$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: bIk5+pJqSujJA2koE0W2SDMNGT6RIlEoeLheFBZ8J+M= Subject key identifier: 2A:6D:58:A9:80:4F:A9:00:51:37:04:F7:8F:AC:70:93:00:99:BF:61 Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 05A1 Signing time: Wed 30 Apr 2025 22:50:18 +0000 Manifest this update: Wed 30 Apr 2025 22:50:17 +0000 Manifest next update: Wed 07 May 2025 22:50:17 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: DqySejilDQnxsijrAO8oqVeD0tlL+6C+P52dgvTz6xE=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: nlbZwdmWCR0rCntJsOjXUzxC/iQIDD9NG+5T6R9ZlqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Validity Not Before: Apr 30 22:50:17 2025 GMT Not After : May 7 22:50:17 2025 GMT Subject: CN=6812a929-aff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:07:21:0a:86:4d:81:35:19:cc:65:3a:82: 29:8c:b9:8b:9d:6f:b0:6b:cd:c0:be:70:70:5f:ec: 31:17:f9:12:30:78:38:9a:a7:78:ae:0d:7f:d5:ea: 1a:1e:c2:93:e5:13:52:25:aa:de:81:77:0d:12:fd: 77:7c:ef:58:aa:57:97:f9:b0:0c:f0:5e:6d:7b:36: 98:20:61:5d:3d:a5:8a:15:d5:b7:c5:98:c1:38:e6: 51:f8:5e:38:d9:7c:d4:97:d1:7f:70:58:8c:18:b1: 99:eb:63:e3:87:03:a6:b2:31:73:2b:7d:6f:19:65: 12:09:6b:97:cc:d3:7d:65:b7:5e:5a:92:c9:3d:89: 4d:28:b1:51:00:50:19:3e:65:f4:b1:ab:b6:f3:8c: ec:14:1e:04:df:bd:67:46:c4:38:02:0e:35:4c:5c: 93:0b:1c:eb:96:4f:33:35:ad:8a:b2:d6:dc:80:8e: 5a:2b:48:0b:71:67:9d:15:d7:34:27:8c:49:50:88: d2:53:bd:e0:d9:4a:c6:3d:21:c5:05:8e:de:6c:dc: 7f:1f:45:d1:01:52:5f:0b:8a:a0:98:2c:4c:fd:4e: e3:be:94:ea:16:d5:f2:2f:e6:7a:3b:e9:6a:21:fd: 96:35:ab:8d:59:22:d1:39:f8:40:42:0a:e7:ee:ea: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6D:58:A9:80:4F:A9:00:51:37:04:F7:8F:AC:70:93:00:99:BF:61 X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:92:84:a3:7b:71:5c:63:21:7b:19:08:64:85:b1:04:00: 3d:77:1c:25:02:f5:28:8c:65:fe:03:81:8f:c1:9c:26:7c:38: 59:35:6e:a8:75:95:24:61:0a:5d:be:d1:f3:38:d5:7f:c3:89: e0:e3:96:b3:e9:36:c4:08:89:25:93:7f:f5:40:cc:f5:4b:c2: a0:34:08:66:a0:74:58:e9:d9:3b:8a:40:3d:42:49:2b:87:48: e6:03:fd:25:60:a4:ef:92:7c:59:f4:eb:4a:26:e5:29:2c:ad: 20:ec:c9:80:eb:fa:eb:bd:49:6e:9b:3d:30:3e:d9:51:82:04: 18:6a:7c:24:39:46:91:9f:14:6f:9b:c7:e3:39:ef:e3:31:7f: 4f:19:13:f4:52:cd:2b:85:c9:0f:de:b6:16:4d:09:04:4d:5a: b1:d4:89:62:ca:c3:2a:49:4d:ca:fe:9e:d0:14:68:bb:c8:e0: 83:81:d1:9c:4d:0a:5a:b7:62:a0:78:5c:24:9a:48:5e:d1:cd: 50:5f:f0:0f:fc:8a:00:c6:d0:1d:22:e8:80:1d:a1:b9:5c:83: 7c:04:18:b7:79:d2:5c:6b:09:42:db:8f:9a:be:95:b5:81:e6: a4:35:31:79:1d:80:4f:17:d7:f5:da:46:10:8b:b7:14:45:87: 19:9c:ab:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjUwNDMwMjI1MDE3WhcNMjUwNTA3MjI1MDE3WjAYMRYwFAYD VQQDEw02ODEyYTkyOS1hZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzcHIQqGTYE1GcxlOoIpjLmLnW+wa83AvnBwX+wxF/kSMHg4mqd4rg1/1eoa HsKT5RNSJaregXcNEv13fO9YqleX+bAM8F5tezaYIGFdPaWKFdW3xZjBOOZR+F44 2XzUl9F/cFiMGLGZ62PjhwOmsjFzK31vGWUSCWuXzNN9ZbdeWpLJPYlNKLFRAFAZ PmX0sau284zsFB4E371nRsQ4Ag41TFyTCxzrlk8zNa2KstbcgI5aK0gLcWedFdc0 J4xJUIjSU73g2UrGPSHFBY7ebNx/H0XRAVJfC4qgmCxM/U7jvpTqFtXyL+Z6O+lq If2WNauNWSLROfhAQgrn7upucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCptWKmA T6kAUTcE94+scJMAmb9hMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIwJKEo3txXGMhexkIZIWxBAA9dxwlAvUojGX+A4GPwZwmfDhZNW6o dZUkYQpdvtHzONV/w4ng45az6TbECIklk3/1QMz1S8KgNAhmoHRY6dk7ikA9Qkkr h0jmA/0lYKTvknxZ9OtKJuUpLK0g7MmA6/rrvUlumz0wPtlRggQYanwkOUaRnxRv m8fjOe/jMX9PGRP0Us0rhckP3rYWTQkETVqx1IliysMqSU3K/p7QFGi7yOCDgdGc TQpat2KgeFwkmkhe0c1QX/AP/IoAxtAdIuiAHaG5XIN8BBi3edJcawlC24+avpW1 geakNTF5HYBPF9f12kYQi7cURYcZnKt5 -----END CERTIFICATE-----Generated at Fri May 2 22:49:26 2025 by rpki-client