$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: zk1sucTc3zbNx3J8yAmSiqvfgp010Ev/K1iogJmwLaM= Subject key identifier: 2B:7C:21:A9:08:27:A2:15:EF:6A:E9:D8:C0:89:44:A0:D1:A9:E7:7C Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 18 Signing time: Sun 15 Jun 2025 07:01:42 +0000 Manifest this update: Sun 15 Jun 2025 07:01:42 +0000 Manifest next update: Sun 22 Jun 2025 07:01:42 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: ZI/Dp13wVaYxQfZM2uCnNPo2HLhj4sYy0IkRgnOYOVw=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Jun 15 07:01:42 2025 GMT Not After : Jun 22 07:01:42 2025 GMT Subject: CN=684e6fd6-fa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:26:2c:20:62:df:16:01:06:b5:fb:07:d3: 43:f9:1b:cc:9b:0a:fb:c3:ef:7c:21:3d:06:38:3d: dc:9a:ba:24:c8:60:38:b5:b7:9e:dc:24:8b:d0:03: fd:b3:ec:47:c8:55:13:95:3b:ba:9b:da:17:e3:af: a8:3f:93:66:4f:23:be:e7:ce:15:b7:0f:13:2a:d5: a1:64:cb:68:33:59:58:bd:5c:90:8c:87:b7:2d:a9: 1a:cd:ea:18:ee:3c:fa:6c:37:83:8d:f3:bb:c4:cf: d9:5e:fc:c1:53:0b:9a:64:f7:76:15:49:3f:15:7b: fc:44:0e:c9:5c:47:ac:f5:9c:aa:46:e6:4e:48:6d: 1f:17:28:6b:93:6a:7e:ce:a6:38:5a:65:1a:e6:51: f0:12:fd:b9:0f:d1:39:7f:77:06:3a:c1:30:d8:df: 22:ec:2d:cf:73:86:d9:6a:0a:5b:30:61:54:de:e4: 94:c9:04:31:05:ba:4b:26:e8:c9:ae:c6:02:c7:a2: 17:fd:33:6f:b5:10:25:9a:8d:b7:35:f0:e9:7b:00: 8b:c3:86:03:f5:41:c0:11:1e:45:30:4d:a3:ca:c3: ee:eb:86:6d:bc:f7:8a:fc:33:db:a5:ce:8c:2d:48: 3e:2b:2a:0f:77:45:92:b5:ee:02:78:d7:26:df:39: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7C:21:A9:08:27:A2:15:EF:6A:E9:D8:C0:89:44:A0:D1:A9:E7:7C X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e6:4c:b6:b3:ee:02:bb:10:71:b2:10:58:c8:13:2b:6e:a9: 17:77:49:1a:76:b7:f8:be:b4:41:62:a0:9e:1c:41:b6:08:33: 56:e4:4e:06:ad:de:b8:bd:ec:1f:ec:e3:e1:a1:05:33:7f:4a: 86:a7:fe:43:2c:ae:c8:31:7a:4d:a0:34:e6:ab:50:75:8c:1d: 7f:aa:89:b8:d3:50:bc:97:d9:3b:c9:dd:7a:01:33:e8:36:70: bb:af:5a:61:74:3a:ba:8e:3c:c8:86:14:31:84:e5:84:02:3b: ef:c9:bb:5a:d6:58:a5:cf:4a:76:2b:cd:9e:44:31:55:74:6f: 24:1b:fd:ae:68:5b:d8:64:87:24:5c:4d:7c:b9:6c:d3:63:73: 2c:7c:c3:cf:1a:16:73:0f:f0:34:c3:90:c8:b5:c5:20:11:d2: 28:bb:99:1c:61:9e:44:6e:0d:a5:09:af:19:0a:8e:02:12:cb: 14:c3:1e:8b:05:bf:c3:58:4b:ff:bb:d4:2c:cd:29:68:ec:95: 8b:03:b0:28:75:6b:c9:4c:25:95:66:de:aa:ca:bb:22:dc:0c: 1d:38:34:93:6c:71:8b:15:1d:94:35:87:bc:54:5f:89:c9:e8: 50:5b:e2:8e:fc:60:62:18:d1:1f:ed:46:39:f0:66:66:11:29: 32:3c:80:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTA2MTUwNzAxNDJaFw0yNTA2MjIwNzAxNDJaMBgxFjAUBgNV BAMTDTY4NGU2ZmQ2LWZhODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5tSYsIGLfFgEGtfsH00P5G8ybCvvD73whPQY4PdyauiTIYDi1t57cJIvQA/2z 7EfIVROVO7qb2hfjr6g/k2ZPI77nzhW3DxMq1aFky2gzWVi9XJCMh7ctqRrN6hju PPpsN4ON87vEz9le/MFTC5pk93YVST8Ve/xEDslcR6z1nKpG5k5IbR8XKGuTan7O pjhaZRrmUfAS/bkP0Tl/dwY6wTDY3yLsLc9zhtlqClswYVTe5JTJBDEFuksm6Mmu xgLHohf9M2+1ECWajbc18Ol7AIvDhgP1QcARHkUwTaPKw+7rhm2894r8M9ulzowt SD4rKg93RZK17gJ41ybfOQRxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK3whqQgn ohXvaunYwIlEoNGp53wwHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHfmTLaz7gK7EHGyEFjIEytuqRd3SRp2t/i+tEFioJ4cQbYIM1bkTgat 3ri97B/s4+GhBTN/Soan/kMsrsgxek2gNOarUHWMHX+qibjTULyX2TvJ3XoBM+g2 cLuvWmF0OrqOPMiGFDGE5YQCO+/Ju1rWWKXPSnYrzZ5EMVV0byQb/a5oW9hkhyRc TXy5bNNjcyx8w88aFnMP8DTDkMi1xSAR0ii7mRxhnkRuDaUJrxkKjgISyxTDHosF v8NYS/+71CzNKWjslYsDsCh1a8lMJZVm3qrKuyLcDB04NJNscYsVHZQ1h7xUX4nJ 6FBb4o78YGIY0R/tRjnwZmYRKTI8gB0= -----END CERTIFICATE-----Generated at Sun Jun 15 23:48:43 2025 by rpki-client