$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: HYMXrYRCS8qYHKa71Z+xJnWOsCrDvBRsw4Wf9X8NsYg= Subject key identifier: 4B:8E:86:3D:4F:59:C1:5B:26:0A:EC:9D:EA:F8:50:82:B9:1B:F7:80 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 0861 Signing time: Thu 24 Apr 2025 20:33:53 +0000 Manifest this update: Thu 24 Apr 2025 20:33:53 +0000 Manifest next update: Thu 01 May 2025 20:33:53 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: ModqdT+Mr3nG75vz7CgLUbur08nacn3xR1QIFRNEWxE=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Yvl58W31jTaXrFpKwLiylkuL3NEb2f8QrSD0rbbSX2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Apr 24 20:33:53 2025 GMT Not After : May 1 20:33:53 2025 GMT Subject: CN=680aa031-1748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:18:e9:b6:20:72:b9:b9:cb:c4:9a:44:cb: 76:01:bc:b2:cb:ba:a7:86:72:47:66:0c:98:39:a3: 24:fa:5e:63:21:be:0d:7f:3a:09:56:29:18:6a:92: 9c:11:85:b4:b5:90:bc:fe:e0:3e:12:84:aa:d4:96: 26:4e:c2:2b:30:b7:5b:06:a2:c6:f8:98:d6:97:c6: 95:86:a7:69:90:43:e4:55:2f:ed:6a:c4:67:70:58: f7:cf:58:b9:07:54:8a:fc:3c:d0:31:f0:3f:68:c8: 31:7f:29:84:23:4f:65:ed:ae:b9:09:46:fc:8d:8f: 1f:9a:45:3d:9f:15:55:ed:a7:c4:84:31:ce:78:64: ec:a8:9c:6d:6a:f6:d7:0b:35:8a:04:d9:e9:3e:18: d7:c5:0d:76:79:4b:6b:36:bc:e1:fa:15:60:e2:e2: 81:80:0a:2c:b4:6f:d8:5e:36:b6:cd:d1:31:e8:ad: 52:bf:f5:91:20:f4:d1:e1:26:3b:73:5e:e8:da:7e: 5a:74:a4:a4:8d:93:dc:5f:cd:e0:e3:11:71:41:e9: 9a:7f:ad:6d:8d:ad:9f:87:92:e6:a1:c2:f8:cb:03: b6:d3:71:b1:b8:3d:02:9d:64:e4:af:31:0f:c3:f6: 83:01:f6:a2:bb:a5:4e:5a:85:bd:d8:21:84:50:e4: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:86:3D:4F:59:C1:5B:26:0A:EC:9D:EA:F8:50:82:B9:1B:F7:80 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:32:47:90:3a:f0:95:a4:cd:d5:05:e1:fa:74:7d:1e:1a:95: e5:02:ad:2b:05:56:23:11:28:55:45:cf:1c:b8:9a:ed:db:c8: c8:49:82:1e:9a:bc:be:1b:a3:ca:cf:0c:ee:7b:37:27:84:48: da:0a:04:35:07:35:06:fc:81:12:63:6e:d4:90:27:22:b8:e1: 1e:9b:84:6c:94:c9:1c:7d:28:e3:32:2c:bb:cc:8f:96:17:6b: e5:93:69:8f:33:37:3e:f2:5b:8b:d1:95:a5:8e:70:75:8c:3b: ed:b2:4b:7d:9e:80:2d:ce:bb:08:fa:88:95:94:ba:e4:c8:5f: 24:0a:21:a6:73:43:af:9f:2e:57:55:1f:b0:b9:a2:a3:6c:39: 55:6f:0e:66:ec:4f:ab:56:6b:6b:b1:0f:ab:5d:b3:d4:2d:cb: f8:b1:71:d6:b0:8c:75:7b:1b:c0:47:cb:82:dd:f9:c8:38:ac: 39:50:d3:68:b4:79:12:7b:c9:8d:af:0a:09:3e:52:be:9f:37: 9a:6f:96:63:56:d8:41:08:01:42:eb:34:ca:ce:0d:c6:7e:5f: 9c:fd:1d:bd:23:11:48:10:ee:6b:d0:e3:92:e0:30:2e:ca:b2: 80:2c:2b:11:15:46:42:d1:54:ec:88:30:9a:fa:59:9d:39:5b: b4:90:3b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUwNDI0MjAzMzUzWhcNMjUwNTAxMjAzMzUzWjAYMRYwFAYD VQQDEw02ODBhYTAzMS0xNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAcY6bYgcrm5y8SaRMt2Abyyy7qnhnJHZgyYOaMk+l5jIb4NfzoJVikYapKc EYW0tZC8/uA+EoSq1JYmTsIrMLdbBqLG+JjWl8aVhqdpkEPkVS/tasRncFj3z1i5 B1SK/DzQMfA/aMgxfymEI09l7a65CUb8jY8fmkU9nxVV7afEhDHOeGTsqJxtavbX CzWKBNnpPhjXxQ12eUtrNrzh+hVg4uKBgAostG/YXja2zdEx6K1Sv/WRIPTR4SY7 c17o2n5adKSkjZPcX83g4xFxQemaf61tja2fh5LmocL4ywO203GxuD0CnWTkrzEP w/aDAfaiu6VOWoW92CGEUOTIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuOhj1P WcFbJgrsner4UIK5G/eAMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7MkeQOvCVpM3VBeH6dH0eGpXlAq0rBVYjEShVRc8cuJrt28jISYIe mry+G6PKzwzuezcnhEjaCgQ1BzUG/IESY27UkCciuOEem4RslMkcfSjjMiy7zI+W F2vlk2mPMzc+8luL0ZWljnB1jDvtskt9noAtzrsI+oiVlLrkyF8kCiGmc0Ovny5X VR+wuaKjbDlVbw5m7E+rVmtrsQ+rXbPULcv4sXHWsIx1exvAR8uC3fnIOKw5UNNo tHkSe8mNrwoJPlK+nzeab5ZjVthBCAFC6zTKzg3Gfl+c/R29IxFIEO5r0OOS4DAu yrKALCsRFUZC0VTsiDCa+lmdOVu0kDuu -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:36 2025 by rpki-client