$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: 6+HLdjTxBFwSg1Iyv2uq9hWjS36Ksj1WVYPCmMSn8XM= Subject key identifier: 89:65:1B:B8:CA:AE:5E:3D:B8:04:DE:3E:4D:B1:8E:6E:86:D2:0A:6B Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01D4 Signing time: Wed 18 Jun 2025 16:23:12 +0000 Manifest this update: Wed 18 Jun 2025 16:23:12 +0000 Manifest next update: Wed 25 Jun 2025 16:23:12 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: Zc1aT7rx67Srd6a2iFwQTmCEXs496OVx9tzt//cY23w=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jun 18 16:23:12 2025 GMT Not After : Jun 25 16:23:12 2025 GMT Subject: CN=6852e7f0-f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:17:d2:ff:76:95:93:a8:6a:bb:b6:2f:78: 87:34:96:39:35:30:fa:39:ab:ad:c0:6f:73:b5:00: 01:98:e3:96:55:68:b6:bf:b0:3c:e5:6a:ea:a7:a7: d2:e5:09:63:34:16:ad:fe:a2:6c:f5:4e:13:12:44: 10:49:f0:97:a4:4d:f4:79:ad:77:9e:94:b2:4b:1d: a8:72:28:1b:00:c9:42:b9:20:7b:e5:49:76:58:a7: c5:00:fc:58:eb:e4:a6:43:69:a5:ce:bc:b6:24:35: 78:90:17:5e:29:a3:89:a6:8c:fd:13:28:e5:e8:42: 63:8b:c3:70:a8:9d:b9:32:87:45:4c:7c:4b:f4:83: fa:2d:8d:6a:e8:39:37:90:7d:7e:aa:55:ce:7c:9d: 49:78:f2:79:e4:f5:9d:a3:17:d6:a3:56:a8:58:19: bf:8c:b9:ea:19:8a:5c:fa:53:76:94:00:59:14:6c: aa:e9:cf:5d:12:a8:94:78:81:70:fa:44:50:63:de: 4c:ec:52:9c:81:10:39:93:9f:24:fe:bf:23:54:f0: 1a:5c:2b:37:63:de:cf:30:9d:8f:68:6e:fd:0b:08: 2f:57:de:70:39:0d:1f:7b:dc:d8:d1:b6:c8:02:92: 57:0d:0d:61:3e:b0:d4:e7:2f:52:5b:e9:77:fe:a4: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:65:1B:B8:CA:AE:5E:3D:B8:04:DE:3E:4D:B1:8E:6E:86:D2:0A:6B X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e9:38:4a:47:76:27:44:04:de:b9:4d:78:f6:f2:35:52:a5: bb:58:c5:be:86:cc:02:e5:ce:b7:d8:4d:7f:5f:c1:2c:7c:1d: 9e:d2:e9:28:c2:0a:0b:e9:7f:f1:12:83:0b:2c:6e:50:bc:e0: 17:bf:84:b7:3f:82:65:5b:21:8a:ad:73:3a:4c:61:71:58:ab: 38:44:a9:1a:ab:c5:50:91:7e:1e:c1:a7:42:78:f9:f7:79:ab: f3:70:cd:5c:78:c2:3e:3f:bd:f4:97:71:e9:77:27:f9:44:e8: 56:a7:19:4a:29:0b:e4:40:3a:2b:b6:69:e7:2d:38:94:5e:f5: 77:03:c2:d1:7f:7a:5b:59:e0:f7:b5:6b:97:c7:c0:c2:5e:d3: 35:e9:01:4d:49:54:9d:d3:09:8f:e6:37:9b:86:0f:cb:5d:fd: 37:ce:1e:d6:b6:97:00:73:d5:54:71:c5:60:a9:31:f9:fc:eb: e9:75:ee:5c:5a:29:ac:7b:30:4e:6c:5e:fe:0a:4b:b2:e6:79: ad:c2:51:76:6d:18:fe:44:a3:e1:fe:9e:e1:11:c7:15:55:1a: ca:08:34:13:74:a2:4e:ba:ec:02:27:96:48:88:91:89:7a:e7: fa:92:75:cb:9d:41:2d:51:77:db:d2:09:f7:de:01:8b:ae:1a: 58:85:7a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwNjE4MTYyMzEyWhcNMjUwNjI1MTYyMzEyWjAYMRYwFAYD VQQDEw02ODUyZTdmMC1mN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CwX0v92lZOoaru2L3iHNJY5NTD6OautwG9ztQABmOOWVWi2v7A85Wrqp6fS 5QljNBat/qJs9U4TEkQQSfCXpE30ea13npSySx2ocigbAMlCuSB75Ul2WKfFAPxY 6+SmQ2mlzry2JDV4kBdeKaOJpoz9Eyjl6EJji8NwqJ25ModFTHxL9IP6LY1q6Dk3 kH1+qlXOfJ1JePJ55PWdoxfWo1aoWBm/jLnqGYpc+lN2lABZFGyq6c9dEqiUeIFw +kRQY95M7FKcgRA5k58k/r8jVPAaXCs3Y97PMJ2PaG79CwgvV95wOQ0fe9zY0bbI ApJXDQ1hPrDU5y9SW+l3/qTRZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIllG7jK rl49uATePk2xjm6G0gprMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB6ThKR3YnRATeuU149vI1UqW7WMW+hswC5c632E1/X8EsfB2e0uko wgoL6X/xEoMLLG5QvOAXv4S3P4JlWyGKrXM6TGFxWKs4RKkaq8VQkX4ewadCePn3 eavzcM1ceMI+P730l3Hpdyf5ROhWpxlKKQvkQDortmnnLTiUXvV3A8LRf3pbWeD3 tWuXx8DCXtM16QFNSVSd0wmP5jebhg/LXf03zh7WtpcAc9VUccVgqTH5/Ovpde5c WimsezBObF7+Ckuy5nmtwlF2bRj+RKPh/p7hEccVVRrKCDQTdKJOuuwCJ5ZIiJGJ euf6knXLnUEtUXfb0gn33gGLrhpYhXrC -----END CERTIFICATE-----Generated at Fri Jun 20 00:33:37 2025 by rpki-client