$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: hqLgobJQqniewPXgP2CC9luK27ItrVvPpYrxpYsOHG0= Subject key identifier: 68:BB:96:87:51:F4:B7:0A:31:3E:B8:19:87:22:1D:E1:58:93:D4:40 Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0BE2 Signing time: Sat 28 Jun 2025 18:32:38 +0000 Manifest this update: Sat 28 Jun 2025 18:32:38 +0000 Manifest next update: Sat 05 Jul 2025 18:32:38 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: z/oomHmX+eQ49ovsJ3+8ee20DdDya+QUgK5If+T/2Dc=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fuEIOJZ2g7nFL90Iih/ZQree35PAM4VcWuWuu09soDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Jun 28 18:32:38 2025 GMT Not After : Jul 5 18:32:38 2025 GMT Subject: CN=68603546-cb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:fb:6f:71:27:66:52:87:a3:ad:37:0a:b0: f7:f9:0e:31:0d:cb:01:c2:34:76:1c:34:e4:e4:ee: f8:ae:e5:09:75:b8:d8:4c:e0:3a:67:34:40:4a:fd: 2a:9b:33:61:02:90:b5:e4:ee:30:70:36:db:d4:b7: 33:ed:68:c6:7d:8e:5f:01:89:2f:2c:17:e8:4f:bc: a6:f5:cc:a1:e7:b1:45:2e:6e:1d:61:8f:29:1d:43: 46:19:71:9e:78:35:30:d5:09:a2:1f:67:c5:ee:ef: 64:1e:87:9e:0e:ab:0a:b7:23:34:f3:7e:72:b0:dd: fd:89:b2:d7:d0:1e:28:0e:93:ee:f4:43:f7:06:18: c5:a9:c3:dc:9f:c8:8e:b7:00:ea:d4:98:2c:40:35: 19:94:ad:d6:b0:9e:7f:0b:42:c6:67:af:00:c9:03: c7:78:31:c6:bc:60:61:59:48:24:ad:37:41:80:4d: cf:23:cb:4d:0d:74:0d:61:4d:c2:d5:4c:17:64:07: 24:1c:91:49:e8:6a:71:a8:bf:13:a6:ac:cc:c0:13: 0a:26:8a:b5:a7:d0:c9:9d:3c:36:6f:26:67:ad:1b: a5:ea:39:dd:77:fd:fb:51:e5:99:95:b6:69:f6:50: d5:0a:55:ff:cd:23:d4:34:ca:c6:ca:2a:82:8c:2c: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:96:87:51:F4:B7:0A:31:3E:B8:19:87:22:1D:E1:58:93:D4:40 X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:4c:af:a6:66:53:24:8c:db:55:da:fd:eb:70:41:37:11: a2:3c:f6:61:db:3a:2b:35:7b:74:b5:c1:fe:cc:b6:df:df:09: a8:41:79:dc:f6:27:e3:6e:fd:59:1d:59:57:44:ca:02:e2:77: c1:02:a5:50:56:1e:17:06:96:e2:69:8c:a8:78:8d:61:66:41: 40:2c:62:1b:50:4d:a2:28:2b:c5:e2:23:0f:59:10:c6:e6:77: 5d:7d:c0:a4:b0:2a:d8:a7:ae:31:5a:2e:a4:1f:ff:c5:23:5e: 83:b4:52:b1:9e:03:d9:18:4a:2b:ec:1f:55:a1:19:23:21:eb: 1f:3d:b7:a1:52:0c:ac:30:61:80:0a:c5:4e:27:be:66:cc:6c: 2d:a9:fa:ea:3c:27:ca:b3:5b:dd:85:70:c4:64:a1:6d:7b:d1: 7c:58:d0:54:4f:18:a4:5a:c9:3d:c9:57:0f:9e:b9:db:f6:42: 4c:23:28:fd:e8:0f:77:37:60:99:e6:e3:dd:ee:8d:65:82:f8: c7:9c:05:1e:7d:b6:a8:1c:77:21:7e:77:7d:1c:35:fa:25:af: 63:3d:d7:e5:33:b6:72:40:06:6c:74:6a:1d:84:a3:be:31:ea: 1f:5c:8b:31:45:07:94:fa:46:8f:66:1e:e2:95:30:24:05:90: 20:36:0f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjUwNjI4MTgzMjM4WhcNMjUwNzA1MTgzMjM4WjAYMRYwFAYD VQQDEw02ODYwMzU0Ni1jYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTD7b3EnZlKHo603CrD3+Q4xDcsBwjR2HDTk5O74ruUJdbjYTOA6ZzRASv0q mzNhApC15O4wcDbb1Lcz7WjGfY5fAYkvLBfoT7ym9cyh57FFLm4dYY8pHUNGGXGe eDUw1QmiH2fF7u9kHoeeDqsKtyM0835ysN39ibLX0B4oDpPu9EP3BhjFqcPcn8iO twDq1JgsQDUZlK3WsJ5/C0LGZ68AyQPHeDHGvGBhWUgkrTdBgE3PI8tNDXQNYU3C 1UwXZAckHJFJ6GpxqL8TpqzMwBMKJoq1p9DJnTw2byZnrRul6jndd/37UeWZlbZp 9lDVClX/zSPUNMrGyiqCjCzqYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi7lodR 9LcKMT64GYciHeFYk9RAMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCr0yvpmZTJIzbVdr963BBNxGiPPZh2zorNXt0tcH+zLbf3wmoQXnc 9ifjbv1ZHVlXRMoC4nfBAqVQVh4XBpbiaYyoeI1hZkFALGIbUE2iKCvF4iMPWRDG 5nddfcCksCrYp64xWi6kH//FI16DtFKxngPZGEor7B9VoRkjIesfPbehUgysMGGA CsVOJ75mzGwtqfrqPCfKs1vdhXDEZKFte9F8WNBUTxikWsk9yVcPnrnb9kJMIyj9 6A93N2CZ5uPd7o1lgvjHnAUefbaoHHchfnd9HDX6Ja9jPdflM7ZyQAZsdGodhKO+ MeofXIsxRQeU+kaPZh7ilTAkBZAgNg+5 -----END CERTIFICATE-----Generated at Sun Jun 29 16:41:19 2025 by rpki-client