$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json) Hash identifier: Tx5hiQT7WtK/nwI95gvKWBSiqhK9H36fX++vWzVF/94= Subject key identifier: 30:6B:F8:48:8D:DA:ED:5E:49:A8:87:04:92:59:C6:19:F5:7D:A7:F9 Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Certificate serial: 0B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft Manifest number: 0B3A Signing time: Tue 06 May 2025 19:05:27 +0000 Manifest this update: Tue 06 May 2025 19:05:26 +0000 Manifest next update: Tue 13 May 2025 19:05:26 +0000 Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: Sx3UFHcxhIpM1WEzq1xKOIRh2/2+Hhj4Q1/OmGAXx8U=) 2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 88DAO3QlO8H0+j4IQqrGiQaCtaGiXiNDQrSD6ob+BaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Validity Not Before: May 6 19:05:26 2025 GMT Not After : May 13 19:05:26 2025 GMT Subject: CN=681a5d77-6b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:51:bf:db:e2:ea:7b:29:e8:71:cd:aa:cf: de:66:d4:2c:3b:98:27:7a:4f:99:71:82:3c:16:ce: 44:98:d9:db:45:73:51:c1:eb:e6:a5:38:a3:49:39: 0f:be:17:25:7c:03:d1:f1:77:e7:65:10:db:fd:c7: f4:2e:55:5a:71:30:18:0b:c3:fe:1c:d2:f0:14:a1: 17:1d:8a:70:ab:f8:c8:33:ee:fc:ae:46:3b:f3:d9: 28:43:3f:1a:93:ac:39:b0:84:ed:50:b8:2a:70:65: 55:18:2c:87:83:9e:2e:a9:25:b0:34:eb:16:28:3f: 19:17:1e:9e:24:1e:7c:15:a7:40:4a:3c:f5:74:95: c2:42:08:e2:a2:38:c4:1c:50:fe:fb:e1:05:bf:c7: 32:af:f2:cf:68:ad:66:a8:2d:51:24:ae:04:45:25: 0f:9c:c8:e9:39:4d:19:af:cf:94:12:f5:5f:ae:04: c3:50:a0:46:c1:bb:19:f7:df:7b:c1:82:02:0a:f7: c5:e2:98:f1:68:62:b5:bd:33:30:7a:04:df:a5:6d: c3:a6:a6:b1:48:06:c9:51:1c:c2:40:80:37:f5:28: 27:9f:86:a6:13:54:f1:85:4c:e5:b7:9e:24:3e:fb: 14:97:24:2b:f4:28:bc:1f:06:ec:3f:c8:ab:0a:8e: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:F8:48:8D:DA:ED:5E:49:A8:87:04:92:59:C6:19:F5:7D:A7:F9 X509v3 Authority Key Identifier: keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:76:58:64:6b:7c:a8:2c:73:39:ea:f6:d7:3a:b6:01:9d:9f: 34:3f:cb:b2:89:36:f8:5d:e6:d9:bd:bf:3f:c5:7a:fb:d3:e4: 0a:c0:de:f2:62:97:3d:2b:66:6c:7d:25:5d:2f:ed:f2:12:c4: 34:78:cb:ef:ff:2b:62:c7:9e:a8:24:ed:ca:72:3e:8f:5d:a2: 41:80:ae:6c:a1:18:a6:fe:0b:94:be:5c:73:f8:8e:61:cc:11: b9:06:c4:0e:a6:cc:f1:e2:e0:77:83:35:ce:22:29:86:d2:1d: 34:b2:e0:4c:be:ef:c5:ea:ee:57:d8:18:01:88:2f:9a:07:9d: bc:a0:83:45:4f:34:e5:6f:21:4c:eb:be:5f:b5:2a:ba:d9:d5: 84:c6:3d:79:92:d6:9b:74:dc:bb:f1:1f:4d:da:a0:fa:cc:f8: 8f:59:c2:df:77:74:8c:7f:33:e1:48:b2:50:e6:cb:f9:69:c8: 9c:3b:55:16:a2:f6:b1:6b:95:b9:a9:c8:07:51:4c:d3:10:6f: 71:0c:3b:3f:0e:c0:e2:f5:7d:ab:ca:d2:51:01:92:e1:50:b2: c1:96:5f:3c:fa:ee:59:0e:91:e4:9a:4c:3b:76:64:8e:ff:80: fe:89:ee:86:51:38:e8:b2:24:0f:ac:1f:6d:e9:90:64:4a:ba: 52:60:76:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG RTE0ODQ0QkIwHhcNMjUwNTA2MTkwNTI2WhcNMjUwNTEzMTkwNTI2WjAYMRYwFAYD VQQDEw02ODFhNWQ3Ny02YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO1Rv9vi6nsp6HHNqs/eZtQsO5gnek+ZcYI8Fs5EmNnbRXNRwevmpTijSTkP vhclfAPR8XfnZRDb/cf0LlVacTAYC8P+HNLwFKEXHYpwq/jIM+78rkY789koQz8a k6w5sITtULgqcGVVGCyHg54uqSWwNOsWKD8ZFx6eJB58FadASjz1dJXCQgjiojjE HFD+++EFv8cyr/LPaK1mqC1RJK4ERSUPnMjpOU0Zr8+UEvVfrgTDUKBGwbsZ9997 wYICCvfF4pjxaGK1vTMwegTfpW3DpqaxSAbJURzCQIA39Sgnn4amE1TxhUzlt54k PvsUlyQr9Ci8HwbsP8irCo5jaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBr+EiN 2u1eSaiHBJJZxhn1faf5MB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2 REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1 ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpdlhka3yoLHM56vbXOrYBnZ80P8uyiTb4XebZvb8/xXr70+QKwN7y Ypc9K2ZsfSVdL+3yEsQ0eMvv/ytix56oJO3Kcj6PXaJBgK5soRim/guUvlxz+I5h zBG5BsQOpszx4uB3gzXOIimG0h00suBMvu/F6u5X2BgBiC+aB528oINFTzTlbyFM 675ftSq62dWExj15ktabdNy78R9N2qD6zPiPWcLfd3SMfzPhSLJQ5sv5acicO1UW ovaxa5W5qcgHUUzTEG9xDDs/DsDi9X2rytJRAZLhULLBll88+u5ZDpHkmkw7dmSO /4D+ie6GUTjosiQPrB9t6ZBkSrpSYHa+ -----END CERTIFICATE-----Generated at Wed May 7 18:15:06 2025 by rpki-client