$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: C3WBCJF6s9X/Sd4eDD+2cg9WkSw5EjD7doR7FUmCeo8= Subject key identifier: 4D:39:93:CE:DE:AF:BD:24:92:C2:CE:54:6A:F5:5B:3B:6B:64:D1:E1 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 74 Signing time: Sun 11 May 2025 05:39:58 +0000 Manifest this update: Sun 11 May 2025 05:39:57 +0000 Manifest next update: Sun 18 May 2025 05:39:57 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: JW2S6vvQxsNXGzOQn4/ioE2loxxl7BSORQdYPpTb3C4=) 2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 3: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: May 11 05:39:57 2025 GMT Not After : May 18 05:39:57 2025 GMT Subject: CN=6820382d-d83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:bc:99:a5:ac:be:00:f2:91:3f:a9:82:6c: 69:10:47:79:8b:4a:4b:21:3a:5f:1d:a8:b3:49:ef: e9:55:4e:3f:c3:b4:54:e7:28:27:30:c3:d7:f3:92: ff:c3:79:5f:fb:a0:11:75:88:52:2f:c8:6f:fa:17: 6d:74:72:c1:ed:1f:44:5a:9a:f4:7d:4e:66:47:f9: 8b:dc:3f:10:8b:1d:43:44:cc:0c:eb:43:0c:46:8e: ee:f1:d3:8b:cb:f5:56:17:88:58:01:de:37:fe:6a: fd:86:98:12:9c:b4:1b:9d:f2:8b:b2:2b:8a:c0:c4: ec:28:d8:d7:4f:28:cf:fc:fd:26:a5:44:8d:a5:d7: ed:ad:a8:a5:de:e3:3f:98:fe:a9:ad:25:8e:1c:c7: 96:0b:57:80:d0:45:5a:ec:df:3d:f4:44:3b:14:2e: be:2c:45:ac:09:17:16:cf:63:bf:a6:56:28:35:76: 7b:cb:8b:ee:ab:e1:0e:50:d2:09:44:3a:33:fc:32: 4d:8f:43:ec:2a:b0:75:cd:d1:3a:ac:03:6a:3c:ea: 44:04:0c:3d:93:da:b2:a4:99:53:63:ee:df:17:2c: 06:ab:cd:44:a2:74:5b:1b:a5:c5:f2:f6:d6:f0:f1: 67:2d:11:af:e2:fb:0a:d1:22:a2:be:11:ea:c2:a8: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:39:93:CE:DE:AF:BD:24:92:C2:CE:54:6A:F5:5B:3B:6B:64:D1:E1 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:42:d2:3d:b2:22:0a:b3:19:e0:2c:63:c3:96:80:13:a9:a8: 0e:0f:8b:1b:76:c2:db:62:bb:5b:cc:b1:1c:b9:67:99:17:4c: 50:af:7b:2f:ab:c7:9f:3c:f2:ce:1d:34:ba:6d:51:d3:36:a0: 62:34:3a:26:0c:11:f3:ab:6a:22:35:b9:7d:5c:48:24:45:bc: 73:da:1a:48:d9:37:58:4a:91:45:0d:5c:fd:04:b3:d0:b0:62: 61:19:24:45:12:ae:ab:eb:94:cd:c2:6b:7c:1b:30:ca:55:51: 19:d2:b8:56:9f:04:d4:df:3e:39:f2:49:a9:28:f2:d5:f8:d5: b4:2c:8a:94:55:e1:b8:6b:fb:c3:6a:fb:60:47:96:81:20:9d: 91:16:5c:b4:31:72:f1:cc:e2:97:28:84:87:07:22:a3:c7:b1: 27:11:ef:43:79:82:2d:af:54:a0:fa:32:65:90:1d:2f:ee:4d: 7b:04:18:ed:3c:8f:92:0b:f6:7b:7b:f5:90:54:2c:49:40:61: b0:d1:ba:ae:f8:7b:18:59:f9:9d:46:ad:3d:97:a9:16:f8:1b: 12:0d:c7:fc:16:50:4b:f3:b2:3c:af:c4:ec:6b:aa:ea:1f:99: 4c:32:4a:bb:b6:f9:ae:0e:15:c1:f8:ea:fd:ad:f2:19:e7:0f: 0b:f3:cf:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0I0QzExMC8GA1UEBRMoQjYzREZENjg2Q0UwQTkwMDc2RTRGNUZGNDI4Njg1RjYz RkIwOEVERDAeFw0yNTA1MTEwNTM5NTdaFw0yNTA1MTgwNTM5NTdaMBgxFjAUBgNV BAMTDTY4MjAzODJkLWQ4M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQSbyZpay+APKRP6mCbGkQR3mLSkshOl8dqLNJ7+lVTj/DtFTnKCcww9fzkv/D eV/7oBF1iFIvyG/6F210csHtH0RamvR9TmZH+YvcPxCLHUNEzAzrQwxGju7x04vL 9VYXiFgB3jf+av2GmBKctBud8ouyK4rAxOwo2NdPKM/8/SalRI2l1+2tqKXe4z+Y /qmtJY4cx5YLV4DQRVrs3z30RDsULr4sRawJFxbPY7+mVig1dnvLi+6r4Q5Q0glE OjP8Mk2PQ+wqsHXN0TqsA2o86kQEDD2T2rKkmVNj7t8XLAarzUSidFsbpcXy9tbw 8WctEa/i+wrRIqK+EerCqAllAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTTmTzt6v vSSSws5UavVbO2tk0eEwHwYDVR0jBBgwFoAUtj39aGzgqQB25PX/QoaF9j+wjt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQjRDL0RDOURFMjhFOEM1 MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGozOWFHemdxUUIyNVBYX1FvYUY5ai13anQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz QjRDL0RDOURFMjhFOEM1MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFC MjVQWF9Rb2FGOWotd2p0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVC0j2yIgqzGeAsY8OWgBOpqA4Pixt2wttiu1vMsRy5Z5kXTFCvey+r x5888s4dNLptUdM2oGI0OiYMEfOraiI1uX1cSCRFvHPaGkjZN1hKkUUNXP0Es9Cw YmEZJEUSrqvrlM3Ca3wbMMpVURnSuFafBNTfPjnySako8tX41bQsipRV4bhr+8Nq +2BHloEgnZEWXLQxcvHM4pcohIcHIqPHsScR70N5gi2vVKD6MmWQHS/uTXsEGO08 j5IL9nt79ZBULElAYbDRuq74exhZ+Z1GrT2XqRb4GxINx/wWUEvzsjyvxOxrquof mUwySru2+a4OFcH46v2t8hnnDwvzzx4= -----END CERTIFICATE-----Generated at Mon May 12 04:20:17 2025 by rpki-client