$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: QTLj7G5IMc8xj5CjUdlfttYVOiJo5gf+sx0CUbuLq1U= Subject key identifier: 23:76:58:86:D9:57:8A:D8:A8:01:00:F6:56:9B:04:74:FC:21:CA:E1 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 17F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 17F0 Signing time: Sat 10 May 2025 16:27:33 +0000 Manifest this update: Sat 10 May 2025 16:27:33 +0000 Manifest next update: Sat 17 May 2025 16:27:33 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: 6N8wqs6Uo7rAyraL3+Xw0fzlsoC8kZz8uzrfOGzk8ls=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6137 (0x17f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: May 10 16:27:33 2025 GMT Not After : May 17 16:27:33 2025 GMT Subject: CN=681f7e75-3b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:2e:28:1c:62:4c:52:63:f2:ba:7c:be:3a: 9e:aa:38:42:80:b8:d2:2a:ce:53:14:84:03:0f:25: 4b:32:ec:48:be:64:22:07:e1:40:5d:be:f1:90:7b: 4e:38:b3:1e:c1:56:6f:44:a1:0c:0d:16:be:b2:5d: 5e:4e:0c:a5:d2:c4:15:e0:58:98:29:d4:e1:76:97: 62:9a:34:f2:15:64:35:2e:24:38:33:c1:dd:73:cd: fc:a0:28:41:a3:32:b2:cb:62:eb:98:f9:f1:0f:da: b7:2c:dc:c9:62:6d:7d:c1:eb:f1:a8:da:fe:85:72: ff:f8:2a:d6:00:53:f2:a3:a6:7d:a9:26:8c:ed:0c: a4:66:cb:82:24:12:1e:98:10:83:df:7e:ea:27:a1: 48:dd:a4:25:40:7f:a9:46:5e:c4:bc:1a:6c:ee:af: 76:c8:87:14:e1:79:dc:f7:1b:c0:21:c2:88:72:a4: 03:d8:c3:e2:0c:87:63:92:6a:75:27:83:e0:9c:6f: 7d:76:0c:0c:75:72:34:b5:d3:4c:fb:8f:96:e5:f0: 48:d6:10:43:41:6b:eb:50:46:3e:da:3e:4c:ce:c0: f4:12:ad:df:32:7b:ad:70:21:00:b3:e4:23:b8:89: 72:7e:e8:62:02:6b:1f:7c:c3:c7:ba:2e:8d:d4:da: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:58:86:D9:57:8A:D8:A8:01:00:F6:56:9B:04:74:FC:21:CA:E1 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:2a:e8:24:19:ac:5c:ca:68:55:d1:16:19:5f:8a:7a:55:44: 0b:c2:82:59:93:9c:0c:46:3e:ff:5c:ed:9c:30:4c:e8:87:5c: a9:98:4c:6f:67:93:c7:16:e9:1a:79:c4:77:ac:ce:17:be:68: db:1c:dc:53:5d:e2:4f:93:0b:06:34:15:8d:4f:bc:7a:6f:61: bc:60:2f:41:43:19:fb:8b:cf:78:4d:da:87:26:a6:c8:05:98: 97:8f:02:da:65:e6:6e:dc:63:fe:22:ba:83:4b:66:dd:5e:35: bb:a4:50:91:ab:80:6a:19:72:24:d2:b7:29:fb:57:51:ee:b8: b7:5b:82:9b:fd:be:21:e1:9e:98:6d:c0:57:ad:cf:ab:97:ca: b6:e2:97:81:8f:cd:07:77:f4:04:c9:0d:88:2d:66:0c:25:90: 12:49:6e:4e:81:4f:a6:44:c0:46:2c:a1:89:5b:51:a1:40:d2: c5:83:15:25:2b:f5:31:70:54:ee:69:da:7c:74:36:da:fa:fe: ec:16:38:98:17:2b:de:dd:e6:e8:53:5f:30:03:c4:4c:de:1d: 97:70:67:a7:ea:64:2f:57:78:f7:68:55:6e:d3:58:b4:b5:43: 7d:6d:3c:c9:bf:f6:ce:91:21:93:0e:5a:ff:23:d8:a7:9a:6d: d0:cd:86:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUwNTEwMTYyNzMzWhcNMjUwNTE3MTYyNzMzWjAYMRYwFAYD VQQDEw02ODFmN2U3NS0zYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+IuKBxiTFJj8rp8vjqeqjhCgLjSKs5TFIQDDyVLMuxIvmQiB+FAXb7xkHtO OLMewVZvRKEMDRa+sl1eTgyl0sQV4FiYKdThdpdimjTyFWQ1LiQ4M8Hdc838oChB ozKyy2LrmPnxD9q3LNzJYm19wevxqNr+hXL/+CrWAFPyo6Z9qSaM7QykZsuCJBIe mBCD337qJ6FI3aQlQH+pRl7EvBps7q92yIcU4Xnc9xvAIcKIcqQD2MPiDIdjkmp1 J4PgnG99dgwMdXI0tdNM+4+W5fBI1hBDQWvrUEY+2j5MzsD0Eq3fMnutcCEAs+Qj uIlyfuhiAmsffMPHui6N1Nr/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN2WIbZ V4rYqAEA9labBHT8IcrhMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEKugkGaxcymhV0RYZX4p6VUQLwoJZk5wMRj7/XO2cMEzoh1ypmExv Z5PHFukaecR3rM4XvmjbHNxTXeJPkwsGNBWNT7x6b2G8YC9BQxn7i894TdqHJqbI BZiXjwLaZeZu3GP+IrqDS2bdXjW7pFCRq4BqGXIk0rcp+1dR7ri3W4Kb/b4h4Z6Y bcBXrc+rl8q24peBj80Hd/QEyQ2ILWYMJZASSW5OgU+mRMBGLKGJW1GhQNLFgxUl K/UxcFTuadp8dDba+v7sFjiYFyve3eboU18wA8RM3h2XcGen6mQvV3j3aFVu01i0 tUN9bTzJv/bOkSGTDlr/I9inmm3QzYYd -----END CERTIFICATE-----Generated at Sun May 11 09:02:33 2025 by rpki-client