$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: DQ9RFegl7aYTThsncuQCvdxew98dD9DO1cXPE5xgbT4= Subject key identifier: 25:81:81:A4:A9:AB:30:9C:13:FA:1A:3A:E1:83:CD:ED:B4:38:3E:62 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 65 Signing time: Thu 15 May 2025 04:14:10 +0000 Manifest this update: Thu 15 May 2025 04:14:10 +0000 Manifest next update: Thu 22 May 2025 04:14:10 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: k4Yd0o4rny1AsR5f79+pvFGwgiEIVqpolJVDsCZTjow=) 2: D31DA3FAE55311EFA195DC68C4F9AE02.roa (hash: GYS8k9UwWROEU4CPy3zJZbjxwuE5OSbNBFEHxATP3jE=) 3: 1BF014320D5411F09D0E1A4CC4F9AE02.roa (hash: qtTlSykZWAQtBUB9Rat4VpmkVXZoqWdqikbCdbZliz0=) 4: 3E9ACB6EE29611EFAE82780AC4F9AE02.roa (hash: wyEjofnc8ole0121WyuEbUERePWJfuYpn1FXolEHMnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: May 15 04:14:10 2025 GMT Not After : May 22 04:14:10 2025 GMT Subject: CN=68256a12-b983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:56:bc:09:14:fe:15:58:50:1b:ee:09:fb: 76:a3:88:e0:d0:ec:30:10:6f:fe:ed:83:7b:3d:47: 5f:fa:e8:d2:62:0f:28:33:e6:20:15:a5:ed:28:88: d1:02:58:d1:e7:3e:5d:2d:1a:0a:ff:5e:61:e6:05: ec:76:44:b3:44:3e:6a:e4:fa:6b:0a:9e:44:8a:0d: 92:10:b0:2a:7e:42:82:8b:8f:a3:da:15:37:b6:e7: d5:53:68:cd:c8:bc:54:4f:b5:0a:89:e4:b6:9c:14: 09:55:7e:3d:ad:d1:5b:2d:1b:9c:04:54:d9:a9:b1: 0c:89:9c:d1:4d:35:69:c1:36:2a:fc:0e:88:5b:17: 63:f9:d2:75:0d:c8:46:96:f1:7b:5b:da:10:48:ab: c4:be:d9:bc:cc:d9:7a:76:04:46:6f:99:59:91:53: 44:ab:86:40:22:7a:41:55:2a:4b:1f:1a:ad:9d:94: 46:ca:b5:a0:bd:26:d3:ca:36:da:52:82:8f:b2:85: 05:2f:3a:c5:24:96:af:b7:e9:ba:7e:7b:d4:07:57: 96:37:36:71:2e:34:b4:c1:1a:88:16:26:e7:56:41: c9:82:d4:ee:5c:6f:7a:64:2a:a2:dc:50:83:ba:b3: 22:4c:01:5e:d1:de:0d:a6:d8:37:51:f3:c1:78:e6: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:81:81:A4:A9:AB:30:9C:13:FA:1A:3A:E1:83:CD:ED:B4:38:3E:62 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:56:e3:3d:5f:71:95:62:48:4e:25:02:66:c8:be:e5:f2:4a: 48:5e:90:c0:51:95:6e:f4:5b:e4:4b:03:c4:c3:0c:ec:5e:80: ed:9c:cd:0f:d7:40:da:ba:d9:62:a0:69:4e:23:f8:a0:e3:f4: 16:6b:09:c2:3d:74:95:37:6e:18:b6:a0:91:71:9d:fd:2b:24: 59:03:c1:8e:de:92:ab:ed:cf:5e:58:4e:9a:0b:d1:1a:fe:2d: 5b:84:d9:b3:b7:04:bb:01:5e:fc:87:48:8b:ae:2f:17:82:2d: e0:a6:25:33:d7:0b:5a:31:3a:86:21:78:43:8a:86:42:69:0b: cc:86:01:3e:3e:c2:23:c5:6b:19:42:3d:28:eb:79:a2:d8:9e: a0:7e:3d:a2:85:93:3d:d6:3d:71:52:ab:49:f7:6f:ae:79:9a: 1e:51:4e:29:e1:6c:96:8a:52:46:11:34:b8:d0:47:2c:b3:7b: f0:b0:03:43:4c:26:44:14:39:ee:e2:3c:83:f9:4c:9e:ec:e7: ef:3c:b1:74:94:5a:64:9f:47:62:6a:e5:11:98:fd:87:5b:10: c4:55:a9:e9:e7:1d:18:2c:26:21:e7:8a:20:0a:91:91:55:fe: d7:8e:fa:06:0f:41:99:96:84:28:33:85:26:b9:21:c8:a8:c2: cb:aa:f5:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjNDMTExMC8GA1UEBRMoNERDN0UyOEI1NDZGMkEwQjUzOEU4Q0RGODMyRDlBQTFG MzdDQzhFNDAeFw0yNTA1MTUwNDE0MTBaFw0yNTA1MjIwNDE0MTBaMBgxFjAUBgNV BAMTDTY4MjU2YTEyLWI5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAI1a8CRT+FVhQG+4J+3ajiODQ7DAQb/7tg3s9R1/66NJiDygz5iAVpe0oiNEC WNHnPl0tGgr/XmHmBex2RLNEPmrk+msKnkSKDZIQsCp+QoKLj6PaFTe259VTaM3I vFRPtQqJ5LacFAlVfj2t0VstG5wEVNmpsQyJnNFNNWnBNir8DohbF2P50nUNyEaW 8Xtb2hBIq8S+2bzM2Xp2BEZvmVmRU0SrhkAiekFVKksfGq2dlEbKtaC9JtPKNtpS go+yhQUvOsUklq+36bp+e9QHV5Y3NnEuNLTBGogWJudWQcmC1O5cb3pkKqLcUIO6 syJMAV7R3g2m2DdR88F45k25AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJYGBpKmr MJwT+ho64YPN7bQ4PmIwHwYDVR0jBBgwFoAUTcfii1RvKgtTjozfgy2aofN8yOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyM0MxL0QwMzIwRUY4QkY0 RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGNmaWkxUnZLZ3RUam96Zmd5MmFvZk44eU9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy M0MxL0QwMzIwRUY4QkY0RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2S2d0 VGpvemZneTJhb2ZOOHlPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGBW4z1fcZViSE4lAmbIvuXySkhekMBRlW70W+RLA8TDDOxegO2czQ/X QNq62WKgaU4j+KDj9BZrCcI9dJU3bhi2oJFxnf0rJFkDwY7ekqvtz15YTpoL0Rr+ LVuE2bO3BLsBXvyHSIuuLxeCLeCmJTPXC1oxOoYheEOKhkJpC8yGAT4+wiPFaxlC PSjreaLYnqB+PaKFkz3WPXFSq0n3b655mh5RTinhbJaKUkYRNLjQRyyze/CwA0NM JkQUOe7iPIP5TJ7s5+88sXSUWmSfR2Jq5RGY/YdbEMRVqennHRgsJiHniiAKkZFV /teO+gYPQZmWhCgzhSa5Iciowsuq9b0= -----END CERTIFICATE-----Generated at Fri May 16 16:50:14 2025 by rpki-client