$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: MLho+ySQ4wwnGsPJi/XRtKnsXpp0m8z1Si/9nrUczAA= Subject key identifier: D3:8A:E1:48:C1:53:BA:2F:C8:6C:FD:A0:0A:35:96:EC:C9:DC:4C:BD Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C41 Signing time: Fri 30 May 2025 18:39:29 +0000 Manifest this update: Fri 30 May 2025 18:39:29 +0000 Manifest next update: Fri 06 Jun 2025 18:39:29 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: mbhE2CkCBZcdCeESn7icA0k53gDnXGB4jSjg3+F1neo=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: May 30 18:39:29 2025 GMT Not After : Jun 6 18:39:29 2025 GMT Subject: CN=6839fb61-479d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:54:d0:b6:2c:96:14:60:b0:56:4a:46:7c: 4a:d2:0f:a6:4c:7b:8f:97:bb:eb:b3:c5:c1:60:35: 1f:17:3f:97:1d:e8:ef:40:12:d6:69:cd:f3:c8:2f: 0c:76:0a:27:25:71:e8:cc:a4:f6:77:68:c4:64:49: ac:db:f4:2e:96:2f:ef:d5:54:6f:eb:80:df:9a:a8: 2c:fe:6d:6b:6a:53:2b:66:f9:60:30:a8:d6:ad:9c: 18:09:10:7b:4c:86:ec:d7:8a:d9:6c:ec:55:37:e6: 9d:6e:a1:c6:95:19:64:f3:5f:fd:12:e2:88:f7:7e: 7a:01:cd:0b:28:67:d3:ba:1f:7a:49:a0:10:a1:c1: eb:9c:ea:16:c4:4f:9d:a6:2c:3d:38:5c:a3:74:60: d8:dd:07:98:6b:ce:ab:9c:36:02:c1:19:7b:8b:c2: ee:13:c3:67:5f:80:51:fd:43:91:9e:02:c2:ba:81: ea:7f:7c:47:92:1c:fc:58:25:ff:9b:0b:f8:c5:23: 28:15:36:db:d0:74:89:17:33:d5:0d:3d:33:88:af: cc:17:28:13:3b:a0:e2:d6:ca:97:b4:3c:70:ad:51: cd:4a:e7:f8:52:34:8d:e9:f6:ba:3c:da:09:e4:65: 68:70:18:c4:77:c8:b3:46:ee:96:ff:68:d9:d8:99: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:E1:48:C1:53:BA:2F:C8:6C:FD:A0:0A:35:96:EC:C9:DC:4C:BD X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:0d:9d:aa:df:e4:08:34:77:63:98:bf:47:f5:7a:0c:ec:f4: 7e:e5:bb:dd:22:8e:e1:eb:c0:cc:0e:ac:47:46:04:89:d1:32: a9:f8:60:1b:66:32:48:8e:ff:c0:0a:83:6a:d8:f2:f7:c2:1c: 47:3b:61:fc:fc:00:59:c6:c6:27:07:95:bc:a9:4c:42:77:04: 49:61:b5:a5:5d:b4:03:60:07:81:62:1c:c0:f3:2a:15:89:38: bd:08:e9:aa:be:d2:ae:0e:97:c1:07:77:cb:43:a1:72:67:fe: 76:c9:3a:23:9a:f7:b3:2a:ed:f7:cd:bb:a8:c0:01:c7:3f:83: 82:8b:85:10:1b:4b:1e:f9:a1:bf:9a:47:5d:ea:cf:90:43:be: bf:e7:51:33:07:e0:78:b1:e6:6d:b5:aa:69:88:95:05:cc:0f: 6f:ba:66:9d:ba:8d:3c:51:0d:0a:67:ba:c8:3d:bb:82:b7:d3: 58:00:89:67:bc:76:31:4a:f9:85:e0:1e:f7:52:28:a7:95:58: d6:f2:a9:f6:76:82:b2:b7:4e:8d:cb:dc:c8:0c:e5:fe:96:3d: a3:0b:62:1d:97:91:6b:51:80:88:83:d1:f6:94:a4:5f:fe:5e: ae:07:43:81:64:2e:aa:a7:d7:bf:7f:95:af:2d:fa:59:a4:d2: 18:72:4a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUwNTMwMTgzOTI5WhcNMjUwNjA2MTgzOTI5WjAYMRYwFAYD VQQDEw02ODM5ZmI2MS00NzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUxU0LYslhRgsFZKRnxK0g+mTHuPl7vrs8XBYDUfFz+XHejvQBLWac3zyC8M dgonJXHozKT2d2jEZEms2/Quli/v1VRv64Dfmqgs/m1ralMrZvlgMKjWrZwYCRB7 TIbs14rZbOxVN+adbqHGlRlk81/9EuKI9356Ac0LKGfTuh96SaAQocHrnOoWxE+d piw9OFyjdGDY3QeYa86rnDYCwRl7i8LuE8NnX4BR/UORngLCuoHqf3xHkhz8WCX/ mwv4xSMoFTbb0HSJFzPVDT0ziK/MFygTO6Di1sqXtDxwrVHNSuf4UjSN6fa6PNoJ 5GVocBjEd8izRu6W/2jZ2JnLKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOK4UjB U7ovyGz9oAo1luzJ3Ey9MB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/DZ2q3+QINHdjmL9H9XoM7PR+5bvdIo7h68DMDqxHRgSJ0TKp+GAb ZjJIjv/ACoNq2PL3whxHO2H8/ABZxsYnB5W8qUxCdwRJYbWlXbQDYAeBYhzA8yoV iTi9COmqvtKuDpfBB3fLQ6FyZ/52yTojmvezKu33zbuowAHHP4OCi4UQG0se+aG/ mkdd6s+QQ76/51EzB+B4seZttappiJUFzA9vumaduo08UQ0KZ7rIPbuCt9NYAIln vHYxSvmF4B73UiinlVjW8qn2doKyt06Ny9zIDOX+lj2jC2Idl5FrUYCIg9H2lKRf /l6uB0OBZC6qp9e/f5WvLfpZpNIYckpY -----END CERTIFICATE-----Generated at Sat May 31 17:37:46 2025 by rpki-client