$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: yilOOVdchha5SCGLn9rnGF5ggGigo2lhp0AYeQcVMKc= Subject key identifier: AA:47:3C:8F:5B:FB:39:F9:D2:F5:44:93:DD:EF:1A:D6:9F:A0:3B:BF Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 38 Signing time: Thu 03 Jul 2025 07:51:55 +0000 Manifest this update: Thu 03 Jul 2025 07:51:54 +0000 Manifest next update: Thu 10 Jul 2025 07:51:54 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: ok4atDoHfgxj3i5y6w6xy6QLh/qeOXegg+xkX4uqnno=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Jul 3 07:51:54 2025 GMT Not After : Jul 10 07:51:54 2025 GMT Subject: CN=6866369a-9d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:fb:64:ef:d3:2e:d0:b0:68:55:0b:5f:5b:0b: 57:98:6e:f1:70:cc:03:59:43:4d:39:4a:ea:54:ce: 36:ad:fe:a7:fc:9e:c3:d0:b8:8c:b7:3d:55:73:ba: 88:74:9f:52:4c:91:0d:f4:4d:3f:f5:66:ca:06:bd: a8:31:bb:bd:da:6d:b7:66:48:19:da:77:74:6e:be: 66:42:dc:8e:d7:d8:e6:3b:03:27:1b:04:49:71:99: 87:39:54:42:f9:ff:d5:c7:1b:6d:08:37:aa:c5:9f: ab:c1:f5:f6:d6:8d:7f:28:a0:60:de:ff:3f:8d:d2: 60:f7:15:1f:ec:e5:9e:a9:17:7c:52:6d:bc:d9:65: 76:56:a5:01:ab:29:c1:35:36:ad:51:05:99:5c:9d: 1c:82:d6:76:01:b7:15:5b:44:5e:f2:db:34:ed:d1: b8:93:24:be:89:1a:f2:14:a9:cc:51:70:a3:5f:b6: ee:75:0b:da:fe:1c:ee:3a:0c:f6:e4:cc:dd:bb:cc: c2:3a:e7:10:26:5e:17:af:80:87:8e:1d:af:bc:03: ac:d3:d5:87:18:31:32:0f:7f:47:f7:31:36:d6:7f: a2:d1:fd:75:66:1c:b5:56:34:f5:59:e4:b9:4a:b4: c9:3a:a3:38:b9:02:61:4c:62:98:df:81:57:a0:7b: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:47:3C:8F:5B:FB:39:F9:D2:F5:44:93:DD:EF:1A:D6:9F:A0:3B:BF X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1a:d9:50:f9:c6:79:7a:bb:19:9d:34:98:5b:5a:0f:fa:59: d7:8a:83:0c:5c:17:66:eb:65:e4:22:59:1d:30:47:d6:e4:02: 0e:ae:b3:74:9c:7d:70:48:c7:27:d8:04:93:8f:b6:af:b5:fc: 7f:8f:46:48:24:81:d3:3a:12:dd:9f:7d:37:be:56:00:57:c7: 08:14:0c:37:37:1f:d7:11:08:c3:ab:f5:03:db:fb:df:2e:1c: 4f:24:28:6c:59:0d:07:92:bb:67:bd:71:58:dd:14:f1:ec:dd: 82:40:b1:13:3b:9b:a5:72:26:4d:b7:80:0d:09:9e:f9:fc:63: 6d:0b:cc:27:cd:91:5e:81:95:5e:d5:9f:57:0c:74:ec:54:af: b1:90:25:ae:98:7e:7c:c5:1f:5d:12:05:fa:f7:10:1c:dc:8f: 24:e5:79:3f:6d:3c:0e:20:65:9b:69:55:61:0d:d9:d6:07:94: 0a:2b:7b:1b:d8:3b:bd:23:0d:89:dc:d0:8e:45:f8:97:6c:2a: 3c:30:21:f3:ce:e5:6f:52:0d:7b:1e:fb:b9:73:0c:68:4a:1f: f0:01:4a:df:a6:71:31:9f:04:d3:94:f9:50:9a:2d:ce:7f:8e: d5:77:e5:5c:56:99:f4:ea:ab:9c:f0:c2:e2:bd:54:cd:8c:0a: dd:5b:c6:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA3MDMwNzUxNTRaFw0yNTA3MTAwNzUxNTRaMBgxFjAUBgNV BAMTDTY4NjYzNjlhLTlkMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3+2Tv0y7QsGhVC19bC1eYbvFwzANZQ005SupUzjat/qf8nsPQuIy3PVVzuoh0 n1JMkQ30TT/1ZsoGvagxu73abbdmSBnad3RuvmZC3I7X2OY7AycbBElxmYc5VEL5 /9XHG20IN6rFn6vB9fbWjX8ooGDe/z+N0mD3FR/s5Z6pF3xSbbzZZXZWpQGrKcE1 Nq1RBZlcnRyC1nYBtxVbRF7y2zTt0biTJL6JGvIUqcxRcKNftu51C9r+HO46DPbk zN27zMI65xAmXhevgIeOHa+8A6zT1YcYMTIPf0f3MTbWf6LR/XVmHLVWNPVZ5LlK tMk6ozi5AmFMYpjfgVege2slAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqkc8j1v7 OfnS9UST3e8a1p+gO78wHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwa2VD5xnl6uxmdNJhbWg/6WdeKgwxcF2brZeQiWR0wR9bkAg6us3Sc fXBIxyfYBJOPtq+1/H+PRkgkgdM6Et2ffTe+VgBXxwgUDDc3H9cRCMOr9QPb+98u HE8kKGxZDQeSu2e9cVjdFPHs3YJAsRM7m6VyJk23gA0Jnvn8Y20LzCfNkV6BlV7V n1cMdOxUr7GQJa6YfnzFH10SBfr3EBzcjyTleT9tPA4gZZtpVWEN2dYHlAorexvY O70jDYnc0I5F+JdsKjwwIfPO5W9SDXse+7lzDGhKH/ABSt+mcTGfBNOU+VCaLc5/ jtV35VxWmfTqq5zwwuK9VM2MCt1bxuE= -----END CERTIFICATE-----Generated at Fri Jul 4 03:37:31 2025 by rpki-client