$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: GjRpZqTJuQZS2XqZRZe8wj/J/HAOFwBKVYOcahjb0z0= Subject key identifier: 4D:15:6B:32:43:F6:40:E3:F2:2C:6E:B2:95:79:30:BA:37:7E:D5:B2 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 016A Signing time: Fri 13 Jun 2025 02:57:42 +0000 Manifest this update: Fri 13 Jun 2025 02:57:42 +0000 Manifest next update: Fri 20 Jun 2025 02:57:42 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: +kb/gS/TSR2PdiwogMq+vHpPbyf6Skde6uNwaCeR9wo=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Jun 13 02:57:42 2025 GMT Not After : Jun 20 02:57:42 2025 GMT Subject: CN=684b93a6-a722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:d8:a7:e6:79:5f:59:fa:b6:e5:ec:13:b1: ef:a2:1c:b3:38:c2:d3:ab:2a:70:08:49:64:ed:f1: 8d:af:87:aa:5f:9b:b4:45:d5:25:42:7e:eb:52:59: e3:94:db:68:02:fa:b2:b0:d1:62:e2:15:70:44:1c: 64:5d:52:78:2d:f0:c4:f0:e0:ce:d5:9d:44:c0:27: b6:6e:22:18:32:40:a2:ea:47:62:d4:ca:43:86:76: d5:c8:9a:c4:0b:b9:ba:50:60:ec:0d:55:d3:c0:e7: 03:68:47:6c:98:dd:19:01:3d:d2:ee:dd:e4:4f:57: 4f:f0:ef:40:ed:00:df:8a:4d:b0:f1:72:08:e4:e2: 00:6d:84:80:bb:c7:13:3a:14:cf:d8:f3:2d:da:56: 00:9b:87:4f:4c:26:f7:aa:0c:25:3c:75:38:b6:b0: d1:f5:31:f2:c2:20:58:3e:57:93:99:bd:1e:10:47: c4:67:4f:5b:49:c7:4e:5a:7e:6a:0a:2f:60:95:56: 6d:8a:fd:73:9a:5a:39:5c:0a:05:e3:a3:dc:c7:62: 22:58:20:9e:79:de:7a:1d:de:32:d3:66:6c:17:61: 51:9a:c9:1a:6a:d6:f7:89:d8:87:21:47:61:67:f8: 4f:80:ab:6e:b5:f7:61:3e:08:71:85:df:3f:8e:05: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:15:6B:32:43:F6:40:E3:F2:2C:6E:B2:95:79:30:BA:37:7E:D5:B2 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:27:d2:2f:89:0d:ef:e9:e0:44:7d:3e:1e:24:27:96:ab:02: e1:fd:d7:c8:63:c3:90:76:32:d4:32:8a:1e:2c:88:d1:1d:1f: 7a:db:0d:e4:1e:19:1d:a5:18:f0:42:95:b7:26:d7:55:71:65: 6e:97:9e:28:e6:08:48:68:85:4f:dc:0e:d9:90:ea:db:89:ab: 4d:e3:fa:4c:1e:c9:aa:c1:59:5f:83:06:e6:72:f7:94:49:1b: 03:bd:66:74:eb:d3:49:b8:b8:6c:1b:36:26:ad:ec:73:48:6a: 82:22:2f:17:2b:68:f4:1b:d6:14:0a:ce:e8:4a:f6:de:e6:09: e0:44:4a:e3:60:10:06:59:77:f8:f4:b8:8d:e1:0a:02:b6:37: a9:92:32:8f:41:cc:ab:33:e4:ac:40:9b:ba:2e:b9:b5:a3:38: 2c:2f:6a:c0:69:2c:01:63:87:75:32:02:6f:06:a6:ec:e6:5d: d3:8b:82:7a:dd:10:5b:8f:ae:e4:2d:6d:11:d9:bd:59:a9:08: fa:77:79:63:0c:05:31:b1:a7:7c:ac:47:5f:87:a7:c2:ec:a1: 55:0d:ee:be:f3:ef:e0:f6:d7:d8:98:8d:25:5d:04:3b:8c:0c: 5d:0a:7f:bd:fb:c5:d4:0e:27:00:3d:0a:fe:be:15:71:88:04: 3e:9e:45:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwNjEzMDI1NzQyWhcNMjUwNjIwMDI1NzQyWjAYMRYwFAYD VQQDEw02ODRiOTNhNi1hNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLPYp+Z5X1n6tuXsE7HvohyzOMLTqypwCElk7fGNr4eqX5u0RdUlQn7rUlnj lNtoAvqysNFi4hVwRBxkXVJ4LfDE8ODO1Z1EwCe2biIYMkCi6kdi1MpDhnbVyJrE C7m6UGDsDVXTwOcDaEdsmN0ZAT3S7t3kT1dP8O9A7QDfik2w8XII5OIAbYSAu8cT OhTP2PMt2lYAm4dPTCb3qgwlPHU4trDR9THywiBYPleTmb0eEEfEZ09bScdOWn5q Ci9glVZtiv1zmlo5XAoF46Pcx2IiWCCeed56Hd4y02ZsF2FRmskaatb3idiHIUdh Z/hPgKtutfdhPghxhd8/jgXO5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0VazJD 9kDj8ixuspV5MLo3ftWyMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtJ9IviQ3v6eBEfT4eJCeWqwLh/dfIY8OQdjLUMooeLIjRHR962w3k HhkdpRjwQpW3JtdVcWVul54o5ghIaIVP3A7ZkOrbiatN4/pMHsmqwVlfgwbmcveU SRsDvWZ069NJuLhsGzYmrexzSGqCIi8XK2j0G9YUCs7oSvbe5gngRErjYBAGWXf4 9LiN4QoCtjepkjKPQcyrM+SsQJu6Lrm1ozgsL2rAaSwBY4d1MgJvBqbs5l3Ti4J6 3RBbj67kLW0R2b1ZqQj6d3ljDAUxsad8rEdfh6fC7KFVDe6+8+/g9tfYmI0lXQQ7 jAxdCn+9+8XUDicAPQr+vhVxiAQ+nkUI -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:22 2025 by rpki-client