$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: aifl4v7HolBY2EUlim1SMFR6bTZw4a9zzZXgKs2Etts= Subject key identifier: 10:59:FE:D7:DF:19:CD:9F:0B:03:C3:BE:C0:81:7D:8F:7B:07:B9:9C Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 94 Signing time: Sun 15 Jun 2025 05:30:36 +0000 Manifest this update: Sun 15 Jun 2025 05:30:36 +0000 Manifest next update: Sun 22 Jun 2025 05:30:36 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: I8t3tXBNiX5fB3hJdi1DqtyosW3MioEcxNnKsklxxmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Jun 15 05:30:36 2025 GMT Not After : Jun 22 05:30:36 2025 GMT Subject: CN=684e5a7c-a1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:75:95:d0:90:c3:f8:53:6a:f2:fb:dd:01: 3d:a4:d5:48:01:14:54:e2:fc:32:a8:72:24:95:af: 09:ed:0b:a3:d6:0c:1c:35:e3:22:67:f6:8f:6a:4a: 7a:17:29:af:1e:61:07:ab:8d:ba:24:6d:7e:b4:e4: 60:61:d6:8e:df:46:74:9a:cc:07:c4:22:0e:fb:c5: c3:a4:d3:7c:ea:3a:48:2f:61:da:79:08:0e:d8:6e: 31:4f:cb:0b:91:c7:49:9e:6e:49:35:24:4d:10:7a: 34:18:14:36:7f:3e:42:91:f4:4c:7d:2c:9b:9e:08: 0a:0e:e2:42:fb:58:cb:78:84:8d:9c:b2:25:3e:81: 6b:fc:01:5d:30:c6:74:b2:9f:51:65:28:6c:42:8d: d0:10:d6:96:ca:18:23:1e:40:8d:cd:5f:c7:9d:8a: c8:90:b6:e4:34:be:8c:19:6d:b1:ec:e8:0d:47:a0: c9:6d:47:de:f2:6d:11:10:6d:ff:2f:41:5e:80:a6: fe:de:f5:83:0f:90:68:1e:69:d0:d1:23:ea:e1:53: 96:35:6b:b7:3f:24:3b:2c:e9:4f:4c:ba:6a:50:74: 73:21:a6:3f:a3:3a:9b:20:39:d4:65:b2:bd:59:98: b0:bf:3f:6b:65:fd:d0:12:3b:ba:7d:5b:e8:8a:c2: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:59:FE:D7:DF:19:CD:9F:0B:03:C3:BE:C0:81:7D:8F:7B:07:B9:9C X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0a:a1:de:ba:f9:59:1e:ab:86:bc:42:ee:e0:62:7d:d0:03: 20:fc:57:6d:2f:93:6e:db:c3:ad:ce:98:37:e3:af:6b:ff:4b: 88:84:4f:db:bc:61:13:74:47:c8:be:5e:ea:52:ff:06:23:cb: 3d:8f:86:1f:99:d4:50:e5:2b:ec:83:e0:c8:ce:10:83:1d:a2: 7d:de:fc:a6:f9:28:a3:3f:e4:e5:d3:3c:19:b2:45:40:02:39: c6:48:65:71:71:53:af:1b:5f:a5:64:49:8a:b1:0b:f0:55:45: 9a:fe:59:40:ea:f2:65:7d:14:3b:af:ba:79:b2:25:99:46:1d: 56:80:f1:c4:ea:49:b8:fb:47:ce:a0:12:a2:59:08:05:96:bf: 85:bf:b7:f9:cf:cc:d5:5f:52:58:02:03:c6:9b:65:64:b9:bb: 01:ae:07:7b:18:b7:94:a2:19:01:be:6d:7c:8c:81:99:6a:10: 55:a8:c3:8b:b6:1a:19:69:71:84:3e:b8:6a:6c:71:77:92:b7: 35:af:70:9a:a4:54:e2:6c:46:04:f7:13:30:60:32:09:2f:7b: 1b:69:72:93:00:14:00:63:d4:92:96:e2:b3:a7:14:13:b5:17: 32:2b:1e:a2:9b:5a:19:86:b0:73:68:46:29:5c:23:9b:0a:84: 7d:c0:83:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUwNjE1MDUzMDM2WhcNMjUwNjIyMDUzMDM2WjAYMRYwFAYD VQQDEw02ODRlNWE3Yy1hMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+N1ldCQw/hTavL73QE9pNVIARRU4vwyqHIkla8J7Quj1gwcNeMiZ/aPakp6 FymvHmEHq426JG1+tORgYdaO30Z0mswHxCIO+8XDpNN86jpIL2HaeQgO2G4xT8sL kcdJnm5JNSRNEHo0GBQ2fz5CkfRMfSybnggKDuJC+1jLeISNnLIlPoFr/AFdMMZ0 sp9RZShsQo3QENaWyhgjHkCNzV/HnYrIkLbkNL6MGW2x7OgNR6DJbUfe8m0REG3/ L0FegKb+3vWDD5BoHmnQ0SPq4VOWNWu3PyQ7LOlPTLpqUHRzIaY/ozqbIDnUZbK9 WZiwvz9rZf3QEju6fVvoisIo9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBZ/tff Gc2fCwPDvsCBfY97B7mcMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3CqHeuvlZHquGvELu4GJ90AMg/FdtL5Nu28Otzpg3469r/0uIhE/b vGETdEfIvl7qUv8GI8s9j4YfmdRQ5Svsg+DIzhCDHaJ93vym+SijP+Tl0zwZskVA AjnGSGVxcVOvG1+lZEmKsQvwVUWa/llA6vJlfRQ7r7p5siWZRh1WgPHE6km4+0fO oBKiWQgFlr+Fv7f5z8zVX1JYAgPGm2VkubsBrgd7GLeUohkBvm18jIGZahBVqMOL thoZaXGEPrhqbHF3krc1r3CapFTibEYE9xMwYDIJL3sbaXKTABQAY9SSluKzpxQT tRcyKx6im1oZhrBzaEYpXCObCoR9wIMj -----END CERTIFICATE-----Generated at Mon Jun 16 10:37:05 2025 by rpki-client