$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: Q/Ga20oLbnXhYFJs/Ofyie+uIsMRzZWmjhi8tHv5cSA= Subject key identifier: 2E:44:03:5D:8A:13:83:60:BE:CE:76:E8:0C:54:E4:BE:62:62:83:21 Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0B53 Signing time: Tue 06 May 2025 19:01:59 +0000 Manifest this update: Tue 06 May 2025 19:01:59 +0000 Manifest next update: Tue 13 May 2025 19:01:59 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: NB+r8Yyw581Kno9ms4d7rXQVPApnB2JML6s2SON1wgY=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: XDeDVN+pHUEVt+DCqatZGjQaIovu0vNRnw8eGH3pRAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: May 6 19:01:59 2025 GMT Not After : May 13 19:01:59 2025 GMT Subject: CN=681a5ca7-32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:8e:ee:00:7b:b0:31:e0:2b:96:10:a9:05: 68:a9:1a:fe:ca:45:2c:9c:f5:7e:45:33:2b:4e:c9: 27:a2:c3:9b:e4:e4:72:ac:9d:bf:5d:f5:a1:f3:4e: 9e:54:88:d3:ef:bf:4a:24:d7:31:7d:df:48:4b:c2: 0f:27:b9:eb:af:6f:11:a0:ac:d6:c3:f9:52:00:12: 30:4d:52:06:37:e8:59:6f:65:4f:c9:0a:00:9c:2f: 0e:8d:59:01:d9:5b:3e:96:2e:79:47:d1:f0:e6:bb: ff:57:b0:5d:14:51:29:ea:ec:d9:a9:1a:40:89:2c: 15:68:f6:96:a3:38:72:dc:a2:47:f8:8d:dc:52:cf: 7d:f2:7e:18:a3:33:0c:8b:6b:2d:b9:e2:09:a3:e0: 6c:28:69:b6:43:92:47:fe:d9:47:78:33:6c:60:5d: 7a:8a:fc:7a:8d:4e:72:94:5c:c7:36:34:57:f3:13: 5e:d1:1f:e8:a4:51:77:ba:c9:1f:c9:45:96:b4:84: 5f:b6:0e:5f:5e:24:0e:02:b6:bd:a4:f9:f6:3c:d9: 69:26:95:58:f1:6b:f2:0f:a1:86:da:32:6a:b2:1a: b2:09:ed:40:c1:ca:5b:31:5f:c0:2c:0c:02:bb:5d: 02:9b:35:e2:a9:1e:68:d4:a3:ce:72:bc:78:1a:28: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:03:5D:8A:13:83:60:BE:CE:76:E8:0C:54:E4:BE:62:62:83:21 X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:78:dc:7e:26:aa:4b:61:a0:ac:58:6f:13:ff:99:9a:50:9e: a7:dd:d4:e2:f7:64:e9:7b:c7:63:21:70:b6:f2:4c:a9:f6:45: 0f:9c:f9:cb:fb:6a:e9:33:f1:26:f3:51:c2:59:cb:b3:f4:77: b0:bd:c1:20:ff:10:9c:cd:1b:70:a0:40:31:ee:5c:bc:51:ad: b7:fc:d0:cf:9f:d1:e5:1d:84:91:49:da:fa:86:64:4b:15:56: 11:3a:7b:e2:6e:e5:d6:f7:7b:4c:a9:cc:fe:19:e3:96:69:06: b8:dd:65:a3:1f:e5:71:82:f0:9e:58:da:d9:76:3c:eb:7c:c5: 14:7e:f4:f6:f6:cd:b4:8c:54:fe:01:83:e7:75:ff:80:28:a2: f3:b6:3e:52:ac:ed:01:75:e0:9f:9b:48:55:a7:c0:fd:8a:a1: a3:ad:46:83:d2:05:21:02:8e:82:9c:bc:a6:8c:22:a9:bf:80: 07:8b:6a:13:cc:42:12:50:ae:da:d5:bc:b0:8b:05:a3:54:ba: 32:ba:af:13:47:bb:01:fd:06:89:ca:a0:0e:fd:b2:f1:d6:b0: 58:d9:91:ef:e5:30:db:0b:90:26:6a:6f:35:9d:03:d5:06:cc: 28:3c:00:a0:7d:eb:6d:f3:25:50:77:48:3f:00:a9:48:a1:d8: 28:36:10:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUwNTA2MTkwMTU5WhcNMjUwNTEzMTkwMTU5WjAYMRYwFAYD VQQDEw02ODFhNWNhNy0zMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQmO7gB7sDHgK5YQqQVoqRr+ykUsnPV+RTMrTsknosOb5ORyrJ2/XfWh806e VIjT779KJNcxfd9IS8IPJ7nrr28RoKzWw/lSABIwTVIGN+hZb2VPyQoAnC8OjVkB 2Vs+li55R9Hw5rv/V7BdFFEp6uzZqRpAiSwVaPaWozhy3KJH+I3cUs998n4YozMM i2stueIJo+BsKGm2Q5JH/tlHeDNsYF16ivx6jU5ylFzHNjRX8xNe0R/opFF3uskf yUWWtIRftg5fXiQOAra9pPn2PNlpJpVY8WvyD6GG2jJqshqyCe1AwcpbMV/ALAwC u10CmzXiqR5o1KPOcrx4GijuYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5EA12K E4Ngvs526AxU5L5iYoMhMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVeNx+JqpLYaCsWG8T/5maUJ6n3dTi92Tpe8djIXC28kyp9kUPnPnL +2rpM/Em81HCWcuz9HewvcEg/xCczRtwoEAx7ly8Ua23/NDPn9HlHYSRSdr6hmRL FVYROnvibuXW93tMqcz+GeOWaQa43WWjH+VxgvCeWNrZdjzrfMUUfvT29s20jFT+ AYPndf+AKKLztj5SrO0BdeCfm0hVp8D9iqGjrUaD0gUhAo6CnLymjCKpv4AHi2oT zEISUK7a1bywiwWjVLoyuq8TR7sB/QaJyqAO/bLx1rBY2ZHv5TDbC5Amam81nQPV BswoPACgfett8yVQd0g/AKlIodgoNhCG -----END CERTIFICATE-----Generated at Thu May 8 03:50:19 2025 by rpki-client