$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: Wfg76kD+Z8AhjlilnXSe3FwVAgJOHgtFsFWsnjyYGYs= Subject key identifier: 68:7E:E4:F8:1C:89:E1:A6:96:DC:0C:10:95:30:00:B1:C3:B3:4F:6A Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 20 Signing time: Thu 15 May 2025 07:13:15 +0000 Manifest this update: Thu 15 May 2025 07:13:14 +0000 Manifest next update: Thu 22 May 2025 07:13:14 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: cJUGiReMsyqBE14G2WogLwAc7zedC+C8hk2LnGdbeos=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: May 15 07:13:14 2025 GMT Not After : May 22 07:13:14 2025 GMT Subject: CN=6825940b-8981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:fc:ba:12:ff:e5:09:02:67:97:2b:28:e2: 46:9d:b9:31:b6:19:be:6d:60:49:3a:03:05:26:9d: 49:70:35:d5:00:46:79:59:36:96:8d:cb:38:1f:6b: fb:49:73:c2:d5:2b:04:61:e4:51:f2:9b:a4:c2:98: 18:ae:ae:97:73:8c:7b:50:d1:d8:b0:d0:56:18:95: 25:e3:db:19:ed:5a:04:0d:53:5a:c2:26:73:ba:42: 95:53:f6:5d:33:a1:73:c8:e3:b1:13:7c:83:3b:eb: ba:26:95:24:85:a1:a8:11:f6:0b:61:d5:2a:35:79: 4f:ab:e7:a9:76:e6:d9:ae:c7:5f:86:bd:72:63:77: 29:96:75:b5:17:f6:ac:3e:1a:1b:92:d1:69:b3:e1: c4:c9:23:e6:e6:46:f9:99:45:0a:b6:db:1d:87:a2: 13:a1:82:57:82:fa:24:8e:79:b1:81:71:ea:02:ba: c2:e3:22:7a:e9:66:85:ff:41:d3:b8:68:36:73:89: 7d:6b:c1:43:ed:af:2c:3a:66:86:b4:28:ef:7a:34: b9:0e:87:26:7f:4a:40:53:66:e1:5e:65:6b:0e:bc: 43:c7:3e:fe:38:53:92:44:b6:89:95:7a:64:2f:82: 99:22:38:39:62:1c:c5:d9:ce:8c:1e:32:0f:e0:88: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:E4:F8:1C:89:E1:A6:96:DC:0C:10:95:30:00:B1:C3:B3:4F:6A X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6b:38:f8:4e:35:9e:51:6c:c1:14:5c:34:a7:16:e8:7f:72: 25:0b:30:63:7b:ee:76:31:01:fe:c8:b0:e9:7f:b5:31:44:a0: b8:99:16:13:a6:e2:df:d0:5b:9a:53:1e:c8:0f:f7:f7:7f:bd: 2e:5d:f7:30:26:a4:3b:19:33:94:90:88:53:ae:e3:5d:12:a1: a2:7d:1b:f6:86:19:84:f1:c2:cd:b0:33:13:0e:62:4c:82:0f: 74:f1:15:dd:b2:61:9d:1c:8f:71:89:e9:e6:55:4c:c7:47:a8: 37:44:cc:e5:ce:d1:ad:22:59:e4:68:2a:32:5f:5c:da:01:f2: 82:3c:10:80:a4:fa:1e:af:58:f1:ec:10:fc:34:87:de:55:4a: 77:51:bc:78:21:78:e0:ed:8e:2a:ba:d7:9a:55:95:37:f1:8e: ed:b8:9b:f3:bd:a1:26:6a:3f:05:60:cb:60:c9:1b:28:86:b4: d5:82:fb:6f:9e:4f:60:5a:9b:69:33:59:c4:19:2c:89:ab:be: 10:93:45:03:95:bf:4c:0a:85:eb:b6:b8:e7:5a:e8:eb:b8:5b: fb:9e:de:61:8a:20:80:f0:87:e2:ae:5b:11:0b:c8:ba:bb:4c: e5:2f:00:72:7b:dc:7c:34:9d:c7:ad:ee:85:82:3c:7f:52:1f: 72:7c:d1:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA1MTUwNzEzMTRaFw0yNTA1MjIwNzEzMTRaMBgxFjAUBgNV BAMTDTY4MjU5NDBiLTg5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSnvy6Ev/lCQJnlyso4kaduTG2Gb5tYEk6AwUmnUlwNdUARnlZNpaNyzgfa/tJ c8LVKwRh5FHym6TCmBiurpdzjHtQ0diw0FYYlSXj2xntWgQNU1rCJnO6QpVT9l0z oXPI47ETfIM767omlSSFoagR9gth1So1eU+r56l25tmux1+GvXJjdymWdbUX9qw+ GhuS0Wmz4cTJI+bmRvmZRQq22x2HohOhgleC+iSOebGBceoCusLjInrpZoX/QdO4 aDZziX1rwUPtryw6Zoa0KO96NLkOhyZ/SkBTZuFeZWsOvEPHPv44U5JEtomVemQv gpkiODliHMXZzoweMg/giHH5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaH7k+ByJ 4aaW3AwQlTAAscOzT2owHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANrOPhONZ5RbMEUXDSnFuh/ciULMGN77nYxAf7IsOl/tTFEoLiZFhOm 4t/QW5pTHsgP9/d/vS5d9zAmpDsZM5SQiFOu410SoaJ9G/aGGYTxws2wMxMOYkyC D3TxFd2yYZ0cj3GJ6eZVTMdHqDdEzOXO0a0iWeRoKjJfXNoB8oI8EICk+h6vWPHs EPw0h95VSndRvHgheODtjiq615pVlTfxju24m/O9oSZqPwVgy2DJGyiGtNWC+2+e T2Bam2kzWcQZLImrvhCTRQOVv0wKheu2uOda6Ou4W/ue3mGKIIDwh+KuWxELyLq7 TOUvAHJ73Hw0ncet7oWCPH9SH3J80dg= -----END CERTIFICATE-----Generated at Fri May 16 09:42:01 2025 by rpki-client