$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: 4CwET4Jq0OLweSasMs3vr89WON6OmV6A4wLXv5xtF8I= Subject key identifier: E9:96:91:81:35:E2:39:AB:01:73:1C:2E:1E:A6:5A:5E:53:6F:79:31 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 09C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 09BA Signing time: Sat 14 Jun 2025 19:50:56 +0000 Manifest this update: Sat 14 Jun 2025 19:50:55 +0000 Manifest next update: Sat 21 Jun 2025 19:50:55 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: dkHwnggCEivWM1NwQqS08WNXkn0VBO3e7sQ8eBqUj3U=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Uf8LYTZNddjyS9MPn91LjVgsJA/mrFvn5q0EDwmn+i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Jun 14 19:50:55 2025 GMT Not After : Jun 21 19:50:55 2025 GMT Subject: CN=684dd2a0-8e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0c:27:eb:1d:a5:f2:9b:38:a3:95:ef:23:dd: 4f:73:2b:2c:f3:0b:b8:87:63:c4:e5:25:7f:0a:38: 37:2d:ed:95:82:6d:3c:c9:f2:20:a9:8f:18:39:35: 16:84:62:54:ff:cb:68:7a:ba:f0:56:10:c5:d9:f1: 8a:ad:fb:23:70:1e:f1:75:5f:7c:c5:77:44:11:cc: 80:8a:1d:b4:a4:0e:05:8b:63:00:e9:b0:7d:88:8a: ad:3f:e9:e9:b8:0b:80:03:72:53:75:c3:6c:d2:65: fc:6e:74:01:d9:38:23:71:1e:c1:01:b2:18:94:1c: 4c:6b:97:b2:7f:c6:43:4a:c3:40:e6:32:38:55:de: e0:8d:93:3c:bd:b0:8a:26:bc:b2:eb:10:a5:b7:61: 59:72:da:18:51:92:e7:4b:01:0c:df:dc:e8:81:f1: 37:8d:af:28:1b:24:06:89:43:cb:81:05:82:55:9c: 9f:0c:28:4c:8d:73:62:97:a1:f6:95:67:58:44:0f: 8b:ce:0f:bd:6b:d3:78:e4:fe:86:10:97:81:14:02: a3:68:0b:d8:cc:f4:b4:ee:89:d1:79:2c:36:70:fe: 46:7b:c5:fc:86:f8:65:de:e7:d1:2b:ee:6c:74:39: 63:c4:34:6f:af:62:82:e6:91:a2:0a:7f:b3:36:7c: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:96:91:81:35:E2:39:AB:01:73:1C:2E:1E:A6:5A:5E:53:6F:79:31 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:46:87:8a:09:5c:17:d1:3e:1f:88:0e:08:e3:ca:0b:35:eb: ac:97:a5:b5:56:ff:75:e3:14:3c:b8:df:7e:9a:5b:54:50:bb: 3c:ad:1f:82:43:74:be:e9:2b:ab:0a:ec:80:78:6e:50:ee:3f: 57:81:f4:6c:ae:3e:7d:af:53:89:25:af:00:03:fb:b7:ee:69: 19:e1:c0:08:e0:4a:02:a5:7c:f3:7d:4d:25:a1:36:9e:7f:26: 3f:db:7a:07:16:af:e9:a8:fb:3d:c0:8c:b5:4b:a4:99:b3:01: b5:35:e3:ec:79:38:a0:7a:85:67:9e:88:7f:c8:d4:cb:02:a6: 25:29:69:5e:79:8c:71:28:32:cf:41:e9:60:ff:27:32:21:f4: 44:1d:e7:18:d2:d6:3a:6e:d1:fb:5c:45:7f:b7:03:b3:8a:26: 2d:b4:46:a3:ff:c4:28:ba:11:ae:f9:30:9b:42:9e:c2:5c:fa: 5b:7f:21:d3:3f:f8:54:35:e8:38:ae:9b:a8:05:1f:4c:e4:43: 22:74:53:35:ba:8b:ff:c7:0b:67:8c:18:78:e2:9f:1e:c9:d8: 8e:e5:9c:4e:9e:16:ad:be:dc:76:56:f1:2e:33:0c:cb:5f:48: e5:fc:bc:5f:18:57:60:b1:46:22:81:a4:12:1f:46:54:d6:82: a2:7b:fe:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUwNjE0MTk1MDU1WhcNMjUwNjIxMTk1MDU1WjAYMRYwFAYD VQQDEw02ODRkZDJhMC04ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gwn6x2l8ps4o5XvI91Pcyss8wu4h2PE5SV/Cjg3Le2Vgm08yfIgqY8YOTUW hGJU/8toerrwVhDF2fGKrfsjcB7xdV98xXdEEcyAih20pA4Fi2MA6bB9iIqtP+np uAuAA3JTdcNs0mX8bnQB2TgjcR7BAbIYlBxMa5eyf8ZDSsNA5jI4Vd7gjZM8vbCK Jryy6xClt2FZctoYUZLnSwEM39zogfE3ja8oGyQGiUPLgQWCVZyfDChMjXNil6H2 lWdYRA+Lzg+9a9N45P6GEJeBFAKjaAvYzPS07onReSw2cP5Ge8X8hvhl3ufRK+5s dDljxDRvr2KC5pGiCn+zNnysowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmWkYE1 4jmrAXMcLh6mWl5Tb3kxMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGRoeKCVwX0T4fiA4I48oLNeusl6W1Vv914xQ8uN9+mltUULs8rR+C Q3S+6SurCuyAeG5Q7j9XgfRsrj59r1OJJa8AA/u37mkZ4cAI4EoCpXzzfU0loTae fyY/23oHFq/pqPs9wIy1S6SZswG1NePseTigeoVnnoh/yNTLAqYlKWleeYxxKDLP Qelg/ycyIfREHecY0tY6btH7XEV/twOziiYttEaj/8QouhGu+TCbQp7CXPpbfyHT P/hUNeg4rpuoBR9M5EMidFM1uov/xwtnjBh44p8eydiO5ZxOnhatvtx2VvEuMwzL X0jl/LxfGFdgsUYigaQSH0ZU1oKie/6o -----END CERTIFICATE-----Generated at Mon Jun 16 14:53:11 2025 by rpki-client