$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: +ASJT9L1DKfSe+nCiiJ0irHOpHXFUCqUwPKWVSbCsa8= Subject key identifier: 6E:04:EE:A8:2E:05:8D:3E:5A:F5:A5:AE:08:A4:78:B4:1A:C3:9F:F6 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 0129 Signing time: Sun 29 Jun 2025 03:50:27 +0000 Manifest this update: Sun 29 Jun 2025 03:50:26 +0000 Manifest next update: Sun 06 Jul 2025 03:50:26 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: G91eqQdIYvbgMu6C8DQECRt+9lsTB4LWX1kBT44W9CU=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Jun 29 03:50:26 2025 GMT Not After : Jul 6 03:50:26 2025 GMT Subject: CN=6860b803-356b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:29:0f:7f:eb:b1:c3:03:e4:25:e8:88:f4: 22:40:c9:6d:6f:27:90:c7:2e:48:4b:aa:8d:98:5e: b5:68:08:19:d7:00:85:9c:04:c4:27:db:03:fb:64: 85:4d:eb:20:66:50:88:77:1f:9f:93:80:5c:14:50: ef:24:b2:f1:57:f1:84:13:2f:f7:98:1d:a5:1c:a3: cf:6f:72:c0:1a:5c:71:f6:e1:40:b3:a5:72:e7:4c: 76:e6:fb:a8:b5:a8:62:94:da:c5:4e:38:67:b9:81: 57:91:09:cb:95:16:5a:ae:f1:a4:09:d8:12:df:4b: f3:e4:bd:04:af:b6:f5:95:da:40:aa:4d:a2:b5:3c: 81:e0:d3:5c:0d:8a:8d:30:38:0f:50:ee:04:ce:18: f3:5c:d0:75:e4:fe:8c:10:5d:fa:72:18:73:97:75: c6:b8:fa:f7:1f:43:09:db:f4:76:35:ca:a2:de:86: 97:ba:9e:b4:3b:a3:1a:b6:d3:27:79:f0:26:a6:0b: ae:9b:24:d2:4b:b3:e8:e0:e9:c5:74:12:a3:68:d1: 84:e9:a3:cb:d0:51:44:f8:56:46:29:27:70:17:87: 98:e9:25:6c:8f:4c:43:f3:3a:9e:b4:64:44:ea:09: f5:bd:e0:ed:df:59:2a:85:92:03:e2:55:99:2e:09: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:04:EE:A8:2E:05:8D:3E:5A:F5:A5:AE:08:A4:78:B4:1A:C3:9F:F6 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:b1:c5:aa:73:fa:b1:3c:9e:5a:bd:87:fd:4c:2a:0e:90:d0: e5:e9:88:75:c8:a7:58:6c:84:80:11:24:5a:d7:fc:11:dc:db: 6b:71:a8:7a:ba:08:04:9f:0a:52:21:4d:ef:f2:9a:76:a2:cf: aa:a2:ea:70:24:2e:32:58:5d:0e:dc:03:2a:bb:28:c1:11:1c: 02:54:e5:ba:04:d8:c0:e7:4d:18:5b:90:81:95:fe:69:02:72: 14:90:11:38:f1:1a:27:37:31:98:44:ff:58:dd:2e:14:bd:51: c8:0b:8d:30:f2:59:c6:7a:2e:69:67:b6:2f:95:fb:5c:b9:20: 7d:91:a1:c6:1b:1c:d7:a6:7c:25:4f:9a:76:1e:b5:9b:bd:2b: 2a:5c:9f:de:22:76:10:06:22:51:fa:d8:62:b0:9d:eb:e0:8f: f1:6f:93:f1:1a:8c:ae:ca:9f:f3:7e:8a:8f:8e:03:b7:d9:93: 4f:2c:54:15:57:25:fe:35:f8:1c:cd:16:d1:1e:3f:a5:ab:8a: de:8e:09:fa:f9:16:9f:b0:16:31:69:3b:97:12:f6:cb:1d:23: 22:6c:f8:30:c9:77:d7:c0:d5:3a:dc:db:fb:c6:44:e7:a7:58: 9f:b8:08:b6:e2:64:2b:60:c3:a5:92:7b:1c:24:b5:c8:e5:2e: fa:77:ef:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUwNjI5MDM1MDI2WhcNMjUwNzA2MDM1MDI2WjAYMRYwFAYD VQQDEw02ODYwYjgwMy0zNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcQpD3/rscMD5CXoiPQiQMltbyeQxy5IS6qNmF61aAgZ1wCFnATEJ9sD+2SF TesgZlCIdx+fk4BcFFDvJLLxV/GEEy/3mB2lHKPPb3LAGlxx9uFAs6Vy50x25vuo tahilNrFTjhnuYFXkQnLlRZarvGkCdgS30vz5L0Er7b1ldpAqk2itTyB4NNcDYqN MDgPUO4EzhjzXNB15P6MEF36chhzl3XGuPr3H0MJ2/R2Ncqi3oaXup60O6MattMn efAmpguumyTSS7Po4OnFdBKjaNGE6aPL0FFE+FZGKSdwF4eY6SVsj0xD8zqetGRE 6gn1veDt31kqhZID4lWZLgn5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4E7qgu BY0+WvWlrgikeLQaw5/2MB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSscWqc/qxPJ5avYf9TCoOkNDl6Yh1yKdYbISAESRa1/wR3Ntrcah6 uggEnwpSIU3v8pp2os+qoupwJC4yWF0O3AMquyjBERwCVOW6BNjA500YW5CBlf5p AnIUkBE48RonNzGYRP9Y3S4UvVHIC40w8lnGei5pZ7YvlftcuSB9kaHGGxzXpnwl T5p2HrWbvSsqXJ/eInYQBiJR+thisJ3r4I/xb5PxGoyuyp/zfoqPjgO32ZNPLFQV VyX+NfgczRbRHj+lq4rejgn6+RafsBYxaTuXEvbLHSMibPgwyXfXwNU63Nv7xkTn p1ifuAi24mQrYMOlknscJLXI5S76d+83 -----END CERTIFICATE-----Generated at Mon Jun 30 17:48:29 2025 by rpki-client