$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: icFSx1fIePfgfktzPxnq4JaGHg4CqFWC/3uOgx8nF80= Subject key identifier: 20:8D:31:B0:85:9A:C4:6B:37:AA:84:94:C0:98:89:1D:82:42:0A:BE Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 45 Signing time: Thu 03 Jul 2025 07:42:08 +0000 Manifest this update: Thu 03 Jul 2025 07:42:07 +0000 Manifest next update: Thu 10 Jul 2025 07:42:07 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: /m742z5oX+e/lKpw4SqcrzCP5THwar4p4a/iwUEm/p0=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Jul 3 07:42:07 2025 GMT Not After : Jul 10 07:42:07 2025 GMT Subject: CN=6866344f-0851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:58:9f:f0:69:d7:07:59:0f:4c:65:0d:f5: fa:df:23:d5:b8:65:17:a7:07:31:10:75:90:9f:d3: 4b:9a:1d:31:62:9c:e9:30:6f:93:f4:32:30:ec:07: 6a:ca:ab:dd:8d:f0:2b:89:7a:00:ad:0a:f7:7e:5f: fc:7e:eb:80:0f:67:4d:98:b9:25:d5:6c:a9:29:fc: cd:7d:d9:10:c7:bc:0d:4a:bc:18:6c:a7:3b:89:42: 36:b3:5b:d5:cb:01:df:a7:8f:31:c8:d6:90:9f:bd: 90:8c:60:07:b5:79:3f:1b:f8:fa:ea:9c:a0:25:dc: 08:16:ba:5e:02:9e:2e:4d:e8:1a:ad:c9:c5:3a:a0: 4e:7f:9a:e4:99:24:f0:78:bd:58:90:e3:c2:2c:be: 89:dd:f7:60:cb:b8:ef:02:0e:ec:29:f8:50:16:ba: 07:c0:0e:dd:cb:f3:aa:69:4a:4d:95:36:1c:dc:39: 8c:6f:8e:6d:5e:81:1c:85:cd:c1:0d:20:18:77:b1: dd:b8:87:6a:c3:3f:21:22:32:0b:cb:6d:30:4b:89: d0:f3:65:36:9f:d7:b8:4a:5f:72:9e:23:de:ec:57: 41:78:88:74:9d:32:4a:f2:85:8c:b4:1b:bc:32:d0: 9d:61:9b:27:75:db:dc:9a:8f:aa:83:c9:2b:4c:fa: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8D:31:B0:85:9A:C4:6B:37:AA:84:94:C0:98:89:1D:82:42:0A:BE X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:78:3f:61:ae:db:76:ab:28:2a:20:de:51:d5:c4:cb:26:a7: 72:53:79:2a:87:2b:ec:2b:af:09:7d:39:17:c5:b5:f5:f9:3e: c7:4a:e5:9f:3a:c6:3e:7e:83:9b:2c:71:af:e1:b0:29:d6:82: 38:2b:64:98:36:04:f0:46:06:c3:26:dd:6d:a5:b4:dc:c6:88: 88:e6:d1:99:92:36:93:4c:96:38:79:4f:ff:e8:9e:d0:8a:2c: d2:f0:23:bf:c9:70:89:87:b4:ef:41:6f:f0:7b:4a:19:5c:f6: 38:1f:ba:ef:ef:d8:ba:12:f5:11:e0:70:d5:7d:dd:63:46:1d: f0:b3:7f:c2:9d:64:2a:9d:db:d5:7e:0f:71:be:3c:e4:ba:d7: 93:1f:c9:7a:7e:1a:60:68:6e:ce:c6:88:69:e2:c9:e7:1c:f8: 70:d2:19:76:2b:aa:d6:ea:d3:e1:c0:e4:22:45:ed:1b:c8:9b: f7:63:60:35:fd:05:2d:8f:c1:50:63:65:ff:94:9f:6f:50:1f: 32:3a:3f:71:e7:2e:1f:3e:f5:51:a6:82:80:b1:1a:3d:a8:7d: 55:ee:51:00:b0:c2:7e:e9:a7:0f:d9:60:73:c1:cd:0a:7a:c4: 12:ef:24:be:9a:92:07:78:b7:bd:a2:ec:f3:ed:e1:2c:43:49: 5b:64:67:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNEU2OEIwNDhERDNEREJBNUY0NzhGMUZEMjg4QTg2MThC QTlGQUJBQTAeFw0yNTA3MDMwNzQyMDdaFw0yNTA3MTAwNzQyMDdaMBgxFjAUBgNV BAMTDTY4NjYzNDRmLTA4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbk1if8GnXB1kPTGUN9frfI9W4ZRenBzEQdZCf00uaHTFinOkwb5P0MjDsB2rK q92N8CuJegCtCvd+X/x+64APZ02YuSXVbKkp/M192RDHvA1KvBhspzuJQjazW9XL Ad+njzHI1pCfvZCMYAe1eT8b+PrqnKAl3AgWul4Cni5N6BqtycU6oE5/muSZJPB4 vViQ48Isvond92DLuO8CDuwp+FAWugfADt3L86ppSk2VNhzcOYxvjm1egRyFzcEN IBh3sd24h2rDPyEiMgvLbTBLidDzZTaf17hKX3KeI97sV0F4iHSdMkryhYy0G7wy 0J1hmyd129yaj6qDyStM+iIDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUII0xsIWa xGs3qoSUwJiJHYJCCr4wHwYDVR0jBBgwFoAUTmiwSN0926X0ePH9KIqGGLqfq6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzNDQjc3OUUwRjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG1pd1NOMDkyNlgwZVBIOUtJcUdHTHFmcTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzNDQjc3OUUwRjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZY MGVQSDlLSXFHR0xxZnE2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI14P2Gu23arKCog3lHVxMsmp3JTeSqHK+wrrwl9ORfFtfX5PsdK5Z86 xj5+g5ssca/hsCnWgjgrZJg2BPBGBsMm3W2ltNzGiIjm0ZmSNpNMljh5T//ontCK LNLwI7/JcImHtO9Bb/B7Shlc9jgfuu/v2LoS9RHgcNV93WNGHfCzf8KdZCqd29V+ D3G+POS615MfyXp+GmBobs7GiGniyecc+HDSGXYrqtbq0+HA5CJF7RvIm/djYDX9 BS2PwVBjZf+Un29QHzI6P3HnLh8+9VGmgoCxGj2ofVXuUQCwwn7ppw/ZYHPBzQp6 xBLvJL6akgd4t72i7PPt4SxDSVtkZyY= -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:23 2025 by rpki-client