$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: FbDKL6mbBls+0AkVWarHw9/eKP/merhR0UEydp9v2b4= Subject key identifier: 45:63:6B:B3:1D:4E:1C:29:F5:70:1A:C0:B5:DA:F0:07:FD:D8:C7:05 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: C5 Signing time: Sun 15 Jun 2025 04:54:47 +0000 Manifest this update: Sun 15 Jun 2025 04:54:46 +0000 Manifest next update: Sun 22 Jun 2025 04:54:46 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: rbjWnlrdgkhArPPIzjf/+74GKJVrtO2qO5gNA0y+Ue8=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: ymGuQNubHZmih1/MlsNM4UjPPYjnvk5QIBxrno55/zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Jun 15 04:54:46 2025 GMT Not After : Jun 22 04:54:46 2025 GMT Subject: CN=684e5216-cd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:f9:72:fd:e8:c0:d9:67:64:e4:df:23:89: 97:39:82:cd:17:5e:5c:ec:62:c1:c6:8a:2f:9f:e5: 4b:61:22:45:88:cc:14:fb:0e:4b:fc:43:0e:35:81: b8:29:6e:b5:db:db:bd:69:4a:1e:8d:49:9b:70:28: 8f:35:10:fb:08:28:cd:83:ed:f5:27:4f:fb:d6:5e: e3:c1:90:ab:99:d8:98:1b:a7:0c:5d:ec:6e:f5:47: ef:a8:7b:fe:d1:0f:4b:5b:90:9f:11:c5:69:f4:c8: fe:e9:f7:1c:d7:4c:80:b8:44:3e:ec:c2:b6:9e:06: 7c:fd:d4:4d:9b:07:d2:88:59:1a:f2:42:9b:8f:be: 40:2a:f4:1e:3f:4d:7a:e7:68:ef:94:e7:73:0c:07: 2a:5c:27:a3:26:1d:1f:c3:53:2a:e0:dd:ec:8c:9a: f5:b4:41:9b:46:b2:77:5b:33:da:99:aa:57:87:54: 34:0b:b0:c7:93:d2:17:1b:d0:39:a0:49:3b:07:07: e9:f5:f1:85:72:d4:f4:32:76:d7:7e:10:bc:76:db: 8c:74:f7:2f:9e:a9:1b:5c:92:77:9c:1b:aa:c0:7a: f8:f6:00:a7:8c:74:0b:ac:9d:53:3d:13:71:56:54: ed:06:88:2b:f0:34:cb:4b:23:8f:00:cb:33:56:f6: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:63:6B:B3:1D:4E:1C:29:F5:70:1A:C0:B5:DA:F0:07:FD:D8:C7:05 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0b:3a:ef:47:b5:5b:31:ca:93:9e:62:b8:89:dd:05:c9:5c: d1:1f:ca:7c:34:92:67:07:a4:46:81:fb:cd:40:9c:08:41:31: 46:cb:94:76:1a:88:03:ec:ae:9e:02:dd:38:93:9d:04:5d:97: f5:57:c3:9a:15:e0:fd:fd:01:53:ac:90:df:81:29:db:c4:62: f7:f5:5c:44:6d:59:b3:2d:c2:fd:59:34:5a:89:0d:ae:8a:69: 27:8a:0d:a9:cc:0a:12:12:60:1f:ca:3f:93:0b:d6:61:4b:64: ff:1b:58:9b:ce:96:18:ba:41:85:55:33:90:29:2c:52:63:9c: 82:de:f6:7e:3d:b2:00:25:0c:48:82:e2:7a:cb:4b:78:92:c7: 42:1b:8d:76:2d:9d:cd:40:e7:b6:7f:9a:38:3d:9b:0c:be:a9: 80:cf:4d:78:6f:76:6a:d0:bf:9a:c9:60:c8:7f:16:b3:09:00: 90:07:66:28:63:e4:33:39:66:67:5f:23:ff:f0:20:21:15:7d: a3:3f:5c:29:f1:e3:af:7c:5e:c9:0d:eb:2d:d8:f7:fc:eb:bd: a8:59:75:1f:a4:09:d2:1a:ca:9b:92:a2:57:ab:c5:81:83:de: d7:f7:b4:d3:fc:ed:2e:7d:e7:b7:bb:40:83:0c:ac:02:6b:21: e2:5f:51:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUwNjE1MDQ1NDQ2WhcNMjUwNjIyMDQ1NDQ2WjAYMRYwFAYD VQQDEw02ODRlNTIxNi1jZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS35cv3owNlnZOTfI4mXOYLNF15c7GLBxoovn+VLYSJFiMwU+w5L/EMONYG4 KW6129u9aUoejUmbcCiPNRD7CCjNg+31J0/71l7jwZCrmdiYG6cMXexu9UfvqHv+ 0Q9LW5CfEcVp9Mj+6fcc10yAuEQ+7MK2ngZ8/dRNmwfSiFka8kKbj75AKvQeP016 52jvlOdzDAcqXCejJh0fw1Mq4N3sjJr1tEGbRrJ3WzPamapXh1Q0C7DHk9IXG9A5 oEk7Bwfp9fGFctT0MnbXfhC8dtuMdPcvnqkbXJJ3nBuqwHr49gCnjHQLrJ1TPRNx VlTtBogr8DTLSyOPAMszVvZRdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVja7Md Thwp9XAawLXa8Af92McFMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiCzrvR7VbMcqTnmK4id0FyVzRH8p8NJJnB6RGgfvNQJwIQTFGy5R2 GogD7K6eAt04k50EXZf1V8OaFeD9/QFTrJDfgSnbxGL39VxEbVmzLcL9WTRaiQ2u imknig2pzAoSEmAfyj+TC9ZhS2T/G1ibzpYYukGFVTOQKSxSY5yC3vZ+PbIAJQxI guJ6y0t4ksdCG412LZ3NQOe2f5o4PZsMvqmAz014b3Zq0L+ayWDIfxazCQCQB2Yo Y+QzOWZnXyP/8CAhFX2jP1wp8eOvfF7JDest2Pf8672oWXUfpAnSGsqbkqJXq8WB g97X97TT/O0ufee3u0CDDKwCayHiX1G4 -----END CERTIFICATE-----Generated at Mon Jun 16 21:40:00 2025 by rpki-client