$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: 0ZVh5lo9tS2zBWd8hWxVA4gbb88uEqlDnfHjny/rydw= Subject key identifier: 09:58:C7:E0:7F:1A:E4:EC:AB:F7:4C:AA:E9:CC:40:99:5D:C9:54:C9 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 16 Signing time: Tue 01 Jul 2025 08:48:14 +0000 Manifest this update: Tue 01 Jul 2025 08:48:13 +0000 Manifest next update: Tue 08 Jul 2025 08:48:13 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: 16hAozyR+0oTyJeTEwdySJHuq5Kwga+RdB+Sm9O0loc=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Jul 1 08:48:13 2025 GMT Not After : Jul 8 08:48:13 2025 GMT Subject: CN=6863a0ce-db59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:0d:6c:c2:6a:45:5a:49:b4:b3:47:ed:92: a4:38:a0:fb:13:5d:a4:4c:52:6d:17:a0:54:6b:d0: 7b:69:ef:7d:3f:d8:0c:26:77:12:17:69:90:47:db: 4d:f6:e1:b5:74:b8:e8:3c:98:3c:52:fb:64:70:83: e9:37:d4:57:18:35:ed:7e:45:17:bc:a9:61:5d:0b: ca:52:57:66:5b:ca:72:7f:50:0b:50:ed:10:27:1a: b0:bd:65:6c:b7:7a:c6:af:c2:e8:0a:63:09:6f:17: 3b:eb:51:e1:b7:bc:0b:f7:55:5d:0f:0c:bf:77:05: 54:5a:6f:7a:66:00:c1:46:59:6e:d1:4f:17:a5:fa: 77:76:81:41:ee:3e:ac:26:e8:9c:5c:ea:d1:71:5c: 8c:63:c5:f9:b0:e4:da:54:f6:24:ac:47:21:7d:2c: d0:f3:b1:11:cf:ec:94:59:fc:7b:79:0e:fd:ab:35: 0e:0c:08:86:be:b7:20:06:60:df:f6:c3:2d:78:e1: 41:05:f3:ed:96:59:9e:40:32:63:75:86:20:3a:d7: ec:db:9a:13:15:53:ee:f2:34:90:40:07:74:76:87: 0d:bf:73:c3:b2:30:ac:f7:d7:bd:a5:98:b7:dc:ad: 90:2e:0f:0f:eb:b4:08:7f:5a:f0:b1:83:11:fc:14: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:C7:E0:7F:1A:E4:EC:AB:F7:4C:AA:E9:CC:40:99:5D:C9:54:C9 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e6:7e:35:d2:cd:09:74:a2:8f:80:91:84:c4:2c:41:cc:a6: 9c:4f:60:4b:8a:ec:f3:51:56:06:a7:5f:7c:f0:80:6b:0d:84: ad:95:3d:fc:b4:ac:38:f4:c0:14:33:fa:0f:a0:47:f5:a3:be: ad:c0:61:96:8d:e9:30:83:91:f3:4e:23:d3:40:82:4a:0d:a2: b8:bf:ac:9f:b8:55:a2:c2:39:c1:a9:6d:69:18:46:85:18:7d: f6:57:d0:f1:52:47:cf:b0:70:3f:c9:06:c2:b0:42:95:13:19: 1b:51:bc:69:ac:a7:ce:01:8b:3b:f3:23:88:cd:9c:dd:e1:53: bb:3d:56:4f:50:af:87:a6:8b:e8:d0:a9:fa:2f:5b:db:1d:d1: eb:f0:6c:8c:59:6f:af:e3:d0:9c:38:59:04:1b:e1:db:aa:8a: 21:64:d4:c8:6d:5f:4c:92:a2:2e:17:94:87:a8:cf:08:f2:d8: 3a:50:37:50:0f:35:29:cb:81:02:3c:ea:55:28:51:5f:dc:11: 1c:35:49:39:66:5f:3f:12:10:86:8a:46:7e:b8:cb:a7:37:3c: 2a:79:05:a3:54:ec:3d:5d:38:78:d2:a1:d7:db:c0:b6:29:e5: 24:71:dd:c9:13:a9:70:45:12:70:97:17:1b:c1:78:a0:ad:25: 98:ec:b3:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTA3MDEwODQ4MTNaFw0yNTA3MDgwODQ4MTNaMBgxFjAUBgNV BAMTDTY4NjNhMGNlLWRiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8RQ1swmpFWkm0s0ftkqQ4oPsTXaRMUm0XoFRr0Htp730/2AwmdxIXaZBH2032 4bV0uOg8mDxS+2Rwg+k31FcYNe1+RRe8qWFdC8pSV2ZbynJ/UAtQ7RAnGrC9ZWy3 esavwugKYwlvFzvrUeG3vAv3VV0PDL93BVRab3pmAMFGWW7RTxel+nd2gUHuPqwm 6Jxc6tFxXIxjxfmw5NpU9iSsRyF9LNDzsRHP7JRZ/Ht5Dv2rNQ4MCIa+tyAGYN/2 wy144UEF8+2WWZ5AMmN1hiA61+zbmhMVU+7yNJBAB3R2hw2/c8OyMKz3172lmLfc rZAuDw/rtAh/WvCxgxH8FKNnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCVjH4H8a 5Oyr90yq6cxAmV3JVMkwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXmfjXSzQl0oo+AkYTELEHMppxPYEuK7PNRVganX3zwgGsNhK2VPfy0 rDj0wBQz+g+gR/Wjvq3AYZaN6TCDkfNOI9NAgkoNori/rJ+4VaLCOcGpbWkYRoUY ffZX0PFSR8+wcD/JBsKwQpUTGRtRvGmsp84BizvzI4jNnN3hU7s9Vk9Qr4emi+jQ qfovW9sd0evwbIxZb6/j0Jw4WQQb4duqiiFk1MhtX0ySoi4XlIeozwjy2DpQN1AP NSnLgQI86lUoUV/cERw1STlmXz8SEIaKRn64y6c3PCp5BaNU7D1dOHjSodfbwLYp 5SRx3ckTqXBFEnCXFxvBeKCtJZjss9o= -----END CERTIFICATE-----Generated at Wed Jul 2 12:37:12 2025 by rpki-client