$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: M+CKpzgVsP7XY2J1wIUIeq9eOG6FFGCRaOR5Z5ATvno= Subject key identifier: 68:4E:F2:10:0C:08:B4:F2:A9:B6:09:51:95:0E:7B:1F:A0:F0:9C:EE Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C4B Signing time: Sat 10 May 2025 18:11:40 +0000 Manifest this update: Sat 10 May 2025 18:11:39 +0000 Manifest next update: Sat 17 May 2025 18:11:39 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: BzGGyxBb7WXc+2s2WR7NOyDLcp+HjF3n+g04PlUXh1Q=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: May 10 18:11:39 2025 GMT Not After : May 17 18:11:39 2025 GMT Subject: CN=681f96db-1763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b1:24:fe:fa:f8:8a:c1:f0:2a:ba:6f:30:17: a5:b6:b7:4a:03:1a:7a:65:5c:13:b9:f1:6e:43:92: 3d:a8:1d:69:a5:36:f1:47:ab:45:e6:d6:05:e5:1f: 20:98:db:45:1e:38:10:d1:04:f8:c7:43:96:aa:43: 56:e4:07:82:bc:9b:d8:27:4b:56:b1:10:9b:cf:64: a3:ee:a7:35:87:a1:75:45:b0:99:b3:51:61:a5:30: 99:3c:18:95:e3:81:88:c8:36:3c:95:7a:0d:2a:67: 16:40:ff:a6:7c:a8:0a:49:14:7c:9b:de:f1:38:c8: 04:da:39:0d:38:1a:17:fe:5d:70:d9:ac:f8:c7:75: d6:2c:c9:23:56:dc:d5:b4:92:9e:2c:3a:a3:8a:6f: 27:96:c2:53:6e:40:b6:97:b5:1d:0f:c0:83:07:08: 75:67:dc:d1:7f:54:f3:8c:ac:50:e6:8e:44:93:03: 18:5b:72:03:a8:9b:3e:79:b9:b8:cb:a6:13:d3:d3: 0f:30:a6:4c:18:9c:d7:bc:d9:81:e3:52:6c:e0:63: fd:3b:b6:9d:8c:ef:9f:e8:ee:9e:72:2b:2a:4f:2b: 1b:07:99:cc:80:68:75:19:f8:64:3d:7d:8a:61:29: 1d:d5:3c:2b:10:a9:65:69:2d:51:8c:dc:a7:b0:58: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:F2:10:0C:08:B4:F2:A9:B6:09:51:95:0E:7B:1F:A0:F0:9C:EE X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:be:e9:d5:ea:6c:6d:82:41:d4:cd:08:36:00:a0:ae:77:4d: 74:fe:3b:08:d3:bd:5c:0b:e8:6e:4d:01:60:d7:5b:b7:e7:1c: c7:57:c6:dc:77:32:b4:c8:4d:64:d6:e8:b2:df:7a:11:8c:63: 71:20:f2:81:61:e6:ab:74:8e:62:4e:dd:58:0b:ea:dd:2b:76: 2e:95:94:94:49:d5:87:37:e1:b9:dc:68:6f:0b:05:c4:3f:5e: e7:3e:2b:8b:e2:5f:8b:a6:2c:bc:c0:25:0f:95:b5:17:60:1d: 1e:50:ba:51:8c:78:c9:09:c2:80:3c:ad:41:90:40:cf:19:aa: e7:d2:65:24:7f:39:0a:1c:7a:dd:ba:5b:4c:a6:d1:59:91:4d: 58:a6:dc:6b:6e:e4:8f:27:ff:20:31:dd:29:ce:2d:45:10:24: 74:1e:b8:95:9e:c7:99:07:b3:03:24:fa:79:2b:21:18:ff:f2: 4c:3e:3e:da:82:22:42:56:4d:33:d1:3f:14:56:49:13:5b:fc: ee:e8:15:55:fb:57:d5:47:1c:fe:e7:17:71:b4:be:d0:9c:58: 8c:14:9a:89:3f:8a:29:ae:57:cf:58:8f:a1:b8:d4:bc:25:ab: 52:36:87:77:dd:d9:c7:8c:6b:d8:9b:1a:dd:ea:3a:e0:be:10: 98:29:46:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNTEwMTgxMTM5WhcNMjUwNTE3MTgxMTM5WjAYMRYwFAYD VQQDEw02ODFmOTZkYi0xNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LEk/vr4isHwKrpvMBeltrdKAxp6ZVwTufFuQ5I9qB1ppTbxR6tF5tYF5R8g mNtFHjgQ0QT4x0OWqkNW5AeCvJvYJ0tWsRCbz2Sj7qc1h6F1RbCZs1FhpTCZPBiV 44GIyDY8lXoNKmcWQP+mfKgKSRR8m97xOMgE2jkNOBoX/l1w2az4x3XWLMkjVtzV tJKeLDqjim8nlsJTbkC2l7UdD8CDBwh1Z9zRf1TzjKxQ5o5EkwMYW3IDqJs+ebm4 y6YT09MPMKZMGJzXvNmB41Js4GP9O7adjO+f6O6ecisqTysbB5nMgGh1GfhkPX2K YSkd1TwrEKllaS1RjNynsFjxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhO8hAM CLTyqbYJUZUOex+g8JzuMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJvunV6mxtgkHUzQg2AKCud010/jsI071cC+huTQFg11u35xzHV8bc dzK0yE1k1uiy33oRjGNxIPKBYeardI5iTt1YC+rdK3YulZSUSdWHN+G53GhvCwXE P17nPiuL4l+Lpiy8wCUPlbUXYB0eULpRjHjJCcKAPK1BkEDPGarn0mUkfzkKHHrd ultMptFZkU1YptxrbuSPJ/8gMd0pzi1FECR0HriVnseZB7MDJPp5KyEY//JMPj7a giJCVk0z0T8UVkkTW/zu6BVV+1fVRxz+5xdxtL7QnFiMFJqJP4oprlfPWI+huNS8 JatSNod33dnHjGvYmxrd6jrgvhCYKUaY -----END CERTIFICATE-----Generated at Sun May 11 18:06:26 2025 by rpki-client