$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: BLYyrMTlomEjQcJ96YBm6t54/db9HdujijYkLcLuiZQ= Subject key identifier: 58:5C:56:39:FA:47:33:A2:00:F3:BE:5B:CA:ED:3A:25:EE:7B:6A:8F Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0C43 Signing time: Thu 24 Apr 2025 18:19:30 +0000 Manifest this update: Thu 24 Apr 2025 18:19:29 +0000 Manifest next update: Thu 01 May 2025 18:19:29 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: 51d8ngVGDG3+feE9y4mr3UO1RhgcWfCBt7i5Fv8JwkI=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Apr 24 18:19:29 2025 GMT Not After : May 1 18:19:29 2025 GMT Subject: CN=680a80b2-12e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:79:37:b3:88:af:28:67:b1:7d:08:76:a5: 30:f0:e2:6b:59:86:53:10:c8:7b:c5:ed:c2:9d:07: f1:c5:82:a4:55:62:08:e8:13:82:e9:4c:e2:41:f1: 41:e3:b6:7d:af:67:4f:45:94:29:fb:06:74:b0:61: c6:5d:34:e4:b8:33:a6:07:12:f5:16:f0:88:c0:c6: 69:6f:c6:78:23:68:9f:a2:d2:d7:9e:87:1c:8b:22: 60:37:66:81:2e:98:3b:48:88:58:d1:8f:e6:41:55: a5:15:08:9d:e0:27:db:d7:81:43:d7:91:48:8e:89: 2f:05:b2:0c:d4:76:89:a4:cc:27:1b:c3:d0:6e:a3: 3a:11:1c:b9:c8:9f:92:a5:22:8a:9e:1d:3c:23:62: 04:68:bf:cb:c4:f7:ff:df:a3:aa:1b:40:51:d9:c8: 64:0b:05:2f:e6:99:eb:50:76:60:56:b3:c7:81:13: ad:0e:ff:57:fc:b3:a8:8a:4b:4f:ec:48:f5:99:c7: e7:48:ad:7c:e7:ac:0c:c3:83:16:75:2a:d9:91:00: 0e:28:cb:3d:ef:8e:85:7a:bf:6b:7b:f2:e8:c1:91: ed:4d:bf:ca:0a:9e:f3:88:70:3f:98:90:5b:1d:c1: 6e:22:9d:8e:25:5b:56:11:d8:1e:32:23:b0:7f:59: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5C:56:39:FA:47:33:A2:00:F3:BE:5B:CA:ED:3A:25:EE:7B:6A:8F X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d0:92:de:5a:b6:2b:61:5e:8c:b1:63:a9:df:7f:39:60:57: f7:7f:e3:29:c8:52:8b:f0:ab:7f:c5:45:03:86:4b:37:78:da: 8d:80:5c:3e:b4:b8:b6:b6:98:b4:1b:07:fa:9d:c7:f7:a7:8c: a8:4c:cf:2c:78:53:05:87:5e:f0:f9:a6:dd:30:6f:e8:fe:bd: c7:cb:99:30:20:e8:d8:63:d0:cc:ca:e7:2a:fd:e4:31:82:94: f5:8f:5c:62:56:17:86:54:c4:ef:e9:6b:0a:72:bb:2e:dc:84: 57:47:6c:c3:95:5b:37:d8:1b:35:65:46:21:0b:1b:ce:92:f3: 0c:42:b3:bc:2f:50:8c:02:6f:e1:57:1d:d1:42:e4:ed:5a:61: bb:85:cd:f1:64:30:04:ac:ce:c3:b5:00:21:19:8a:eb:6f:d4: 84:9e:cd:33:53:c7:7b:e3:20:c9:88:1c:c8:f5:38:b7:43:ae: ae:9f:2c:73:d0:38:a9:f9:e2:fb:fd:f3:a8:ba:b5:d1:33:b5: 5e:5d:84:ef:16:e0:41:89:0e:33:50:b2:a6:c1:6c:08:77:c2: 51:54:68:27:54:7e:6d:1e:a6:30:2a:35:46:7a:bc:e8:13:ef: 10:dd:fd:01:b1:cd:3a:03:8a:ee:d0:1a:6b:dc:d5:73:9a:31: fd:8a:4c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNDI0MTgxOTI5WhcNMjUwNTAxMTgxOTI5WjAYMRYwFAYD VQQDEw02ODBhODBiMi0xMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgx5N7OIryhnsX0IdqUw8OJrWYZTEMh7xe3CnQfxxYKkVWII6BOC6UziQfFB 47Z9r2dPRZQp+wZ0sGHGXTTkuDOmBxL1FvCIwMZpb8Z4I2ifotLXnocciyJgN2aB Lpg7SIhY0Y/mQVWlFQid4Cfb14FD15FIjokvBbIM1HaJpMwnG8PQbqM6ERy5yJ+S pSKKnh08I2IEaL/LxPf/36OqG0BR2chkCwUv5pnrUHZgVrPHgROtDv9X/LOoiktP 7Ej1mcfnSK1856wMw4MWdSrZkQAOKMs9746Fer9re/LowZHtTb/KCp7ziHA/mJBb HcFuIp2OJVtWEdgeMiOwf1k0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhcVjn6 RzOiAPO+W8rtOiXue2qPMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ0JLeWrYrYV6MsWOp3385YFf3f+MpyFKL8Kt/xUUDhks3eNqNgFw+ tLi2tpi0Gwf6ncf3p4yoTM8seFMFh17w+abdMG/o/r3Hy5kwIOjYY9DMyucq/eQx gpT1j1xiVheGVMTv6WsKcrsu3IRXR2zDlVs32Bs1ZUYhCxvOkvMMQrO8L1CMAm/h Vx3RQuTtWmG7hc3xZDAErM7DtQAhGYrrb9SEns0zU8d74yDJiBzI9Ti3Q66unyxz 0Dip+eL7/fOourXRM7VeXYTvFuBBiQ4zULKmwWwId8JRVGgnVH5tHqYwKjVGerzo E+8Q3f0Bsc06A4ru0Bpr3NVzmjH9ikw8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:04 2025 by rpki-client