$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: 9Y6D3PwYY7BasCwadD1ogEAOBwALZgranPJj42AgU+M= Subject key identifier: 37:AD:E1:9D:F3:EA:0A:B5:3D:F4:13:5E:AB:62:6A:DB:BB:70:FE:FD Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 07CD Signing time: Wed 14 May 2025 21:13:08 +0000 Manifest this update: Wed 14 May 2025 21:13:07 +0000 Manifest next update: Wed 21 May 2025 21:13:07 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: hCprZYSnge6SktkJ/xKX7dt9ixfBrlf2MPIRlD56nfg=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: May 14 21:13:07 2025 GMT Not After : May 21 21:13:07 2025 GMT Subject: CN=68250763-e1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:3c:39:c1:d4:e0:df:e9:dc:3a:5b:4a:4f: b6:a0:d0:c4:0a:b0:a5:c2:44:d6:a8:0c:5e:73:3d: b0:e5:63:5a:79:17:83:4b:c5:4a:f5:79:fe:b2:96: 12:d8:00:72:f2:c6:fd:c7:fc:65:7f:81:c1:d9:08: 49:d5:6a:8f:ed:13:b4:ee:87:f6:3c:60:77:2a:37: 14:fd:a2:0f:36:9c:25:ef:91:01:a9:cf:1f:56:a0: fa:ac:f1:25:96:5b:89:62:84:63:5d:f7:fd:c7:68: 2e:b5:be:f0:68:7d:6a:85:7b:9a:fc:c4:73:c9:f7: 9b:3c:d1:4c:91:65:85:84:f5:e5:d4:71:a2:f2:66: 2e:f7:2d:71:ac:65:77:e9:8f:e4:67:c9:ca:72:5f: b4:e9:e5:18:0a:f8:f0:38:6f:fa:5c:fa:25:a4:5b: 40:70:16:08:3d:f1:ec:51:39:b9:33:b3:d0:e2:5d: 83:1e:2d:1e:77:17:8d:ba:43:e1:cd:b2:f8:12:0b: 86:1f:1d:24:c3:3b:d0:34:34:08:8b:32:27:20:b6: f9:53:34:f1:5a:dc:6b:07:e9:17:a5:34:e6:20:d6: d8:0e:4a:da:65:cf:3f:6a:b8:08:39:3a:4a:7e:e8: af:71:89:e0:5b:39:99:cc:28:bd:1c:e7:b5:b0:05: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:E1:9D:F3:EA:0A:B5:3D:F4:13:5E:AB:62:6A:DB:BB:70:FE:FD X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c5:da:72:de:ff:f0:d3:b6:ff:01:ff:8a:c0:1b:52:48:28: 93:77:93:8d:ab:13:f6:8d:06:76:b1:b2:f2:98:0b:2b:cd:fe: d4:c9:d5:aa:62:5e:58:f5:a2:de:35:f3:37:53:cf:10:19:de: 86:6c:8d:43:dd:3c:22:48:6d:25:4b:48:de:0e:b6:31:c3:35: 68:63:b1:ef:da:55:04:45:37:b9:6e:f5:ea:3d:59:55:6d:64: 5c:bd:7c:fe:17:10:2c:82:e8:fb:55:8e:b2:81:fa:95:e9:93: 30:a0:63:35:16:5b:34:bb:86:83:23:30:b7:16:d3:9d:f4:e3: 6b:99:73:12:a8:89:c9:f0:98:0d:6c:39:ec:82:a7:2a:3b:32: ab:4c:21:1b:c9:a7:34:e4:c4:56:a0:79:ec:2f:1b:07:ee:95: 4a:6d:a6:6f:5c:dc:d2:45:2f:89:13:80:86:12:04:f3:b0:e3: 56:49:ea:a0:78:1b:1d:a1:28:2e:4a:c2:e5:37:e9:8b:7d:0c: 72:b5:5b:58:d1:c7:f9:58:1d:ad:67:b8:c4:f5:45:43:29:7d: 89:14:fb:2d:bf:d1:c3:c3:60:9d:29:49:f9:99:f8:d0:0f:8b: 11:9b:50:45:be:4c:c1:0d:f6:c9:ff:3a:d0:8e:97:85:14:3e: dc:a7:91:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUwNTE0MjExMzA3WhcNMjUwNTIxMjExMzA3WjAYMRYwFAYD VQQDEw02ODI1MDc2My1lMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvg8OcHU4N/p3DpbSk+2oNDECrClwkTWqAxecz2w5WNaeReDS8VK9Xn+spYS 2ABy8sb9x/xlf4HB2QhJ1WqP7RO07of2PGB3KjcU/aIPNpwl75EBqc8fVqD6rPEl lluJYoRjXff9x2gutb7waH1qhXua/MRzyfebPNFMkWWFhPXl1HGi8mYu9y1xrGV3 6Y/kZ8nKcl+06eUYCvjwOG/6XPolpFtAcBYIPfHsUTm5M7PQ4l2DHi0edxeNukPh zbL4EguGHx0kwzvQNDQIizInILb5UzTxWtxrB+kXpTTmINbYDkraZc8/argIOTpK fuivcYngWzmZzCi9HOe1sAVliQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDet4Z3z 6gq1PfQTXqtiatu7cP79MB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYxdpy3v/w07b/Af+KwBtSSCiTd5ONqxP2jQZ2sbLymAsrzf7UydWq Yl5Y9aLeNfM3U88QGd6GbI1D3TwiSG0lS0jeDrYxwzVoY7Hv2lUERTe5bvXqPVlV bWRcvXz+FxAsguj7VY6ygfqV6ZMwoGM1Fls0u4aDIzC3FtOd9ONrmXMSqInJ8JgN bDnsgqcqOzKrTCEbyac05MRWoHnsLxsH7pVKbaZvXNzSRS+JE4CGEgTzsONWSeqg eBsdoSguSsLlN+mLfQxytVtY0cf5WB2tZ7jE9UVDKX2JFPstv9HDw2CdKUn5mfjQ D4sRm1BFvkzBDfbJ/zrQjpeFFD7cp5Hy -----END CERTIFICATE-----Generated at Fri May 16 13:03:27 2025 by rpki-client