$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json) Hash identifier: FFhH5akEB+TYrosJwVGB8nTnDD8g1pZZh2gVm+Lhq2Y= Subject key identifier: 39:78:BD:38:35:CD:6B:9B:4B:FD:36:DC:10:4F:48:78:2C:15:B1:83 Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft Manifest number: 04C9 Signing time: Thu 12 Jun 2025 23:24:35 +0000 Manifest this update: Thu 12 Jun 2025 23:24:35 +0000 Manifest next update: Thu 19 Jun 2025 23:24:35 +0000 Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: 7f+YaXIGcSC1c5+GkM9/KsAWpepdoNXL0Ob95ZlX0X4=) 2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: XOTWPX30EoXJqKV6109bwG+UksO95BBHigXDmFEItd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956 Validity Not Before: Jun 12 23:24:35 2025 GMT Not After : Jun 19 23:24:35 2025 GMT Subject: CN=684b61b3-6a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:39:57:1e:93:ae:f6:ff:98:e2:a2:c4:85: 8f:38:32:4b:ad:d9:35:1e:87:00:38:f0:bb:ae:ca: 89:4d:4c:ea:57:36:4b:fa:33:05:cb:1b:b2:18:48: c4:5e:33:3c:62:d8:2e:0e:9f:e2:52:b2:2b:e7:87: 49:6a:74:f5:01:f4:55:e0:aa:cc:c8:c1:46:9d:71: 9f:2b:4e:fd:07:cd:0a:b0:d9:48:af:a2:37:28:b5: d4:ca:f6:9a:95:e3:39:bc:da:ce:cb:c3:6b:a1:b3: 3e:6d:43:a4:b0:d2:3b:2d:5c:5e:00:fa:3d:68:97: 5a:ef:8f:87:6e:46:b8:3c:d6:34:d1:63:6b:d3:fe: 3e:e4:41:15:1d:b3:7d:b0:bf:d6:8c:69:2e:54:42: ff:df:27:fd:56:bc:da:eb:aa:8a:4c:a8:66:d4:3b: 4e:2e:54:7b:8c:45:5e:86:34:b1:f4:be:2c:9c:7c: 8d:ee:7d:c4:ba:36:e2:9c:cd:7c:9c:68:4c:37:6c: e1:23:4a:1f:f6:7e:d4:eb:65:69:54:fa:4a:a3:fb: e9:0f:11:37:d9:94:1d:d0:62:a7:39:76:c2:9f:29: 81:22:8f:51:d8:cb:34:e3:c9:4a:6a:ca:47:ae:df: ee:70:cf:dd:f2:eb:e7:ab:34:88:2a:30:b2:c2:0a: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:78:BD:38:35:CD:6B:9B:4B:FD:36:DC:10:4F:48:78:2C:15:B1:83 X509v3 Authority Key Identifier: keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c0:39:c8:94:cd:21:04:8d:9c:27:2d:18:5f:82:39:a3:d8: 15:78:9c:46:c2:0f:f8:3a:ae:d8:69:a3:ff:10:42:80:9b:5e: 41:8d:c5:2a:9c:38:ba:16:d9:9d:50:9a:2c:65:f3:1d:59:9f: f0:5e:78:c8:31:f8:fb:1a:64:a2:f7:4e:1c:af:01:7c:76:47: fa:30:39:1b:bc:bd:d7:9f:d1:0a:84:d0:ff:49:2b:f0:ee:68: 2e:27:2d:02:e1:02:26:e8:e9:3c:c3:f2:ee:c9:73:5d:85:da: 61:87:08:b6:1f:99:e7:28:50:03:0f:98:f4:8e:2a:8c:ea:36: 3b:dc:4f:8b:34:f0:3a:5e:7b:a6:07:c7:ef:fe:b9:aa:62:c0: d1:49:59:d0:1c:78:6d:bb:56:fb:2f:c5:c7:66:ac:82:8d:e7: 67:e3:db:b1:22:ec:dc:78:8c:35:4d:37:5d:85:20:0e:b9:f6: 35:e0:f2:05:88:00:b7:0f:85:53:82:2c:9c:f8:9e:73:3b:2c: ec:8f:f1:b8:3a:4d:6f:14:a7:07:5f:14:8d:11:7b:cf:da:47: 88:3a:7e:6e:fc:97:6b:2d:fc:c1:ef:d8:f8:74:f2:cc:b4:ff: f9:b6:fd:27:6b:78:3a:1f:dd:55:a3:3c:87:37:92:b5:33:d9: 45:6d:23:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD OEMxRTM5NTYwHhcNMjUwNjEyMjMyNDM1WhcNMjUwNjE5MjMyNDM1WjAYMRYwFAYD VQQDEw02ODRiNjFiMy02YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9g5Vx6Trvb/mOKixIWPODJLrdk1HocAOPC7rsqJTUzqVzZL+jMFyxuyGEjE XjM8YtguDp/iUrIr54dJanT1AfRV4KrMyMFGnXGfK079B80KsNlIr6I3KLXUyvaa leM5vNrOy8NrobM+bUOksNI7LVxeAPo9aJda74+Hbka4PNY00WNr0/4+5EEVHbN9 sL/WjGkuVEL/3yf9Vrza66qKTKhm1DtOLlR7jEVehjSx9L4snHyN7n3EujbinM18 nGhMN2zhI0of9n7U62VpVPpKo/vpDxE32ZQd0GKnOXbCnymBIo9R2Ms048lKaspH rt/ucM/d8uvnqzSIKjCywgogZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDl4vTg1 zWubS/023BBPSHgsFbGDMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4 MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEE2Mi8xRkE5NkRBMDI4MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJv VVdjcWdTT2QwWV9Jd2VPVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZwDnIlM0hBI2cJy0YX4I5o9gVeJxGwg/4Oq7YaaP/EEKAm15BjcUq nDi6FtmdUJosZfMdWZ/wXnjIMfj7GmSi904crwF8dkf6MDkbvL3Xn9EKhND/SSvw 7mguJy0C4QIm6Ok8w/LuyXNdhdphhwi2H5nnKFADD5j0jiqM6jY73E+LNPA6Xnum B8fv/rmqYsDRSVnQHHhtu1b7L8XHZqyCjedn49uxIuzceIw1TTddhSAOufY14PIF iAC3D4VTgiyc+J5zOyzsj/G4Ok1vFKcHXxSNEXvP2keIOn5u/JdrLfzB79j4dPLM tP/5tv0na3g6H91VozyHN5K1M9lFbSPa -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:01 2025 by rpki-client