$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: //lRcS9I9fF4DNnsgHuDH1ehZoBQfpt1lA414oJ2RCY= Subject key identifier: 4E:F5:1C:34:BF:09:FF:B0:A4:64:AD:4A:92:46:39:5B:56:74:4A:44 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: B1 Signing time: Sun 29 Jun 2025 05:04:50 +0000 Manifest this update: Sun 29 Jun 2025 05:04:50 +0000 Manifest next update: Sun 06 Jul 2025 05:04:50 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: cteaeQoJUJgf7xgKoaMHlNNC9AKAMFBWa6SSRtPn8lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Jun 29 05:04:50 2025 GMT Not After : Jul 6 05:04:50 2025 GMT Subject: CN=6860c972-302a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:22:e3:f9:a7:28:50:a4:43:29:cf:19:1b: 67:aa:f5:ab:5d:81:70:d3:87:d1:5b:04:b6:c8:fe: bd:d7:70:c9:10:67:c4:44:72:bc:ca:38:81:67:b1: af:04:ba:78:09:25:da:af:0e:cf:d8:0c:5c:27:38: 6b:6a:87:c0:e0:93:9c:99:e2:e3:6d:d3:6d:ee:54: 8f:0d:9a:de:49:17:d9:cb:c7:7f:b1:f9:fe:92:29: b6:e2:fa:4e:94:44:ba:c8:af:4f:3e:41:60:3e:c0: 92:cc:63:b1:c9:c3:65:af:2e:3c:5f:39:6b:3d:16: 7e:a0:a3:60:bb:44:36:80:33:5d:9f:56:52:bb:0e: 48:f2:e1:28:a7:59:ce:0e:5a:ef:1a:a0:df:e7:94: 74:c0:c7:e0:14:f0:3e:b5:95:b2:0d:15:78:4c:f2: ab:e8:9a:0b:2f:7f:fb:f0:4e:82:51:11:ae:00:47: b2:81:eb:fa:30:56:f2:f9:65:06:c7:c8:e9:af:82: 08:78:22:a3:f9:18:8b:b1:8e:7e:24:5a:20:d9:88: cc:4f:f0:bf:0a:6f:ad:ab:5c:6f:aa:db:82:db:17: d9:5a:68:b9:c7:b7:40:c3:6e:c1:a8:49:a8:5b:50: 29:f2:77:5f:34:4b:3b:71:d9:87:08:6c:1c:71:9a: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F5:1C:34:BF:09:FF:B0:A4:64:AD:4A:92:46:39:5B:56:74:4A:44 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:1f:d9:67:f0:02:56:93:e3:60:ba:13:4c:83:34:d6:4c: dd:17:36:9a:00:81:7b:f6:9c:b7:8d:ce:55:65:a4:46:87:b4: c3:67:8b:78:87:5c:ed:ed:82:51:c1:77:f8:0f:dd:c6:15:43: 6f:c3:24:62:9f:75:c8:6c:51:48:34:51:ea:c9:34:41:74:1d: e5:9e:db:7f:57:c7:10:45:ea:6a:b9:5b:a2:4f:ea:5d:4b:91: 25:2f:22:80:32:63:45:fb:9e:b5:77:71:ad:fb:94:25:b2:b8: a5:b0:72:07:31:01:c6:00:1e:a4:1a:81:ca:d0:d3:78:03:b9: 6c:01:0d:d9:30:b3:f8:85:d4:75:e0:6c:24:51:05:4a:0d:89: cf:2e:f0:3e:8c:a2:5e:1f:66:81:66:45:4b:d7:61:29:67:47: 81:a7:ce:58:b8:d4:6e:2a:50:b9:f6:76:cb:23:bb:3a:65:86: 93:c7:57:9a:6a:d2:0f:01:cc:44:3f:36:41:42:62:86:9b:70: f7:a4:c5:90:76:73:3a:34:06:2c:f2:52:b4:86:90:19:7d:3b: a6:ea:5a:97:d7:4b:7a:58:17:14:fc:ca:59:eb:8b:30:97:74: e7:ac:ad:2c:95:dd:5a:5d:e3:d3:a7:2b:4e:80:2e:c8:ae:30: bc:09:8a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUwNjI5MDUwNDUwWhcNMjUwNzA2MDUwNDUwWjAYMRYwFAYD VQQDEw02ODYwYzk3Mi0zMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYAi4/mnKFCkQynPGRtnqvWrXYFw04fRWwS2yP6913DJEGfERHK8yjiBZ7Gv BLp4CSXarw7P2AxcJzhraofA4JOcmeLjbdNt7lSPDZreSRfZy8d/sfn+kim24vpO lES6yK9PPkFgPsCSzGOxycNlry48XzlrPRZ+oKNgu0Q2gDNdn1ZSuw5I8uEop1nO DlrvGqDf55R0wMfgFPA+tZWyDRV4TPKr6JoLL3/78E6CURGuAEeygev6MFby+WUG x8jpr4IIeCKj+RiLsY5+JFog2YjMT/C/Cm+tq1xvqtuC2xfZWmi5x7dAw27BqEmo W1Ap8ndfNEs7cdmHCGwccZr5EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE71HDS/ Cf+wpGStSpJGOVtWdEpEMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAamx/ZZ/ACVpPjYLoTTIM01kzdFzaaAIF79py3jc5VZaRGh7TDZ4t4 h1zt7YJRwXf4D93GFUNvwyRin3XIbFFINFHqyTRBdB3lntt/V8cQRepquVuiT+pd S5ElLyKAMmNF+561d3Gt+5QlsrilsHIHMQHGAB6kGoHK0NN4A7lsAQ3ZMLP4hdR1 4GwkUQVKDYnPLvA+jKJeH2aBZkVL12EpZ0eBp85YuNRuKlC59nbLI7s6ZYaTx1ea atIPAcxEPzZBQmKGm3D3pMWQdnM6NAYs8lK0hpAZfTum6lqX10t6WBcU/MpZ64sw l3TnrK0sld1aXePTpytOgC7IrjC8CYqA -----END CERTIFICATE-----Generated at Tue Jul 1 00:27:31 2025 by rpki-client