$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: Z9ErZuUz/el/8EPeVvzvccG4ZHBtS/d5eAkgtVdzEfU= Subject key identifier: 53:C5:DB:29:00:CA:FD:A3:2B:4F:0F:F5:7F:2D:17:54:3C:59:8E:B5 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: B5 Signing time: Tue 13 May 2025 05:10:40 +0000 Manifest this update: Tue 13 May 2025 05:10:39 +0000 Manifest next update: Tue 20 May 2025 05:10:39 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: NM/EF0ePuuiUwLkg9Bio0DOVB34o3t+xpaw8N16cdkc=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: gxFq4TGudmApxCmCB48V39AuCdBYRdeV/qO3X4yaetA=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: ophTAyTavYYvv+S2dKtdeyoYjEN6drMlrbOrhmzxr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: May 13 05:10:39 2025 GMT Not After : May 20 05:10:39 2025 GMT Subject: CN=6822d450-9d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:b1:e6:78:68:49:63:ff:df:0b:d5:60:a7: a2:47:30:eb:3d:7c:09:73:5b:d4:d3:b2:62:37:c1: 62:5b:ad:48:17:50:67:4a:7f:54:d5:74:f6:d2:45: 9d:6d:fb:07:b8:f6:d1:c7:ac:91:33:e7:4d:3f:15: 58:d4:6f:55:de:0a:a9:eb:0c:00:c6:6b:93:bc:85: c5:49:b9:4b:87:ef:40:16:b1:45:12:de:49:de:d9: f6:d4:3e:19:62:7b:d3:ba:8a:e5:6f:08:43:95:64: ad:a9:45:ea:6d:04:e9:1d:0b:62:f0:71:d2:25:e8: 72:c9:3d:0e:6f:56:61:75:4a:f9:38:cf:5d:b5:f2: 4d:a1:4e:bc:a4:a8:cc:c8:6b:62:fd:83:e6:df:ab: 41:9e:1b:36:fb:9b:5e:b2:a3:d8:55:55:59:26:e6: 15:bc:c5:dd:05:66:b3:3c:61:6f:ee:53:e0:5a:bc: 0c:81:39:8a:ed:7b:ac:0d:ba:ab:15:b3:55:fa:9c: 89:75:86:2b:c3:2e:b3:b9:a8:74:38:30:3a:b2:05: b2:87:2c:59:03:11:1c:c9:81:e9:f0:66:1c:99:f2: f6:60:7c:6c:ca:45:03:d5:23:9e:75:13:b9:1c:65: 17:9d:bc:5b:c7:0b:c7:9c:07:46:69:9c:d9:2e:5c: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:DB:29:00:CA:FD:A3:2B:4F:0F:F5:7F:2D:17:54:3C:59:8E:B5 X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f2:0f:48:be:80:32:77:b5:18:e5:a4:2f:88:50:50:bc:14: e5:b0:17:7a:74:f7:11:b4:45:5b:a7:7a:5f:2c:f1:50:9d:36: 0a:5c:b0:a8:9b:1e:bb:0e:68:26:d1:45:58:3d:52:5a:b5:4c: 7a:ca:ea:32:64:1d:0a:fd:32:c6:29:dc:4d:75:c5:8a:87:2c: f5:ba:b1:bf:22:90:af:1e:52:02:f5:3b:10:20:f3:d0:0e:22: b7:49:13:4f:b1:96:67:57:f2:bb:ca:6b:37:ce:dd:92:54:69: 28:b9:c2:61:a6:30:32:e1:68:cf:d0:0c:33:08:3c:0c:41:14: d3:9f:4b:d0:0c:6c:79:d4:1c:57:66:94:16:65:75:46:5b:0c: ed:55:22:41:24:11:4d:3c:14:e4:63:df:21:64:9f:83:b9:9a: 5d:fb:df:36:a9:da:c8:8b:21:58:e3:23:6b:44:67:97:43:42: 8b:c3:90:1b:b4:ae:27:d2:16:dc:96:32:d3:c3:22:93:6b:84: 90:3c:fd:1e:3c:93:9c:1d:b9:b7:16:ec:0e:dd:3a:ee:58:59: c8:53:d6:93:7e:98:06:ab:ad:7d:08:57:80:62:dc:c3:9f:b5: fd:a9:77:07:09:fc:9e:0f:a9:b8:3d:16:3d:34:39:75:d6:9c: 2f:d4:9c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUwNTEzMDUxMDM5WhcNMjUwNTIwMDUxMDM5WjAYMRYwFAYD VQQDEw02ODIyZDQ1MC05ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH6x5nhoSWP/3wvVYKeiRzDrPXwJc1vU07JiN8FiW61IF1BnSn9U1XT20kWd bfsHuPbRx6yRM+dNPxVY1G9V3gqp6wwAxmuTvIXFSblLh+9AFrFFEt5J3tn21D4Z YnvTuorlbwhDlWStqUXqbQTpHQti8HHSJehyyT0Ob1ZhdUr5OM9dtfJNoU68pKjM yGti/YPm36tBnhs2+5tesqPYVVVZJuYVvMXdBWazPGFv7lPgWrwMgTmK7XusDbqr FbNV+pyJdYYrwy6zuah0ODA6sgWyhyxZAxEcyYHp8GYcmfL2YHxsykUD1SOedRO5 HGUXnbxbxwvHnAdGaZzZLlxVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPF2ykA yv2jK08P9X8tF1Q8WY61MB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ8g9IvoAyd7UY5aQviFBQvBTlsBd6dPcRtEVbp3pfLPFQnTYKXLCo mx67Dmgm0UVYPVJatUx6yuoyZB0K/TLGKdxNdcWKhyz1urG/IpCvHlIC9TsQIPPQ DiK3SRNPsZZnV/K7yms3zt2SVGkoucJhpjAy4WjP0AwzCDwMQRTTn0vQDGx51BxX ZpQWZXVGWwztVSJBJBFNPBTkY98hZJ+DuZpd+982qdrIiyFY4yNrRGeXQ0KLw5Ab tK4n0hbcljLTwyKTa4SQPP0ePJOcHbm3FuwO3TruWFnIU9aTfpgGq619CFeAYtzD n7X9qXcHCfyeD6m4PRY9NDl11pwv1Jxd -----END CERTIFICATE-----Generated at Wed May 14 22:00:51 2025 by rpki-client