$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: N5JlI5U3w06lO/3ZM5z7Tl1X+pCe7WW/sk599uqiYmc= Subject key identifier: D5:66:68:B7:2C:5B:00:74:C6:22:14:8C:0F:73:10:ED:88:B1:ED:DB Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: FA Signing time: Fri 09 May 2025 04:12:00 +0000 Manifest this update: Fri 09 May 2025 04:12:00 +0000 Manifest next update: Fri 16 May 2025 04:12:00 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: V6/XGve88vtBbOUp8zPf1BNU952dcqUE7kjA9Blj/t8=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: May 9 04:12:00 2025 GMT Not After : May 16 04:12:00 2025 GMT Subject: CN=681d8090-4702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:b3:85:52:f9:24:50:4d:d7:6c:28:cf:ca: 5d:36:60:3c:25:83:b4:46:9b:ac:57:b7:f2:fb:17: b0:4c:c0:83:95:08:9e:21:25:37:8e:48:4d:93:b9: 5c:82:cf:57:43:c3:f9:0e:c9:48:9b:70:34:c0:5c: 1b:20:93:a3:99:da:fc:1d:ec:07:b8:f1:77:26:63: 8e:ed:c6:85:17:c2:ba:d9:ed:3e:ff:cc:08:c8:18: 15:1d:1f:f8:8e:e5:4f:0a:06:ba:21:d3:94:ee:d9: a9:13:1a:a3:84:59:e6:70:0d:c1:05:d2:ed:7e:41: 6f:95:38:da:70:ae:c1:3f:60:09:2f:63:39:75:c5: f3:ad:af:75:67:c0:75:b9:06:52:5f:ab:d9:75:dc: 8f:b7:96:2c:73:f4:0b:8c:64:b7:dc:89:29:00:ac: db:ae:f2:cd:7d:ac:c3:dc:d3:f6:73:c8:a8:e3:76: c0:38:45:af:7f:37:1c:6a:0f:74:9d:73:70:e8:b2: 64:7c:34:41:96:09:f7:11:00:7e:b8:f9:b1:d9:fa: a0:3f:8d:91:d7:3c:9a:c1:12:e1:d5:86:b4:c0:7d: 3d:4e:91:80:bd:2e:1e:72:95:1b:5b:d2:d3:5a:76: dc:ac:47:3a:bb:77:16:87:46:98:bd:bf:20:7e:62: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:68:B7:2C:5B:00:74:C6:22:14:8C:0F:73:10:ED:88:B1:ED:DB X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5d:a4:84:3f:66:44:65:82:94:bc:94:90:84:fb:25:c3:d6: 88:cb:7f:d6:46:2b:3d:32:2c:7f:2f:9a:9a:67:f9:5a:30:df: 8d:0a:1e:b1:f8:e7:e8:8f:9d:f6:df:d6:1a:8e:27:3c:88:22: 92:7e:49:99:f8:3c:eb:d4:0d:16:e7:8b:f5:fd:b4:3b:2f:9a: 56:82:8c:20:9d:38:a8:2c:d5:39:72:a0:3a:20:96:c0:35:a2: d0:3c:82:8a:80:47:d8:53:9f:3a:43:21:11:99:ca:f7:25:85: cf:4a:9f:f7:17:ba:24:87:43:61:9c:f5:f3:de:c1:47:bc:4f: b5:5d:42:ea:3d:91:2e:11:22:1c:41:90:f6:c5:3b:6b:21:8c: fa:1f:34:1e:45:55:27:50:e9:4f:d1:8d:40:17:7c:2a:68:c2: 41:3a:53:fa:e7:57:72:f2:17:12:2e:44:f6:05:62:8d:ad:f6: 9b:f3:9b:9a:0d:16:e1:c8:3d:61:56:cb:89:ed:d7:eb:73:ac: d4:54:7f:66:97:b0:36:72:eb:4d:ad:db:6f:90:b9:39:35:fd: b4:66:3c:8e:f5:6b:28:53:0a:65:b0:78:2c:55:27:67:60:4c: 71:1f:23:35:cd:e4:38:e4:29:be:f7:66:3a:39:02:25:8c:7f: d5:70:27:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwNTA5MDQxMjAwWhcNMjUwNTE2MDQxMjAwWjAYMRYwFAYD VQQDEw02ODFkODA5MC00NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/qzhVL5JFBN12woz8pdNmA8JYO0RpusV7fy+xewTMCDlQieISU3jkhNk7lc gs9XQ8P5DslIm3A0wFwbIJOjmdr8HewHuPF3JmOO7caFF8K62e0+/8wIyBgVHR/4 juVPCga6IdOU7tmpExqjhFnmcA3BBdLtfkFvlTjacK7BP2AJL2M5dcXzra91Z8B1 uQZSX6vZddyPt5Ysc/QLjGS33IkpAKzbrvLNfazD3NP2c8io43bAOEWvfzccag90 nXNw6LJkfDRBlgn3EQB+uPmx2fqgP42R1zyawRLh1Ya0wH09TpGAvS4ecpUbW9LT WnbcrEc6u3cWh0aYvb8gfmLwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVmaLcs WwB0xiIUjA9zEO2Ise3bMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLXaSEP2ZEZYKUvJSQhPslw9aIy3/WRis9Mix/L5qaZ/laMN+NCh6x +Ofoj53239Yajic8iCKSfkmZ+Dzr1A0W54v1/bQ7L5pWgowgnTioLNU5cqA6IJbA NaLQPIKKgEfYU586QyERmcr3JYXPSp/3F7okh0NhnPXz3sFHvE+1XULqPZEuESIc QZD2xTtrIYz6HzQeRVUnUOlP0Y1AF3wqaMJBOlP651dy8hcSLkT2BWKNrfab85ua DRbhyD1hVsuJ7dfrc6zUVH9ml7A2cutNrdtvkLk5Nf20ZjyO9WsoUwplsHgsVSdn YExxHyM1zeQ45Cm+92Y6OQIljH/VcCdS -----END CERTIFICATE-----Generated at Sat May 10 09:56:15 2025 by rpki-client