$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json) Hash identifier: qm+c28932jRQ1kMKl+3KBdMym6e0dxf5V9OOgpY2NHA= Subject key identifier: A6:64:15:D0:BF:2A:2A:AC:DA:DA:D1:E9:8C:8B:7E:13:98:DE:CB:3C Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft Manifest number: 34AF Signing time: Mon 12 May 2025 14:56:19 +0000 Manifest this update: Mon 12 May 2025 14:56:18 +0000 Manifest next update: Mon 19 May 2025 14:56:18 +0000 Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: 1ryt/b2nE6ruo/GvBfwuRw3Kp9N8vl74o42+65xPiUk=) 2: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=) 3: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=) 4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=) 5: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=) 6: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: xZQ7AvFQpyHIc5iZzn8qdDOf2F8HwInGPZPfyXC47O8=) 7: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=) 8: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=) 9: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=) 10: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=) 11: D99C6B9853BE11EF819E6347C4F9AE02.roa (hash: u1prFwX1LNVmQojB0Ndofd4nLR+dhdwZrSqGwPIqegE=) 12: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: May 12 14:56:18 2025 GMT Not After : May 19 14:56:18 2025 GMT Subject: CN=68220c13-4d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:05:31:a9:c4:1d:e3:89:ba:59:f9:de:27:20: 1f:ce:b5:ff:68:a2:04:2d:da:ad:5c:a1:d5:eb:e8: 4f:44:63:92:b0:5a:ca:b3:21:b6:5e:b5:42:f2:51: d8:d9:22:22:4b:62:e9:a1:69:ec:d4:68:fc:1a:4d: f2:49:87:d1:4f:c3:6a:f6:d7:78:dd:24:b1:2e:6d: 63:bc:f5:7d:ae:74:16:5f:d8:1f:4f:0d:d4:2b:b9: 8c:b8:ff:2e:78:f3:d3:68:40:9f:ef:8e:8b:97:dc: 91:54:30:6f:c2:da:06:cf:29:05:ce:8e:e0:63:a4: 5a:9f:63:59:99:56:a7:93:b8:64:83:02:a2:3b:8c: 5b:13:16:f1:e2:77:e3:f5:eb:a9:cf:a5:2c:3d:ef: c6:d5:51:ca:6d:44:af:60:55:4f:f9:e6:9a:aa:44: 95:60:f0:96:99:96:cf:6d:9a:a3:15:66:3a:8c:65: d5:d1:4e:c1:96:24:6b:12:53:d6:e4:b0:52:32:22: 17:31:c7:2e:d3:5f:97:2b:01:80:2b:c7:ac:4e:fd: f6:2f:99:bb:14:eb:2f:d9:5e:1a:c7:82:3f:0d:00: b3:80:d5:30:eb:2a:a7:a7:90:96:3e:03:7b:13:b0: 68:a5:b9:27:63:8b:a8:9a:53:83:1c:f6:98:23:a6: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:64:15:D0:BF:2A:2A:AC:DA:DA:D1:E9:8C:8B:7E:13:98:DE:CB:3C X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:b4:a3:35:be:d7:d3:cd:a1:c2:be:20:07:12:22:8b:24:99: 87:0c:b2:47:ef:28:96:99:39:6e:5e:08:f9:0c:3d:d1:2c:e7: e9:23:9d:68:9e:6a:49:9f:86:ff:b3:d9:5e:43:ff:cc:0e:e5: 6e:75:34:b7:e8:03:41:4f:96:e3:28:f9:45:e3:25:fa:77:c0: 2e:6d:ea:9b:c0:b1:61:5b:62:7f:ad:b8:7d:16:af:02:97:1c: 26:40:5c:c0:18:40:c1:72:f0:13:a0:fb:a1:13:f1:74:b0:ae: 52:21:67:42:07:2d:f5:00:f9:02:5e:1c:8f:b5:f1:3c:fe:b9: c9:b0:09:71:fd:a9:6e:d4:77:19:9c:45:ca:42:7e:bb:36:51: 5e:59:5c:90:32:c2:2b:b2:13:b3:67:5a:9f:6b:1f:9a:c8:3e: 82:21:a0:58:9e:14:03:12:53:cf:4a:82:9b:03:fd:33:2a:08: b4:05:58:97:33:21:b9:dd:93:d0:8d:8a:81:18:f4:11:1a:93: a7:16:44:14:f8:d1:84:76:4d:0d:d0:b5:ab:3b:39:21:a5:ea: fa:15:b2:18:86:44:f6:f3:78:33:19:a2:a3:71:b9:a9:00:f0: 54:00:9b:5c:64:da:d8:19:2e:06:b8:88:7b:b0:16:ec:a7:e1: c5:f1:a8:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUwNTEyMTQ1NjE4WhcNMjUwNTE5MTQ1NjE4WjAYMRYwFAYD VQQDEw02ODIyMGMxMy00ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QUxqcQd44m6WfneJyAfzrX/aKIELdqtXKHV6+hPRGOSsFrKsyG2XrVC8lHY 2SIiS2LpoWns1Gj8Gk3ySYfRT8Nq9td43SSxLm1jvPV9rnQWX9gfTw3UK7mMuP8u ePPTaECf746Ll9yRVDBvwtoGzykFzo7gY6Ran2NZmVank7hkgwKiO4xbExbx4nfj 9eupz6UsPe/G1VHKbUSvYFVP+eaaqkSVYPCWmZbPbZqjFWY6jGXV0U7BliRrElPW 5LBSMiIXMccu01+XKwGAK8esTv32L5m7FOsv2V4ax4I/DQCzgNUw6yqnp5CWPgN7 E7BopbknY4uomlODHPaYI6aYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZkFdC/ Kiqs2trR6YyLfhOY3ss8MB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ MVZKRG12ams0S0NjajJXUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDftKM1vtfTzaHCviAHEiKLJJmHDLJH7yiWmTluXgj5DD3RLOfpI51o nmpJn4b/s9leQ//MDuVudTS36ANBT5bjKPlF4yX6d8AubeqbwLFhW2J/rbh9Fq8C lxwmQFzAGEDBcvAToPuhE/F0sK5SIWdCBy31APkCXhyPtfE8/rnJsAlx/alu1HcZ nEXKQn67NlFeWVyQMsIrshOzZ1qfax+ayD6CIaBYnhQDElPPSoKbA/0zKgi0BViX MyG53ZPQjYqBGPQRGpOnFkQU+NGEdk0N0LWrOzkhper6FbIYhkT283gzGaKjcbmp APBUAJtcZNrYGS4GuIh7sBbsp+HF8ahG -----END CERTIFICATE-----Generated at Tue May 13 19:57:43 2025 by rpki-client