$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: 4nKwfEpxfLj/gfL+j3l/mtUig2iCv5qvwyZe9HEgNhQ= Subject key identifier: BE:74:E9:E0:6A:53:ED:80:34:E1:B0:84:EA:8D:EC:92:16:A7:2D:2E Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: F4 Signing time: Fri 13 Jun 2025 04:21:34 +0000 Manifest this update: Fri 13 Jun 2025 04:21:33 +0000 Manifest next update: Fri 20 Jun 2025 04:21:33 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: gj6ojQbtsvPsWWsILqTUsFjDtB1DpEU5sv6JOrkHQ2k=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: HcCqoeJLN9vwPOWgJmrLe07H2GhuCLd/hVfLcTJpq2o=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: X8EbZsDCunbUgYMWUd9RkHifxlYXQi2zXDu+dO2RG4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: Jun 13 04:21:33 2025 GMT Not After : Jun 20 04:21:33 2025 GMT Subject: CN=684ba74d-fc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:f7:38:0a:9a:f3:26:1d:77:77:e5:e1:0f: cb:7e:4f:60:ba:10:1e:39:56:0c:82:43:c5:37:68: 5c:f8:31:41:61:01:4a:10:13:d5:8d:97:35:84:45: 47:77:c4:45:7d:ff:55:24:90:8f:19:ed:1c:00:31: b1:3b:ae:1e:e8:68:79:62:84:f2:9f:38:ae:be:06: 6b:28:a4:a8:c6:fa:4e:f3:44:8e:65:19:5c:72:58: f6:dd:8e:15:2a:d0:00:f4:2c:3f:09:69:c1:f2:4e: d5:0c:52:c9:8b:82:0c:c4:90:42:4f:f8:a4:59:8b: de:3d:2c:9c:1d:e5:96:54:31:98:43:c0:e6:ab:4f: 87:1d:f9:f4:d1:4c:53:8f:a2:69:92:1c:49:dc:37: 34:55:41:d3:b1:5b:50:8d:94:4e:ea:f2:1a:a8:1e: 3f:49:bd:2c:23:38:27:f4:b2:8e:81:39:77:d7:a9: ae:78:a8:f5:e9:34:68:8b:a2:a9:dd:2a:e9:5e:3f: fa:1b:95:f2:72:53:16:84:d8:5d:1e:d0:e6:c5:b1: 73:23:83:43:e3:bd:7f:da:45:e5:ae:f4:5b:db:07: 00:8d:4b:0a:6f:80:17:8a:29:60:6d:e9:99:c9:7c: 6e:f1:ae:e3:b5:77:a5:90:6a:01:e6:ff:e8:25:fe: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:74:E9:E0:6A:53:ED:80:34:E1:B0:84:EA:8D:EC:92:16:A7:2D:2E X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b0:da:31:a3:9f:6d:6a:7a:77:85:c0:f6:be:2d:f9:17:74: 7f:cf:20:c7:ca:51:70:83:eb:65:aa:5f:e4:1e:00:09:f3:56: 97:be:8e:3e:d2:5c:9b:01:00:45:b6:f0:2a:36:3b:e4:6f:67: be:48:32:82:00:e1:6e:07:53:39:0a:1f:6a:53:36:a3:28:78: a2:3d:1e:eb:87:4d:1b:c4:df:84:d7:67:5d:00:46:14:27:ea: 78:cd:f0:b9:9b:a4:46:83:2d:15:3f:b8:d5:eb:10:aa:40:b9: e1:ca:ea:71:96:13:5c:84:2b:e7:ce:cf:4c:2b:83:7e:31:82: a5:61:03:7d:b9:79:d8:45:ba:a0:0f:e8:a3:f2:8d:06:6f:86: 3e:e7:39:6c:4c:db:0a:1d:5f:81:06:ba:82:1a:e5:21:41:63: 7f:1f:a1:47:fb:c2:6d:cb:c0:86:9d:29:47:da:30:03:65:0c: 7a:27:e8:85:7f:65:64:f8:7f:f8:f7:0e:4c:71:0c:b0:15:bf: ed:4b:be:1a:c3:cd:8c:cb:bd:6d:6c:f9:57:cd:c8:4d:fc:ef: c3:9c:43:ea:21:ff:20:66:58:63:80:b7:64:a2:77:b2:d5:5d: f7:10:55:5a:5f:ef:a7:d1:77:ae:b4:a2:7e:49:f1:c9:74:c8: 04:8a:53:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjUwNjEzMDQyMTMzWhcNMjUwNjIwMDQyMTMzWjAYMRYwFAYD VQQDEw02ODRiYTc0ZC1mYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSz3OAqa8yYdd3fl4Q/Lfk9guhAeOVYMgkPFN2hc+DFBYQFKEBPVjZc1hEVH d8RFff9VJJCPGe0cADGxO64e6Gh5YoTynziuvgZrKKSoxvpO80SOZRlcclj23Y4V KtAA9Cw/CWnB8k7VDFLJi4IMxJBCT/ikWYvePSycHeWWVDGYQ8Dmq0+HHfn00UxT j6JpkhxJ3Dc0VUHTsVtQjZRO6vIaqB4/Sb0sIzgn9LKOgTl316mueKj16TRoi6Kp 3SrpXj/6G5XyclMWhNhdHtDmxbFzI4ND471/2kXlrvRb2wcAjUsKb4AXiilgbemZ yXxu8a7jtXelkGoB5v/oJf45SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL506eBq U+2ANOGwhOqN7JIWpy0uMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsNoxo59tanp3hcD2vi35F3R/zyDHylFwg+tlql/kHgAJ81aXvo4+ 0lybAQBFtvAqNjvkb2e+SDKCAOFuB1M5Ch9qUzajKHiiPR7rh00bxN+E12ddAEYU J+p4zfC5m6RGgy0VP7jV6xCqQLnhyupxlhNchCvnzs9MK4N+MYKlYQN9uXnYRbqg D+ij8o0Gb4Y+5zlsTNsKHV+BBrqCGuUhQWN/H6FH+8Jty8CGnSlH2jADZQx6J+iF f2Vk+H/49w5McQywFb/tS74aw82My71tbPlXzchN/O/DnEPqIf8gZlhjgLdkoney 1V33EFVaX++n0XeutKJ+SfHJdMgEilOW -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:19 2025 by rpki-client