1ODMyWhcNMjUwNjA3MDM1ODMyWjAYMRYwFAYD VQQDEw02ODNhN2U2OS0zMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48Rodnp37IHjr8F+Op7EOS4V90Rw+0rV7DiWOH2ijsXDsTCvmyUGLpX0/7hz 0+umN4MZvD1LDmHPTZhba7mD3LhSpTQuBXeuy6RT3sTgBatV+RBoVHpTUt7HP1g/ RYXUdp/OsJN0KZPrymuTS6aBN600CB2Ofkka6SLM2mZ+uOJJqqhzZya5uHDZGhAZ 9GAZCvnicfXioIMI8DdKm/iVjOaw7ZPHouaQ5VAmLfZF5tG26c8ZPHt535eWB3E2 p0E48/12lk+wbZGq4rE7H3bO2r4SPleUSEq1OIGla6FfkLM7JLeA0V/18+2+soDg JvI7+5fy759x5hXCHJ9aIi3UdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILOu9Hp LFJcjOqFTfR3p+fI7CyOMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWK7kNWfqVUb1nWgdS4HHI/ebxo1sgV7glTlO2FqBaioeH3L9wXDat czhwJmQimS7mrOlh7Kyn8knsnEpOOFEhnHTXhgcfE9kz6mi+Rk0wNABItoNuMfCC brneHsh6pJIJZwIPqbu+LqJBmqQ/4MQANJ284LAwlf5JCsPA9SB9NO8R16xbWtR6 dS4FKX6Vcabncq9CzF6zVlaGZLa8wDfcwxYYAMxNi+vsCg2qGoT9m+frPTDwtDd1 OOaARm0zsSANJWdNym0FR/59zzeE/NQWJuH/T1XlZg791GWLO3JjLej/KYrRnyfD 1XoaaX1+6rlWYCX5uckZExJA0BFt0X4t -----END CERTIFICATE-----Generated at Sat May 31 16:53:42 2025 by rpki-client