$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: sWk3iJiOqZuls+4uV0imCf4hqkQJnLe9zEqVfueR6Ak= Subject key identifier: 06:B5:10:45:9F:FC:92:D4:76:67:30:31:D2:20:48:E1:80:2C:E0:82 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: 92 Signing time: Sat 31 May 2025 05:58:08 +0000 Manifest this update: Sat 31 May 2025 05:58:07 +0000 Manifest next update: Sat 07 Jun 2025 05:58:07 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: dIRBheUvW8q9wMjlObqaBzJJCJHpZm6AH9Z4xUXYtnI=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: jmXb0sPHquklWucQNPULW9k7ur2PuqaFZnebmPVFmaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: May 31 05:58:07 2025 GMT Not After : Jun 7 05:58:07 2025 GMT Subject: CN=683a9a70-6aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b0:d6:d5:8d:ff:64:44:68:d2:74:ea:51:76: 04:6e:9a:25:29:a3:55:82:21:6a:fd:be:c1:19:b2: cd:70:eb:ee:a0:32:06:34:94:c4:d5:0e:83:8d:fe: 5b:d5:38:c2:58:e7:90:1a:88:e2:8c:7f:3b:d3:86: a9:b0:3a:b4:ea:c8:6e:71:10:0e:12:1d:1a:c6:b6: 2f:ef:67:ff:d8:f9:07:f9:2e:28:3e:ef:f9:60:26: 0c:b5:b5:10:22:04:d6:8e:6d:b3:f2:f5:a1:51:b2: 0f:a1:98:2d:58:cb:75:97:dd:1d:4b:a1:22:fe:40: f2:e9:5b:c4:e1:11:aa:a4:29:de:72:ec:2a:ab:3a: ec:55:f0:31:26:4a:3b:69:31:ff:6f:89:e3:f4:97: b5:e3:85:f7:88:62:43:79:5f:77:9e:18:96:37:34: ca:6e:b2:73:ec:2f:f9:80:51:4d:cc:40:bf:c2:31: e3:85:f0:4e:9e:66:c8:4d:08:9a:87:88:95:22:8d: 9e:29:cc:1a:6b:75:95:4e:ff:29:0a:a9:20:13:ea: 10:da:c6:a7:f2:68:bb:79:ad:6b:24:fa:33:9f:ca: c2:13:cf:7a:1f:b1:1e:34:08:bd:f7:3b:a4:ad:60: 83:f3:99:25:09:d0:23:89:a9:9e:2b:2b:9e:ba:07: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B5:10:45:9F:FC:92:D4:76:67:30:31:D2:20:48:E1:80:2C:E0:82 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ea:21:8e:5b:52:11:07:a0:a7:90:92:e9:15:1d:57:32:9b: 41:44:82:65:74:9d:2d:ac:50:b5:af:7e:3f:80:74:2c:c0:41: 46:f3:f9:db:af:ca:4d:77:4a:91:dc:e1:7d:c5:cf:96:90:73: 7f:fc:f9:70:ad:f6:5a:bc:35:aa:ce:ab:75:1c:6a:27:c2:a9: 8e:03:2b:a6:23:e8:c1:8d:f0:32:c5:6f:f5:fc:27:c5:44:b7: df:1f:34:e3:bd:d3:4b:b5:31:58:06:29:13:82:bf:7d:f6:f1: fd:ed:7f:45:f0:50:d8:2f:b4:01:7f:97:ab:79:3e:a0:b9:3e: 26:fe:96:a7:ee:bf:67:9c:a9:e6:96:71:60:e6:ca:cf:c0:5d: 4f:63:1e:af:53:cf:6b:3a:e7:48:94:db:51:06:6e:f8:29:bd: 0c:8b:ca:dc:52:20:6f:6b:af:73:c2:04:7d:e8:10:bf:df:c9: 3f:22:a7:93:a9:2f:32:b0:5a:fd:af:a6:d1:76:30:a9:95:dd: 7f:39:52:17:e4:d2:4b:07:b4:ed:46:66:f2:51:a7:24:be:e1: de:c4:2c:f6:b6:9a:28:43:24:e6:3f:7b:f5:f0:18:3d:b2:4d: 24:cc:44:3a:db:03:80:0f:54:bc:3b:45:59:e3:a3:ce:2b:d0: 95:91:2f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUwNTMxMDU1ODA3WhcNMjUwNjA3MDU1ODA3WjAYMRYwFAYD VQQDEw02ODNhOWE3MC02YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LDW1Y3/ZERo0nTqUXYEbpolKaNVgiFq/b7BGbLNcOvuoDIGNJTE1Q6Djf5b 1TjCWOeQGojijH8704apsDq06shucRAOEh0axrYv72f/2PkH+S4oPu/5YCYMtbUQ IgTWjm2z8vWhUbIPoZgtWMt1l90dS6Ei/kDy6VvE4RGqpCnecuwqqzrsVfAxJko7 aTH/b4nj9Je144X3iGJDeV93nhiWNzTKbrJz7C/5gFFNzEC/wjHjhfBOnmbITQia h4iVIo2eKcwaa3WVTv8pCqkgE+oQ2san8mi7ea1rJPozn8rCE896H7EeNAi99zuk rWCD85klCdAjiameKyueugeKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa1EEWf /JLUdmcwMdIgSOGALOCCMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB46iGOW1IRB6CnkJLpFR1XMptBRIJldJ0trFC1r34/gHQswEFG8/nb r8pNd0qR3OF9xc+WkHN//PlwrfZavDWqzqt1HGonwqmOAyumI+jBjfAyxW/1/CfF RLffHzTjvdNLtTFYBikTgr999vH97X9F8FDYL7QBf5ereT6guT4m/pan7r9nnKnm lnFg5srPwF1PYx6vU89rOudIlNtRBm74Kb0Mi8rcUiBva69zwgR96BC/38k/IqeT qS8ysFr9r6bRdjCpld1/OVIX5NJLB7TtRmbyUackvuHexCz2tpooQyTmP3v18Bg9 sk0kzEQ62wOAD1S8O0VZ46POK9CVkS8s -----END CERTIFICATE-----Generated at Sat May 31 16:46:51 2025 by rpki-client