$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: ROz9FeolTxdCXKru2+4tqisNup9eiiEvWP/HtkinaNc= Subject key identifier: 81:0E:5E:58:22:97:77:30:43:F5:E5:65:8C:7F:F4:1C:4D:B9:E5:46 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 180B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 1802 Signing time: Sat 14 Jun 2025 16:29:37 +0000 Manifest this update: Sat 14 Jun 2025 16:29:36 +0000 Manifest next update: Sat 21 Jun 2025 16:29:36 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: JT0y+BIRhL3kcYbkYxeX/9s5B4X1jUOhjkQIhgia288=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6155 (0x180b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Jun 14 16:29:36 2025 GMT Not After : Jun 21 16:29:36 2025 GMT Subject: CN=684da371-39ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:66:12:f4:82:c5:b0:a6:10:6a:01:4d:52: 44:f0:81:8a:e9:eb:45:87:bc:16:59:94:e1:99:c6: 65:a7:25:4c:12:15:60:06:94:c7:ff:58:66:2a:24: 4d:6b:75:84:c2:14:f4:ec:9c:ff:37:b4:88:43:7d: ac:f7:b2:02:ff:3f:b8:7c:09:d2:5a:b3:ee:da:e6: bc:e1:4b:f9:59:7d:64:0f:a9:66:64:bb:4c:49:13: 7c:93:3a:4b:5d:5c:3a:e5:04:7c:1e:c6:0e:62:8d: 75:94:4c:b6:32:84:49:65:24:f2:5a:3d:15:ec:82: f2:cb:7f:6b:d7:74:8f:75:25:e1:27:59:4f:a5:64: 43:1c:87:b7:8b:8b:a0:11:b6:e6:7e:b8:a9:ba:c1: 8f:14:89:f2:e7:63:9f:35:13:15:be:e7:ac:0c:15: b3:03:44:00:ea:ae:25:58:a1:13:d4:fb:34:62:1d: 6c:95:0a:0b:87:c3:68:db:9b:6e:2d:41:28:8e:5e: 8d:cf:38:bc:ca:45:1d:d0:69:42:9f:b3:27:a7:c1: 33:87:65:48:c3:b8:6d:6f:f6:52:d2:cc:08:fb:87: cc:62:6f:2d:59:26:f2:cc:a2:60:f4:76:54:30:ca: 7f:72:f8:cb:76:9a:c2:80:ba:58:73:73:8b:7b:c8: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:5E:58:22:97:77:30:43:F5:E5:65:8C:7F:F4:1C:4D:B9:E5:46 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:08:5a:6c:bb:aa:ab:f6:cb:de:e9:07:59:24:f2:12:1e:69: 66:d0:f3:f6:a8:24:ac:89:8a:7a:b8:60:91:3e:3f:c6:4b:b8: c9:e3:25:90:d1:73:c7:1a:08:97:a0:05:12:3e:76:f5:40:09: 41:73:dc:d3:f7:2a:bb:92:0c:65:07:1f:25:da:93:71:34:64: 37:67:76:00:12:35:40:c5:43:40:05:b7:9e:81:d8:a2:4f:9c: 2c:06:b4:58:a5:e4:be:b0:d2:1f:bf:bc:f9:72:9d:22:75:65: 2f:6f:02:a4:b7:a9:7e:65:17:bc:6d:ed:88:14:63:2c:c1:a6: 26:a1:13:a4:dc:59:7c:a4:07:9d:2f:8e:23:9c:6e:14:23:1b: 8e:c5:81:b2:b5:29:fa:aa:26:25:e0:38:95:b5:c9:05:60:84: 42:d1:dd:2f:aa:de:3d:e2:e3:74:14:ef:ca:d6:55:39:49:af: 86:83:a7:54:58:66:28:ce:59:d1:2f:d0:83:98:c3:73:e3:0f: 7f:9b:8b:a6:f2:8d:88:25:64:6a:ee:a4:60:4b:cf:4b:bc:7e: 88:23:fd:dc:af:5d:e1:c6:00:5a:fa:3c:62:65:35:f5:a9:05: 1a:03:8f:3f:e0:cb:3a:00:68:bf:5a:08:2c:08:74:af:8e:c4: da:48:00:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUwNjE0MTYyOTM2WhcNMjUwNjIxMTYyOTM2WjAYMRYwFAYD VQQDEw02ODRkYTM3MS0zOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsBmEvSCxbCmEGoBTVJE8IGK6etFh7wWWZThmcZlpyVMEhVgBpTH/1hmKiRN a3WEwhT07Jz/N7SIQ32s97IC/z+4fAnSWrPu2ua84Uv5WX1kD6lmZLtMSRN8kzpL XVw65QR8HsYOYo11lEy2MoRJZSTyWj0V7ILyy39r13SPdSXhJ1lPpWRDHIe3i4ug EbbmfripusGPFIny52OfNRMVvuesDBWzA0QA6q4lWKET1Ps0Yh1slQoLh8No25tu LUEojl6Nzzi8ykUd0GlCn7Mnp8Ezh2VIw7htb/ZS0swI+4fMYm8tWSbyzKJg9HZU MMp/cvjLdprCgLpYc3OLe8imUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEOXlgi l3cwQ/XlZYx/9BxNueVGMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRCFpsu6qr9sve6QdZJPISHmlm0PP2qCSsiYp6uGCRPj/GS7jJ4yWQ 0XPHGgiXoAUSPnb1QAlBc9zT9yq7kgxlBx8l2pNxNGQ3Z3YAEjVAxUNABbeegdii T5wsBrRYpeS+sNIfv7z5cp0idWUvbwKkt6l+ZRe8be2IFGMswaYmoROk3Fl8pAed L44jnG4UIxuOxYGytSn6qiYl4DiVtckFYIRC0d0vqt494uN0FO/K1lU5Sa+Gg6dU WGYozlnRL9CDmMNz4w9/m4um8o2IJWRq7qRgS89LvH6II/3cr13hxgBa+jxiZTX1 qQUaA48/4Ms6AGi/WggsCHSvjsTaSAA9 -----END CERTIFICATE-----Generated at Sat Jun 14 18:50:37 2025 by rpki-client