$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: ujwt1+d/fLfPuGEwR2H2Jdz9q8fzgHoV988dDxkRabE= Subject key identifier: 36:63:9C:7E:38:30:1F:B1:75:26:95:1A:B2:F1:65:A1:D1:98:6A:CC Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 2C Signing time: Tue 17 Jun 2025 06:37:10 +0000 Manifest this update: Tue 17 Jun 2025 06:37:10 +0000 Manifest next update: Tue 24 Jun 2025 06:37:10 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: 7qNbgpndWTgyS5z8s0LDTNzJn1oEmh1bmflvQFh9pDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Jun 17 06:37:10 2025 GMT Not After : Jun 24 06:37:10 2025 GMT Subject: CN=68510d16-167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:6c:1a:55:b0:44:17:3b:54:5d:c6:46:78: da:1c:82:0e:71:25:17:40:12:c0:a3:7c:27:d3:9b: c9:14:53:08:9a:9a:05:36:be:be:06:30:ad:63:08: 3b:a8:31:16:3a:dc:6d:8e:03:ec:e6:7a:18:15:48: 8c:6c:40:d0:23:1c:34:65:c3:bb:cb:5a:a3:93:82: 60:80:1b:77:81:e0:2f:81:88:7d:5d:e9:c4:f4:79: f8:3e:13:72:b2:5e:c6:d2:74:a3:eb:54:8e:7d:12: 6a:90:b7:78:06:08:9a:a4:a7:ca:17:a3:95:34:0e: d1:17:9e:fa:94:d0:a3:1a:36:a2:28:76:29:83:25: c2:de:49:a3:3c:b8:20:61:38:0b:58:c7:4a:99:4c: 42:6b:95:91:2c:b0:a0:64:85:49:d6:34:ca:8f:31: 3b:07:69:27:02:b6:36:99:38:8f:a1:ff:1f:3e:80: 89:b4:c7:f0:ec:27:0d:9f:95:a7:bc:01:ed:75:7e: e3:55:72:e1:96:7e:4a:34:d8:2e:c0:e1:50:9d:04: 21:c9:eb:85:a8:25:59:c0:40:f5:47:15:8e:cb:dd: 8c:94:15:74:d3:e4:7a:93:6f:05:c6:50:f0:0f:1d: b1:b5:58:5d:25:ae:91:25:08:b4:c0:b0:b6:c8:b9: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:9C:7E:38:30:1F:B1:75:26:95:1A:B2:F1:65:A1:D1:98:6A:CC X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:99:0e:85:8d:97:51:68:11:2f:f9:95:e4:5f:a6:f7:f5:f2: ec:87:0a:d1:40:c0:5b:15:0c:8c:d2:9d:ae:04:49:ba:6c:7b: 22:1c:5f:75:7f:75:61:fa:1a:75:b3:c6:ee:ca:83:90:43:90: 01:01:83:a1:e0:30:b0:af:96:ce:2a:22:bf:fc:e3:03:e7:30: 33:f9:e8:9d:15:a4:b1:78:23:96:47:d6:b1:13:c5:41:33:4a: f9:16:ee:42:3a:8d:3a:f5:e2:05:86:ba:6b:20:12:56:c1:6c: c5:d7:b9:22:72:54:9d:32:23:9a:17:58:40:ee:e5:13:00:a6: 9b:58:b6:1e:04:ad:27:ff:ad:7f:c5:df:85:69:6f:53:f5:ea: a2:60:8f:3d:e8:e1:34:e1:87:ef:cb:2c:6e:87:61:77:2b:da: 65:9a:aa:56:59:a8:48:e2:84:05:52:6b:c6:11:b4:c1:a9:4f: 6a:48:4a:93:98:81:33:34:f5:26:36:80:4a:32:10:43:b5:b8: 0f:c4:80:60:90:17:a0:3c:b9:ef:2a:00:e6:bb:f4:7e:d1:c1: 87:a3:74:38:f2:1a:29:25:01:3e:9e:b4:90:1f:9d:80:83:a8: b1:b2:15:62:0f:ff:fe:00:20:fe:5c:39:df:4e:e4:31:c2:70: 8e:9e:3e:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx RTExMkFEMjAeFw0yNTA2MTcwNjM3MTBaFw0yNTA2MjQwNjM3MTBaMBgxFjAUBgNV BAMTDTY4NTEwZDE2LTE2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSkWwaVbBEFztUXcZGeNocgg5xJRdAEsCjfCfTm8kUUwiamgU2vr4GMK1jCDuo MRY63G2OA+zmehgVSIxsQNAjHDRlw7vLWqOTgmCAG3eB4C+BiH1d6cT0efg+E3Ky XsbSdKPrVI59EmqQt3gGCJqkp8oXo5U0DtEXnvqU0KMaNqIodimDJcLeSaM8uCBh OAtYx0qZTEJrlZEssKBkhUnWNMqPMTsHaScCtjaZOI+h/x8+gIm0x/DsJw2flae8 Ae11fuNVcuGWfko02C7A4VCdBCHJ64WoJVnAQPVHFY7L3YyUFXTT5HqTbwXGUPAP HbG1WF0lrpElCLTAsLbIubZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNmOcfjgw H7F1JpUasvFlodGYaswwHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1 MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuZDoWNl1FoES/5leRfpvf18uyHCtFAwFsVDIzSna4ESbpseyIcX3V/ dWH6GnWzxu7Kg5BDkAEBg6HgMLCvls4qIr/84wPnMDP56J0VpLF4I5ZH1rETxUEz SvkW7kI6jTr14gWGumsgElbBbMXXuSJyVJ0yI5oXWEDu5RMApptYth4ErSf/rX/F 34Vpb1P16qJgjz3o4TThh+/LLG6HYXcr2mWaqlZZqEjihAVSa8YRtMGpT2pISpOY gTM09SY2gEoyEEO1uA/EgGCQF6A8ue8qAOa79H7RwYejdDjyGiklAT6etJAfnYCD qLGyFWIP//4AIP5cOd9O5DHCcI6ePlc= -----END CERTIFICATE-----Generated at Wed Jun 18 04:09:50 2025 by rpki-client