$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json) Hash identifier: PLVBIUl4Vm+hRCIJllnJL4g7TY7tPoEhZ1o9zPF7bwE= Subject key identifier: 35:27:E9:5C:83:D5:B7:DC:AA:B1:F4:23:E3:7A:90:7A:58:93:81:20 Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Certificate serial: 1293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft Manifest number: 128C Signing time: Fri 16 May 2025 17:19:26 +0000 Manifest this update: Fri 16 May 2025 17:19:25 +0000 Manifest next update: Fri 23 May 2025 17:19:25 +0000 Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: I2rAW9EEtVTPerENfGCwUuoq6WD+nsdZv5qSV/7jS6A=) 2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: n2FBgQHuh988fwkOcnAooQ/jXQmiLgbdWeucP9Cz7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4755 (0x1293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Validity Not Before: May 16 17:19:25 2025 GMT Not After : May 23 17:19:25 2025 GMT Subject: CN=6827739e-e2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:e9:24:7d:65:cb:ee:ca:e3:4b:87:51:53: e2:a9:7a:10:ef:d2:54:3f:d6:d6:c7:c9:20:46:31: 7a:9c:73:e8:8a:a0:32:d5:64:b6:f4:54:92:ca:c2: 07:18:f1:51:26:e2:fd:1c:8d:2f:c4:28:1b:bc:5c: 7a:9e:4b:7e:83:94:e0:19:4c:be:79:da:5d:9e:dd: 34:4d:3f:fc:06:6d:df:f9:35:29:a9:10:49:51:8f: 7f:fe:42:f1:c8:a8:ca:d1:e5:9f:2b:6c:e4:d0:62: 3b:48:bc:80:5a:09:74:c3:c1:3c:35:ed:3a:c7:94: 7f:e7:8c:88:a7:11:a2:c1:10:3e:78:b1:b6:97:b9: 71:e4:f2:91:bd:91:41:22:fe:7c:c8:7e:f6:21:f6: fe:ef:e9:e7:2f:ec:12:cc:8c:36:a9:36:dc:98:bc: fb:e7:2a:24:71:8d:3a:20:b0:9b:d8:15:5e:fb:a4: 97:99:7d:8e:04:11:99:ba:5e:e4:7b:c0:b8:e8:ec: a0:3e:90:5d:d1:2b:7d:6d:22:67:aa:9f:de:00:3e: 2c:1a:78:3e:18:b2:d8:87:58:cf:c2:14:9c:5b:9a: e5:67:5c:98:6f:35:2c:1a:b5:58:63:08:56:8d:0a: c3:a3:06:7c:ab:a1:e2:eb:f4:b9:d9:5e:5c:0c:e4: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:E9:5C:83:D5:B7:DC:AA:B1:F4:23:E3:7A:90:7A:58:93:81:20 X509v3 Authority Key Identifier: keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5a:bc:df:3e:00:0f:79:66:fa:e6:97:90:1f:bf:45:a1:87: c3:02:e1:d0:66:f7:55:1e:f4:11:25:f2:57:b2:78:6e:26:f2: 88:cd:2f:7c:20:15:94:34:59:e1:33:1c:ef:9a:7b:b0:9c:44: ea:ff:7d:fd:74:c6:0f:60:bf:f7:f2:ca:5b:6c:02:05:3c:7a: 0f:85:c4:2a:85:1b:62:86:c0:2b:46:e3:a4:20:7c:18:58:9c: b9:43:84:8e:a4:53:6f:31:8d:e3:55:c8:30:28:08:31:d2:8d: b0:4a:51:99:e6:83:74:5f:05:fa:7f:3e:6c:a2:5f:e4:19:1a: 56:bf:bd:bc:ba:76:87:41:72:fd:76:03:59:86:00:e0:1a:78: fc:8f:9e:63:d6:de:5c:be:6d:0b:1a:93:4d:e9:cc:d5:6a:0c: a9:15:41:13:e9:3d:c1:99:22:36:78:e7:0c:6b:ae:40:18:75: 03:da:11:a4:34:f6:4f:79:bb:46:3a:f0:6e:e8:8f:64:ae:d7: 66:f6:e5:f4:f5:12:2d:0e:ff:6e:1f:14:f1:02:c2:a8:bc:f4: 77:d8:f1:e1:18:e6:91:22:52:d2:a0:58:dc:83:92:c7:b9:04: 1f:b2:16:12:db:8b:b0:68:08:8d:1c:48:42:16:38:c9:c7:a1: 80:90:93:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3 N0Q4N0I4RTYwHhcNMjUwNTE2MTcxOTI1WhcNMjUwNTIzMTcxOTI1WjAYMRYwFAYD VQQDEw02ODI3NzM5ZS1lMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSfpJH1ly+7K40uHUVPiqXoQ79JUP9bWx8kgRjF6nHPoiqAy1WS29FSSysIH GPFRJuL9HI0vxCgbvFx6nkt+g5TgGUy+edpdnt00TT/8Bm3f+TUpqRBJUY9//kLx yKjK0eWfK2zk0GI7SLyAWgl0w8E8Ne06x5R/54yIpxGiwRA+eLG2l7lx5PKRvZFB Iv58yH72Ifb+7+nnL+wSzIw2qTbcmLz75yokcY06ILCb2BVe+6SXmX2OBBGZul7k e8C46OygPpBd0St9bSJnqp/eAD4sGng+GLLYh1jPwhScW5rlZ1yYbzUsGrVYYwhW jQrDowZ8q6Hi6/S52V5cDOT0SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUn6VyD 1bfcqrH0I+N6kHpYk4EgMB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2 QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsWrzfPgAPeWb65peQH79FoYfDAuHQZvdVHvQRJfJXsnhuJvKIzS98 IBWUNFnhMxzvmnuwnETq/339dMYPYL/38spbbAIFPHoPhcQqhRtihsArRuOkIHwY WJy5Q4SOpFNvMY3jVcgwKAgx0o2wSlGZ5oN0XwX6fz5sol/kGRpWv728unaHQXL9 dgNZhgDgGnj8j55j1t5cvm0LGpNN6czVagypFUET6T3BmSI2eOcMa65AGHUD2hGk NPZPebtGOvBu6I9krtdm9uX09RItDv9uHxTxAsKovPR32PHhGOaRIlLSoFjcg5LH uQQfshYS24uwaAiNHEhCFjjJx6GAkJMz -----END CERTIFICATE-----Generated at Sun May 18 02:05:21 2025 by rpki-client