$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: Dtkbwxa9SyxvQKid0HL+dSBnqIGBzYyNsTpLVFHYeD0= Subject key identifier: 5B:53:EA:B6:EE:3E:B2:63:09:57:6C:4E:EA:7B:56:DB:FC:34:F6:46 Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 33 Signing time: Tue 01 Jul 2025 08:26:00 +0000 Manifest this update: Tue 01 Jul 2025 08:26:00 +0000 Manifest next update: Tue 08 Jul 2025 08:26:00 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: pg3tn5YXCfmKQzjy5qiFHzHJy98RvHsqqqEqiggVWa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Jul 1 08:26:00 2025 GMT Not After : Jul 8 08:26:00 2025 GMT Subject: CN=68639b98-6897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:d2:cf:5e:88:9e:ce:df:5e:9f:4b:c8:83: c7:a8:38:88:0e:3a:6f:18:87:4f:63:9e:81:4c:42: 61:af:32:e5:56:9a:a9:d7:cd:35:b0:0b:6f:59:25: 5a:4e:9a:8b:32:eb:c2:c4:72:a1:3c:b0:fe:67:5d: 69:35:fa:2a:8c:e6:6a:87:2c:0e:aa:a2:d0:6c:29: d2:ec:79:7e:e7:3b:85:e8:12:a4:4d:2c:b3:79:ea: 9f:ae:22:8b:d4:8c:75:9a:d2:22:7f:95:90:bf:e1: d6:85:84:0e:0a:81:c1:24:cb:da:65:63:22:a8:05: e2:8c:f2:92:b7:33:96:c9:6a:5f:65:06:57:55:5e: 7b:ea:ba:d9:b3:c8:f8:79:24:18:4d:fd:fc:ba:73: db:52:8f:d1:8d:b5:5a:82:c2:f8:c5:7f:6d:fa:15: c6:b8:d3:8a:da:97:d9:81:14:2f:59:ef:a2:7c:1e: a8:3c:eb:af:1e:46:27:cb:70:35:49:89:1e:c8:f4: bd:a1:d8:36:a1:ba:4c:3e:f9:76:5b:d0:12:d7:70: b8:2f:d2:88:3e:5d:71:aa:54:34:cc:37:20:2e:23: 30:b1:e5:87:be:9e:93:8b:e3:b0:4f:76:91:29:c3: 1b:16:a0:f9:84:8e:49:4d:15:cf:83:ed:cd:82:4d: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:EA:B6:EE:3E:B2:63:09:57:6C:4E:EA:7B:56:DB:FC:34:F6:46 X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:c5:4a:a1:c5:ed:47:9c:a8:09:30:10:70:a0:40:50:5c: e4:c9:16:51:12:7d:14:ec:74:e1:3b:1e:99:cc:94:26:f8:fc: 9e:ba:1b:ab:54:eb:1b:07:1c:77:d1:ca:0f:d8:c9:c7:76:5a: 45:7a:40:df:2f:c1:01:36:a3:50:42:13:cd:49:7c:00:6c:6e: c0:02:12:b3:fe:02:7b:10:81:6f:e0:2c:d4:9d:54:22:f0:22: 15:da:b6:69:f7:5e:4c:e2:a5:05:b8:64:7e:6d:37:f3:8f:bd: 9d:1a:bc:b5:e8:9b:82:02:5f:cd:94:92:9b:3f:56:93:e3:d0: 9b:a6:35:59:de:b3:d8:b2:43:96:04:f9:c8:f3:cc:eb:a8:e6: 91:cd:8a:6f:2c:1d:97:08:61:ab:8d:80:39:ff:81:c4:72:9c: 48:06:9f:22:2a:82:7a:02:4c:27:f2:04:75:31:f2:0c:3c:2a: 58:9b:8e:8c:0b:74:ca:76:41:ec:61:66:e1:65:b0:ec:90:aa: de:39:45:de:70:08:9c:ad:c8:1c:12:66:ef:d4:2d:42:82:7c: 57:f4:86:df:d2:00:8f:4b:5b:f8:65:47:37:6a:25:61:c3:8b: 09:13:18:44:8e:92:83:08:d0:d0:84:68:2e:51:b8:c3:63:c8: 8d:ac:f1:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA3MDEwODI2MDBaFw0yNTA3MDgwODI2MDBaMBgxFjAUBgNV BAMTDTY4NjM5Yjk4LTY4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQ9LPXoiezt9en0vIg8eoOIgOOm8Yh09jnoFMQmGvMuVWmqnXzTWwC29ZJVpO mosy68LEcqE8sP5nXWk1+iqM5mqHLA6qotBsKdLseX7nO4XoEqRNLLN56p+uIovU jHWa0iJ/lZC/4daFhA4KgcEky9plYyKoBeKM8pK3M5bJal9lBldVXnvqutmzyPh5 JBhN/fy6c9tSj9GNtVqCwvjFf236Fca404ral9mBFC9Z76J8Hqg8668eRifLcDVJ iR7I9L2h2Dahukw++XZb0BLXcLgv0og+XXGqVDTMNyAuIzCx5Ye+npOL47BPdpEp wxsWoPmEjklNFc+D7c2CTUgzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW1Pqtu4+ smMJV2xO6ntW2/w09kYwHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFApxUqhxe1HnKgJMBBwoEBQXOTJFlESfRTsdOE7HpnMlCb4/J66G6tU 6xsHHHfRyg/Yycd2WkV6QN8vwQE2o1BCE81JfABsbsACErP+AnsQgW/gLNSdVCLw IhXatmn3XkzipQW4ZH5tN/OPvZ0avLXom4ICX82Ukps/VpPj0JumNVnes9iyQ5YE +cjzzOuo5pHNim8sHZcIYauNgDn/gcRynEgGnyIqgnoCTCfyBHUx8gw8KlibjowL dMp2QexhZuFlsOyQqt45Rd5wCJytyBwSZu/ULUKCfFf0ht/SAI9LW/hlRzdqJWHD iwkTGESOkoMI0NCEaC5RuMNjyI2s8RY= -----END CERTIFICATE-----Generated at Tue Jul 1 14:52:49 2025 by rpki-client