$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: 1Eek0TwNvvFWWSBsmUd3dNasnOcUFOAy2wz/nX1BsDk= Subject key identifier: 69:32:98:A6:5E:DF:0E:4D:4E:59:88:01:AA:91:8B:A1:53:AB:0A:E2 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 0573 Signing time: Wed 18 Jun 2025 23:10:58 +0000 Manifest this update: Wed 18 Jun 2025 23:10:57 +0000 Manifest next update: Wed 25 Jun 2025 23:10:57 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: qGCzu6fh1YglVe3w3tyzHZU1b2Fx9xLRK6yE12+d/lg=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: RnZIX4eAVGz1Xn3dLIUYAfAKiqDL/KMhFsyHyDWlN4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Jun 18 23:10:57 2025 GMT Not After : Jun 25 23:10:57 2025 GMT Subject: CN=68534782-b5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:de:45:9f:83:81:1f:80:cd:11:6b:e9:d2: a3:e5:87:82:b1:a6:c6:10:67:78:86:63:8f:a0:b2: e7:4f:1d:d8:41:33:02:46:73:0e:c6:00:fd:8c:e8: a0:db:41:5d:07:fd:85:9a:79:11:19:97:f1:41:37: 3e:9b:18:81:9d:a9:c5:5a:f3:da:df:01:19:18:99: ab:6b:a0:d8:db:4c:ab:b3:58:14:f6:32:bd:65:2c: 6e:97:36:54:8a:63:b0:a4:47:1d:09:1f:d0:e0:0c: 46:9a:8c:e3:ca:f0:69:db:ca:c9:a7:25:5a:4f:60: 41:ec:b7:b1:bc:ed:32:df:b3:b6:af:8d:ae:c5:d4: 66:49:82:79:5f:b5:3b:7e:40:03:c6:29:f3:10:84: ad:08:5a:71:a5:db:b0:2f:40:3e:24:0d:00:75:37: da:b6:c6:4b:08:45:1f:8d:b1:f4:5c:36:0a:3d:ea: 37:37:1b:5f:57:9b:dc:a1:9d:00:f8:e9:14:f4:a6: fc:06:b8:c1:cb:26:ca:e7:30:7e:cd:cd:6e:a7:49: 64:b3:98:ad:68:e5:ef:0d:e0:ec:fd:b7:f2:5a:a2: de:29:28:e3:9b:61:fc:9f:93:d0:29:d5:ee:aa:0d: 31:ee:f7:e7:95:58:bc:48:82:43:b1:11:cf:b2:0a: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:98:A6:5E:DF:0E:4D:4E:59:88:01:AA:91:8B:A1:53:AB:0A:E2 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e7:f2:f1:dc:09:d9:da:58:95:53:0b:e3:31:d6:ca:08:c5: 27:ed:a1:e7:7c:ff:e9:dc:94:9f:54:2e:8c:df:43:2f:a9:ee: 08:66:4b:3e:92:3a:09:89:8f:38:06:8c:35:ef:9f:81:a1:48: 69:5f:7e:4f:13:93:fa:7e:78:a3:b1:44:22:6e:3a:96:64:2f: f0:fa:14:8a:a2:41:c7:a5:bb:83:3d:5e:ce:60:45:1e:e7:98: 6a:d7:8c:7e:e7:64:d7:1e:08:8e:a0:2f:6b:d0:ee:d1:67:6f: c0:62:77:08:ab:ab:1e:6e:ad:e7:7d:3f:6c:dd:e3:be:1e:3b: 21:fd:71:fd:6a:1c:a1:3e:8c:d0:62:08:63:83:97:79:b1:09: 50:58:fa:6c:bf:1c:4d:dc:72:08:70:ba:db:01:8b:f2:63:b8: 6c:1a:77:18:09:00:f7:ef:be:14:4a:da:92:95:d7:1f:9f:9c: 79:3c:63:3a:20:33:44:78:ea:58:d8:41:41:1c:56:d9:9e:ba: 83:43:a1:1b:b8:16:1c:b8:7d:5e:fb:23:53:ec:ff:59:ca:60: 5e:8d:15:9c:cd:c1:3f:2b:62:1c:3a:70:f5:70:ba:71:d0:15: 51:28:38:7f:dc:fc:55:5d:cd:a3:84:5a:94:42:c5:3a:df:38: 17:a4:1b:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwNjE4MjMxMDU3WhcNMjUwNjI1MjMxMDU3WjAYMRYwFAYD VQQDEw02ODUzNDc4Mi1iNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6jeRZ+DgR+AzRFr6dKj5YeCsabGEGd4hmOPoLLnTx3YQTMCRnMOxgD9jOig 20FdB/2FmnkRGZfxQTc+mxiBnanFWvPa3wEZGJmra6DY20yrs1gU9jK9ZSxulzZU imOwpEcdCR/Q4AxGmozjyvBp28rJpyVaT2BB7LexvO0y37O2r42uxdRmSYJ5X7U7 fkADxinzEIStCFpxpduwL0A+JA0AdTfatsZLCEUfjbH0XDYKPeo3NxtfV5vcoZ0A +OkU9Kb8BrjByybK5zB+zc1up0lks5itaOXvDeDs/bfyWqLeKSjjm2H8n5PQKdXu qg0x7vfnlVi8SIJDsRHPsgqT0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkymKZe 3w5NTlmIAaqRi6FTqwriMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy5/Lx3AnZ2liVUwvjMdbKCMUn7aHnfP/p3JSfVC6M30Mvqe4IZks+ kjoJiY84Bow175+BoUhpX35PE5P6fnijsUQibjqWZC/w+hSKokHHpbuDPV7OYEUe 55hq14x+52TXHgiOoC9r0O7RZ2/AYncIq6sebq3nfT9s3eO+Hjsh/XH9ahyhPozQ Yghjg5d5sQlQWPpsvxxN3HIIcLrbAYvyY7hsGncYCQD3774UStqSldcfn5x5PGM6 IDNEeOpY2EFBHFbZnrqDQ6EbuBYcuH1e+yNT7P9ZymBejRWczcE/K2IcOnD1cLpx 0BVRKDh/3PxVXc2jhFqUQsU63zgXpBsg -----END CERTIFICATE-----Generated at Fri Jun 20 10:04:28 2025 by rpki-client