$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: ZF4l+F9uOJER0LPjdUCV14l3kY5xs7OD9SQ0XaidkoQ= Subject key identifier: 8B:E8:D0:8C:F3:9A:94:4A:FF:7A:66:E2:4E:D9:FC:52:A0:DE:77:A5 Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 1A Signing time: Sun 11 May 2025 06:41:25 +0000 Manifest this update: Sun 11 May 2025 06:41:24 +0000 Manifest next update: Sun 18 May 2025 06:41:24 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: Bm7NkZ44Egmhebq+t79Xg2rseaFAwu4ScoQ3XjeHJJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: May 11 06:41:24 2025 GMT Not After : May 18 06:41:24 2025 GMT Subject: CN=68204694-60eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:17:20:7c:40:bf:a8:64:94:62:19:e1:f8: b3:f1:cc:3b:c2:29:8f:ad:2a:ad:97:2f:58:f0:14: d3:9e:e8:64:e3:20:e7:51:4c:69:5b:9e:0b:ac:48: b5:e9:64:49:8c:3a:a9:a1:89:7c:d4:18:b9:d7:b1: 67:f8:a6:24:c1:1d:0e:78:2e:9c:81:ec:c1:71:2f: 59:2d:5c:d8:38:af:a0:df:d7:aa:b0:8d:b0:f4:09: 6b:c9:5e:8d:67:05:d1:f2:2e:00:b9:1a:61:c2:ec: 86:fc:66:4e:84:30:66:14:49:52:49:06:d5:7a:d7: ed:4f:20:cd:e0:8c:5c:dd:6d:6c:a4:c2:0a:f5:fd: de:e8:15:08:68:83:df:79:48:1e:b3:b6:1e:a2:04: 47:9c:06:88:9e:b1:df:7c:a6:f9:03:a7:8b:d8:b5: a7:29:7a:6a:5e:87:77:46:1c:49:b6:9d:55:79:15: 51:6d:9b:08:ef:b7:69:9e:71:97:b0:fe:f6:c6:9e: 59:f8:19:01:dd:33:8b:0d:2a:6b:45:d2:99:59:8d: 1f:8a:39:64:9c:69:b3:b3:72:7b:15:33:1e:bc:36: 10:af:0e:1e:96:55:7f:b0:51:3e:bc:8c:b1:8d:21: dc:42:22:37:1c:d9:05:38:e2:f2:2b:1a:4a:53:2b: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:D0:8C:F3:9A:94:4A:FF:7A:66:E2:4E:D9:FC:52:A0:DE:77:A5 X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:63:48:43:48:dd:da:88:cc:f6:0a:a0:68:58:16:19:0e:61: f9:56:50:c9:37:a9:71:f4:5f:d2:12:60:64:25:03:47:24:b7: d6:65:13:2b:e6:30:da:4b:3d:39:77:80:4a:9c:fb:d2:e0:fa: 9f:1f:d3:07:d0:45:4d:06:95:4c:36:34:fa:03:9e:9a:39:aa: 4f:37:f1:cf:ea:ca:8d:d0:71:15:0d:24:3e:3f:53:1f:8b:36: 22:a1:9f:92:8c:b7:1c:e7:50:8b:97:ce:14:59:43:7e:a1:29: 61:33:36:f1:71:54:6a:6e:63:18:d2:c5:59:4b:1f:a6:a0:60: a5:a8:ee:b3:00:d4:dc:f0:d7:ea:3a:b0:62:b2:4d:d8:5a:ea: 63:4d:06:0f:0e:b4:f4:d7:85:ac:a3:cb:15:83:1b:26:a0:6d: 2a:0b:db:99:f4:53:60:21:9f:63:11:0f:41:6b:27:52:03:ee: cf:f1:70:31:18:3b:42:e0:f7:b1:57:b2:12:69:19:dd:2c:75: 58:58:1f:f3:ae:6f:5b:95:74:cc:85:6c:97:b2:d5:ff:a1:0e: eb:51:35:6c:db:3c:97:0d:35:04:e2:07:a5:b3:56:54:42:70: 48:f6:45:43:9a:01:fa:29:d0:a7:53:56:02:e4:1c:e3:60:2d: 23:7f:0b:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA1MTEwNjQxMjRaFw0yNTA1MTgwNjQxMjRaMBgxFjAUBgNV BAMTDTY4MjA0Njk0LTYwZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHORcgfEC/qGSUYhnh+LPxzDvCKY+tKq2XL1jwFNOe6GTjIOdRTGlbngusSLXp ZEmMOqmhiXzUGLnXsWf4piTBHQ54LpyB7MFxL1ktXNg4r6Df16qwjbD0CWvJXo1n BdHyLgC5GmHC7Ib8Zk6EMGYUSVJJBtV61+1PIM3gjFzdbWykwgr1/d7oFQhog995 SB6zth6iBEecBoiesd98pvkDp4vYtacpempeh3dGHEm2nVV5FVFtmwjvt2mecZew /vbGnln4GQHdM4sNKmtF0plZjR+KOWScabOzcnsVMx68NhCvDh6WVX+wUT68jLGN IdxCIjcc2QU44vIrGkpTKxeNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi+jQjPOa lEr/embiTtn8UqDed6UwHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdjSENI3dqIzPYKoGhYFhkOYflWUMk3qXH0X9ISYGQlA0ckt9ZlEyvm MNpLPTl3gEqc+9Lg+p8f0wfQRU0GlUw2NPoDnpo5qk838c/qyo3QcRUNJD4/Ux+L NiKhn5KMtxznUIuXzhRZQ36hKWEzNvFxVGpuYxjSxVlLH6agYKWo7rMA1Nzw1+o6 sGKyTdha6mNNBg8OtPTXhayjyxWDGyagbSoL25n0U2Ahn2MRD0FrJ1ID7s/xcDEY O0Lg97FXshJpGd0sdVhYH/Oub1uVdMyFbJey1f+hDutRNWzbPJcNNQTiB6WzVlRC cEj2RUOaAfop0KdTVgLkHONgLSN/C04= -----END CERTIFICATE-----Generated at Sun May 11 10:27:51 2025 by rpki-client