$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: n/sVPbg3urTMfcd8QX+p54T0V4UHXBmSC8wU7N+jrqw= Subject key identifier: 85:D6:74:72:A2:50:93:E3:67:D4:BC:FA:93:62:2F:A0:2E:DA:A8:FA Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 0176 Signing time: Sun 11 May 2025 02:50:24 +0000 Manifest this update: Sun 11 May 2025 02:50:23 +0000 Manifest next update: Sun 18 May 2025 02:50:23 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: jyIwWm2K4u/zEDmbQ1kD1d3uQCU/qozCoORTkkluYrE=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=) 4: 3DA6569E383A11EF8998A252C4F9AE02.roa (hash: PvqaT2m26VjtkGuTElfQIOHqKDs1V4TPHM7KOHfBUSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: May 11 02:50:23 2025 GMT Not After : May 18 02:50:23 2025 GMT Subject: CN=6820106f-2e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:0a:f5:9f:b9:a1:cb:03:c4:a5:d5:d6:e4: 20:79:55:3a:fc:d7:7b:5a:b3:3a:b9:05:35:5c:4f: a3:20:b3:08:b8:dd:38:54:34:09:0f:1c:eb:a4:8f: 96:4d:02:dd:0a:bf:34:73:16:50:11:d5:58:58:63: 0c:c8:56:87:ee:b8:3c:02:ec:e4:ff:6b:5d:7f:51: db:e2:59:54:4c:17:36:a4:a3:36:9c:7c:3f:f8:d2: ad:01:a1:ef:76:0c:f4:b1:bc:73:25:98:b4:ee:99: 1a:b3:68:19:ab:4e:cd:7e:cb:d3:80:83:02:95:aa: f5:a8:63:45:8f:ca:7d:1e:d6:7f:85:1d:6f:97:e5: d0:dd:49:b6:d0:7a:da:7c:5f:8e:95:80:d1:0a:95: 9c:44:34:4e:ba:0d:49:20:45:d8:dc:5d:57:62:58: 75:f5:c0:98:ab:a7:ed:37:11:ce:24:bf:20:9a:38: b8:ca:de:96:9a:37:51:b2:20:25:1e:b9:68:88:c2: 1f:39:d9:bb:47:52:41:e1:5a:8e:c7:da:82:ae:83: fc:51:3c:58:ac:21:76:e1:82:75:44:7f:d4:4d:68: 20:86:43:d8:f3:be:6c:f5:25:a7:4e:1a:aa:98:2f: 2c:75:ac:dc:47:9f:9b:fb:0b:e1:73:f0:80:cf:87: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:74:72:A2:50:93:E3:67:D4:BC:FA:93:62:2F:A0:2E:DA:A8:FA X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c0:40:27:41:6f:0d:9d:8d:e6:e5:a4:f6:f6:37:dc:1a:43: 43:d4:1c:e3:9d:a0:5c:92:9d:83:ba:eb:9a:e8:25:6c:7b:53: 04:b5:01:f5:ca:af:ac:aa:fd:48:39:43:50:5f:94:30:97:f6: b4:1b:b5:57:d5:72:3b:26:64:d8:bf:46:0e:36:87:1f:88:6d: 21:8f:66:cd:25:cf:33:d5:13:ea:25:0c:f8:1c:c2:13:f5:5f: 3e:89:d4:86:28:f2:b4:01:d1:07:b0:9f:fc:61:af:1f:51:1b: 89:12:f3:db:66:1e:e7:75:f3:52:9f:51:10:e0:5e:44:2c:dc: 81:4f:04:19:75:22:e3:39:ff:fd:cc:61:5e:a3:a1:21:0e:9a: ad:44:93:a5:3d:d8:d2:7f:22:44:39:2d:23:47:5b:08:a6:b4: c3:7e:c8:14:4f:8a:38:c9:13:b5:59:0a:a8:d3:7c:8c:b2:03: 15:cd:1e:0c:0f:02:37:82:0e:b2:67:9d:88:72:bd:36:93:87: f8:d7:92:6f:1f:1f:15:7d:d1:b9:96:e6:b8:95:89:17:0f:5d: c9:30:68:e9:d9:4b:39:55:0f:20:e1:de:7a:4c:c9:0b:69:3d: ba:c6:39:d0:24:e7:20:11:99:58:1c:4e:53:89:74:25:b4:10: 6d:48:8f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUwNTExMDI1MDIzWhcNMjUwNTE4MDI1MDIzWjAYMRYwFAYD VQQDEw02ODIwMTA2Zi0yZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNAK9Z+5ocsDxKXV1uQgeVU6/Nd7WrM6uQU1XE+jILMIuN04VDQJDxzrpI+W TQLdCr80cxZQEdVYWGMMyFaH7rg8Auzk/2tdf1Hb4llUTBc2pKM2nHw/+NKtAaHv dgz0sbxzJZi07pkas2gZq07NfsvTgIMClar1qGNFj8p9HtZ/hR1vl+XQ3Um20Hra fF+OlYDRCpWcRDROug1JIEXY3F1XYlh19cCYq6ftNxHOJL8gmji4yt6WmjdRsiAl HrloiMIfOdm7R1JB4VqOx9qCroP8UTxYrCF24YJ1RH/UTWgghkPY875s9SWnThqq mC8sdazcR5+b+wvhc/CAz4eFswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXWdHKi UJPjZ9S8+pNiL6Au2qj6MB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEwEAnQW8NnY3m5aT29jfcGkND1BzjnaBckp2Duuua6CVse1MEtQH1 yq+sqv1IOUNQX5Qwl/a0G7VX1XI7JmTYv0YONocfiG0hj2bNJc8z1RPqJQz4HMIT 9V8+idSGKPK0AdEHsJ/8Ya8fURuJEvPbZh7ndfNSn1EQ4F5ELNyBTwQZdSLjOf/9 zGFeo6EhDpqtRJOlPdjSfyJEOS0jR1sIprTDfsgUT4o4yRO1WQqo03yMsgMVzR4M DwI3gg6yZ52Icr02k4f415JvHx8VfdG5lua4lYkXD13JMGjp2Us5VQ8g4d56TMkL aT26xjnQJOcgEZlYHE5TiXQltBBtSI+W -----END CERTIFICATE-----Generated at Mon May 12 13:33:26 2025 by rpki-client