$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: 5wb+9o9pxYHkrMrJ9xB/ZdF7B6frKKkVRnDsxYukELw= Subject key identifier: 39:26:74:BC:D7:23:EB:4A:12:BB:10:3D:78:32:D6:82:B7:AD:46:68 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 83 Signing time: Sun 11 May 2025 05:22:15 +0000 Manifest this update: Sun 11 May 2025 05:22:15 +0000 Manifest next update: Sun 18 May 2025 05:22:15 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: 2TKUk9+1DFZ7aCJLO4dpLvmPTNOXft1lT7O26H4IQlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: May 11 05:22:15 2025 GMT Not After : May 18 05:22:15 2025 GMT Subject: CN=68203407-8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:c6:cb:73:36:17:bd:62:6e:80:82:a8:18: 32:c9:72:05:2d:6a:62:67:6c:48:59:99:34:f9:d5: 6e:47:db:cb:c6:a2:b4:2a:ae:ab:6d:d5:78:81:58: 66:41:9c:9e:21:8f:17:73:47:9e:95:43:8c:8a:0d: cf:63:28:fc:e1:40:6e:81:b8:9b:ba:63:ce:b7:8e: 07:08:2a:2d:f2:7c:ad:77:72:a6:0f:58:d3:6a:74: 05:60:2f:21:bd:fb:98:4a:d1:d1:8d:a9:ef:16:32: 5c:08:90:9f:c4:1e:62:26:6c:e0:69:28:29:80:d2: 1a:58:66:74:c5:76:37:5b:e5:e3:bd:99:0f:d4:bf: e1:3c:28:b2:b1:1b:54:a0:44:04:ed:06:df:0e:a4: 74:53:3c:6e:34:bc:3a:4b:a0:fb:42:10:4e:39:1c: 93:aa:30:5d:98:f6:91:8b:35:78:06:29:f3:b3:d9: 4c:d5:3f:93:39:51:b2:3e:ca:21:5f:b1:94:3d:cc: 1d:14:2f:6b:3e:73:ac:f2:aa:b9:90:d6:85:42:62: 5b:50:91:46:d6:54:a6:03:10:fb:03:fe:3d:d8:12: be:b8:74:42:e0:9c:7a:33:fb:56:6b:b0:c0:1b:a0: c0:83:58:40:29:89:db:ea:a4:99:04:76:f6:48:48: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:26:74:BC:D7:23:EB:4A:12:BB:10:3D:78:32:D6:82:B7:AD:46:68 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1f:23:9e:5d:7e:46:33:e0:1c:f1:57:12:bd:55:20:27:f0: 00:68:a2:c2:d7:40:7d:b1:46:99:4a:5a:ad:ac:6a:cd:ae:3a: 7e:ab:ff:b7:d7:17:dc:fd:12:3f:8d:a2:d1:33:1c:38:3f:0f: 54:7e:84:b6:2e:e3:fd:07:d3:9a:57:4a:75:b2:ce:fe:bf:15: 10:f2:b9:fc:4b:64:a2:e4:72:df:08:70:e9:7e:2c:5d:86:c3: fe:26:03:ef:12:70:b1:97:82:0c:66:06:78:b6:f4:cc:56:51: 6d:ec:7a:b2:e2:2c:24:a9:b7:4e:19:ed:60:cc:ee:b8:4a:58: 2e:df:b5:4f:44:c0:26:fa:58:aa:ce:ad:b2:7f:f0:27:8f:63: 95:c9:43:c6:db:89:ee:c4:40:3b:c9:30:a7:d3:5f:90:fe:15: 9c:6a:c9:f2:72:1f:65:68:88:45:ac:64:1d:74:c9:f3:ef:a2: 5c:37:a9:d3:56:6a:1c:01:53:a7:b2:4d:ab:5f:18:0b:a3:42: 80:bd:71:21:d3:88:8d:c3:c3:35:06:16:e3:f0:86:83:12:26: b2:a0:c7:ae:de:71:74:8d:32:a5:f2:ca:14:fa:3f:98:48:34: 0d:ac:db:17:21:10:f1:6c:12:96:86:9a:15:67:01:99:86:80: 14:02:3c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUwNTExMDUyMjE1WhcNMjUwNTE4MDUyMjE1WjAYMRYwFAYD VQQDEw02ODIwMzQwNy04ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn/Gy3M2F71iboCCqBgyyXIFLWpiZ2xIWZk0+dVuR9vLxqK0Kq6rbdV4gVhm QZyeIY8Xc0eelUOMig3PYyj84UBugbibumPOt44HCCot8nytd3KmD1jTanQFYC8h vfuYStHRjanvFjJcCJCfxB5iJmzgaSgpgNIaWGZ0xXY3W+XjvZkP1L/hPCiysRtU oEQE7QbfDqR0UzxuNLw6S6D7QhBOORyTqjBdmPaRizV4Binzs9lM1T+TOVGyPsoh X7GUPcwdFC9rPnOs8qq5kNaFQmJbUJFG1lSmAxD7A/492BK+uHRC4Jx6M/tWa7DA G6DAg1hAKYnb6qSZBHb2SEjIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkmdLzX I+tKErsQPXgy1oK3rUZoMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjHyOeXX5GM+Ac8VcSvVUgJ/AAaKLC10B9sUaZSlqtrGrNrjp+q/+3 1xfc/RI/jaLRMxw4Pw9UfoS2LuP9B9OaV0p1ss7+vxUQ8rn8S2Si5HLfCHDpfixd hsP+JgPvEnCxl4IMZgZ4tvTMVlFt7Hqy4iwkqbdOGe1gzO64Slgu37VPRMAm+liq zq2yf/Anj2OVyUPG24nuxEA7yTCn01+Q/hWcasnych9laIhFrGQddMnz76JcN6nT VmocAVOnsk2rXxgLo0KAvXEh04iNw8M1Bhbj8IaDEiayoMeu3nF0jTKl8soU+j+Y SDQNrNsXIRDxbBKWhpoVZwGZhoAUAjwn -----END CERTIFICATE-----Generated at Sun May 11 15:23:21 2025 by rpki-client