$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: w1lnvo/IQo1DBZOqJVjYdA8YVCBeeVunr0Iw0IURhZ4= Subject key identifier: 49:98:A8:40:B7:E1:CB:33:57:39:AC:B8:22:4E:27:D7:41:69:7B:1A Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0BD7 Signing time: Wed 14 May 2025 19:01:23 +0000 Manifest this update: Wed 14 May 2025 19:01:22 +0000 Manifest next update: Wed 21 May 2025 19:01:22 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: jwPpHtIHcE3FPiLKmCpJ7LetzFNI+KKpm35zyj4Ovbk=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 14 19:01:22 2025 GMT Not After : May 21 19:01:22 2025 GMT Subject: CN=6824e882-ff0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:18:9f:13:15:fe:cb:c1:fc:dd:c5:9a:a4: 96:b8:72:ae:93:80:bf:fe:60:1b:ba:e6:7e:41:c0: b5:0d:3a:24:de:3f:31:8e:1b:d4:f8:ba:64:45:e9: 71:27:5d:ce:60:b4:0b:ea:0f:1e:a9:5d:e1:7c:30: 20:64:fe:10:b0:8f:15:86:3f:b2:13:30:da:f6:67: 1f:e2:52:45:41:95:11:9f:3e:f0:33:20:95:60:a2: 6a:cc:d0:1a:f6:85:e6:ae:18:14:1b:ea:f4:dd:cf: 30:1e:d4:d2:0d:f3:f5:ca:c6:83:ba:79:eb:24:f4: 8c:d3:18:bc:8e:d5:cc:15:dc:6e:d4:5a:39:f5:f6: 47:53:11:ec:09:3a:6c:2f:a6:11:15:14:33:4c:7c: 49:41:3c:4d:77:fc:e7:38:0d:8f:e9:e0:ab:96:d1: 22:60:6f:24:ed:4a:7b:36:c5:d8:63:8b:5d:a0:ac: 07:d1:bf:33:d6:b0:d3:96:d2:db:d7:60:6f:92:24: e3:4e:9f:63:73:6d:d7:ab:91:d5:d1:db:96:1e:0e: 25:b9:bc:c0:76:16:e9:f1:0c:22:eb:4a:69:c4:8e: 94:6d:80:a4:3a:5c:2a:3c:0f:cf:82:3b:18:9c:5a: b5:b0:c0:91:bc:e9:fe:e1:ea:20:d3:6f:5c:07:e2: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:A8:40:B7:E1:CB:33:57:39:AC:B8:22:4E:27:D7:41:69:7B:1A X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:85:4c:da:e4:81:1f:f1:cc:71:83:65:8d:9e:a7:0b:92:68: 08:e9:2e:f4:39:53:03:00:06:d2:e8:9b:98:76:64:09:17:f5: eb:38:fb:95:7e:f9:1b:15:c9:63:d6:c6:c7:9e:88:e0:02:1d: 84:6a:85:34:c0:54:44:88:dc:d8:3f:89:1b:3a:6e:7f:4b:02: 35:0b:36:e2:9a:37:04:1e:de:13:a4:fe:0f:91:b5:2b:69:af: 02:8f:e6:7d:86:64:c6:90:e9:ff:df:93:ae:bf:4c:84:f4:b5: 83:55:31:99:8f:3a:f7:90:f5:8e:d1:89:e5:0e:b9:0b:af:a4: cf:21:6f:85:29:e4:19:1f:72:10:68:83:c3:53:32:01:11:e3: e4:f1:ce:36:69:38:9e:e6:54:21:37:38:7e:d8:9a:2d:14:69: f6:f8:4e:00:14:5e:dc:b1:83:1b:db:ef:c8:46:a6:7f:cb:d6: 6a:f5:17:04:8c:5e:a3:4a:ec:7a:81:c1:b9:6e:fe:05:0a:c0: 05:c8:c5:01:89:e3:29:d2:31:c1:47:b4:6d:03:c1:76:10:2e: 86:a4:f4:4f:fe:32:2b:06:2a:29:8b:5e:48:a1:07:91:d5:34: cc:e9:ee:ad:36:80:a6:46:b5:d3:4f:dc:7b:19:0d:ce:77:aa: b0:8b:06:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUwNTE0MTkwMTIyWhcNMjUwNTIxMTkwMTIyWjAYMRYwFAYD VQQDEw02ODI0ZTg4Mi1mZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TwYnxMV/svB/N3FmqSWuHKuk4C//mAbuuZ+QcC1DTok3j8xjhvU+LpkRelx J13OYLQL6g8eqV3hfDAgZP4QsI8Vhj+yEzDa9mcf4lJFQZURnz7wMyCVYKJqzNAa 9oXmrhgUG+r03c8wHtTSDfP1ysaDunnrJPSM0xi8jtXMFdxu1Fo59fZHUxHsCTps L6YRFRQzTHxJQTxNd/znOA2P6eCrltEiYG8k7Up7NsXYY4tdoKwH0b8z1rDTltLb 12BvkiTjTp9jc23Xq5HV0duWHg4lubzAdhbp8Qwi60ppxI6UbYCkOlwqPA/PgjsY nFq1sMCRvOn+4eog029cB+K6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmYqEC3 4cszVzmsuCJOJ9dBaXsaMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDChUza5IEf8cxxg2WNnqcLkmgI6S70OVMDAAbS6JuYdmQJF/XrOPuV fvkbFclj1sbHnojgAh2EaoU0wFREiNzYP4kbOm5/SwI1CzbimjcEHt4TpP4PkbUr aa8Cj+Z9hmTGkOn/35Ouv0yE9LWDVTGZjzr3kPWO0YnlDrkLr6TPIW+FKeQZH3IQ aIPDUzIBEePk8c42aTie5lQhNzh+2JotFGn2+E4AFF7csYMb2+/IRqZ/y9Zq9RcE jF6jSux6gcG5bv4FCsAFyMUBieMp0jHBR7RtA8F2EC6GpPRP/jIrBiopi15IoQeR 1TTM6e6tNoCmRrXTT9x7GQ3Od6qwiwa0 -----END CERTIFICATE-----Generated at Thu May 15 22:04:33 2025 by rpki-client