$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: 49L/GdSLIGBUlezpAcvbvQD0dfHpgwMbZRtdBj2Svzg= Subject key identifier: FF:0A:28:E9:3D:BD:70:C4:5A:E2:51:FB:1C:C0:F5:03:50:40:1A:15 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 073E Signing time: Thu 08 May 2025 21:33:08 +0000 Manifest this update: Thu 08 May 2025 21:33:07 +0000 Manifest next update: Thu 15 May 2025 21:33:07 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: etL5r4ZsigqDBu0ZaidBIloXbkgrWLy7XtZF90bYLaY=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: May 8 21:33:07 2025 GMT Not After : May 15 21:33:07 2025 GMT Subject: CN=681d2313-4500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:67:b3:4d:55:5f:2f:cc:9d:b0:ef:f6:aa: 22:83:3c:e2:72:0f:d5:0a:51:db:e6:bc:01:b1:51: 37:fd:3e:25:5c:5b:ea:27:c4:f9:58:b8:fb:c7:4f: fc:40:e6:f6:f0:02:2a:0a:b5:09:83:0f:78:ff:74: 4b:36:d9:b4:09:a8:6c:f6:84:d2:c6:7c:07:6d:d5: 56:dd:cb:1e:70:2c:06:44:35:cf:7c:57:87:09:8f: 01:b4:ad:5f:0c:02:9a:b6:e4:37:03:8b:e6:9e:c6: 55:86:b8:40:8d:6f:ce:e0:e1:c1:b0:fd:ad:1c:1e: 61:be:c1:9f:1e:f5:0d:4e:42:05:f1:d4:b7:72:2e: 3a:a5:c5:d8:bc:a5:a1:8c:f7:de:32:40:f8:21:6f: 97:e0:2c:da:50:de:50:0b:a2:c1:55:23:5d:07:3e: d2:0c:49:b3:7f:a8:64:5b:bd:d5:82:f8:7f:4c:2e: e2:96:f0:bd:d1:42:e8:a9:b1:a7:58:39:1d:bf:da: 02:55:f0:f2:50:50:ef:03:37:2b:de:23:d2:25:f5: bb:b4:1e:81:70:e7:bc:d9:d1:3e:98:0b:aa:45:62: 20:51:81:28:e3:2a:8c:00:d5:ad:f8:57:b5:3b:a4: c3:00:7c:f1:73:2b:e1:9e:5f:fc:6e:83:70:31:b2: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:28:E9:3D:BD:70:C4:5A:E2:51:FB:1C:C0:F5:03:50:40:1A:15 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:e7:38:03:aa:ec:9e:1c:c1:5d:2b:e0:b3:4b:92:7e:5f: 54:0d:d4:22:c4:1a:65:f0:94:93:d5:e5:c7:5d:7f:6d:20:5f: 04:8d:f8:fa:78:28:c6:68:df:a4:e7:ba:13:62:82:24:e2:7a: c0:df:6a:13:13:35:be:e2:44:36:2d:0d:54:f1:5f:f7:a8:22: 63:20:98:2a:9e:df:5c:4b:09:37:f1:ee:bf:ef:79:41:14:a0: b8:03:d1:84:09:ed:eb:3c:2f:1a:45:eb:e3:3d:e3:03:90:0a: d3:de:50:57:ad:47:1f:d4:4a:43:62:ff:a9:77:3a:fa:fe:0d: 3f:a1:f0:0c:9f:ce:18:de:6e:a8:c5:cf:90:b7:c3:80:66:27: bd:4d:4b:aa:5f:e8:b0:5b:1d:0b:66:6d:d9:83:1b:98:11:0c: 8d:c6:71:97:a6:ed:f9:4a:ce:b7:6a:b7:be:dc:91:6d:cd:cc: 94:90:0a:ef:8e:18:14:e9:f0:76:3a:dc:f9:8d:1c:8a:cf:51: 1d:4a:da:4c:7b:bd:10:ef:ad:a0:e1:5e:47:87:e4:cb:41:ae: f2:2b:35:6f:f9:4c:29:a9:f1:ed:e1:aa:ee:4a:f9:63:37:7d: 20:d6:5c:ff:6a:c8:69:20:c8:2b:c7:85:8d:8e:8b:57:d4:73: 56:91:b3:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUwNTA4MjEzMzA3WhcNMjUwNTE1MjEzMzA3WjAYMRYwFAYD VQQDEw02ODFkMjMxMy00NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4Jns01VXy/MnbDv9qoigzzicg/VClHb5rwBsVE3/T4lXFvqJ8T5WLj7x0/8 QOb28AIqCrUJgw94/3RLNtm0Cahs9oTSxnwHbdVW3csecCwGRDXPfFeHCY8BtK1f DAKatuQ3A4vmnsZVhrhAjW/O4OHBsP2tHB5hvsGfHvUNTkIF8dS3ci46pcXYvKWh jPfeMkD4IW+X4CzaUN5QC6LBVSNdBz7SDEmzf6hkW73Vgvh/TC7ilvC90ULoqbGn WDkdv9oCVfDyUFDvAzcr3iPSJfW7tB6BcOe82dE+mAuqRWIgUYEo4yqMANWt+Fe1 O6TDAHzxcyvhnl/8boNwMbJykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8KKOk9 vXDEWuJR+xzA9QNQQBoVMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUKec4A6rsnhzBXSvgs0uSfl9UDdQixBpl8JST1eXHXX9tIF8Ejfj6 eCjGaN+k57oTYoIk4nrA32oTEzW+4kQ2LQ1U8V/3qCJjIJgqnt9cSwk38e6/73lB FKC4A9GECe3rPC8aRevjPeMDkArT3lBXrUcf1EpDYv+pdzr6/g0/ofAMn84Y3m6o xc+Qt8OAZie9TUuqX+iwWx0LZm3ZgxuYEQyNxnGXpu35Ss63are+3JFtzcyUkArv jhgU6fB2Otz5jRyKz1EdStpMe70Q762g4V5Hh+TLQa7yKzVv+UwpqfHt4aruSvlj N30g1lz/ashpIMgrx4WNjotX1HNWkbPr -----END CERTIFICATE-----Generated at Sat May 10 09:45:22 2025 by rpki-client