$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: y6OmA7lVKN+hnt2JR/oK+uVk9HFdL48F8H4fHRmuI3I= Subject key identifier: 07:26:92:0E:EB:DA:04:22:9A:F8:D4:C3:8D:B7:1B:F1:0E:9A:A8:F0 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0DE2 Signing time: Wed 14 May 2025 18:01:27 +0000 Manifest this update: Wed 14 May 2025 18:01:26 +0000 Manifest next update: Wed 21 May 2025 18:01:26 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: v7cJL+rfaGI5xry2eV9SHzSt1/FPaHMp2q8IfptJ3oo=) 2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 4v+rsnRLFBgrun/uIoRgYYIQkVKTxUpRVf++DCzZXn4=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: May 14 18:01:26 2025 GMT Not After : May 21 18:01:26 2025 GMT Subject: CN=6824da77-b5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:c5:af:06:9d:1d:32:a5:6f:c0:3d:8a:e2: dd:b5:28:be:ec:1a:73:c5:53:48:a9:7e:60:96:ae: 0e:4a:7f:6e:cc:f2:9e:94:04:3a:4c:46:48:85:9e: 72:43:1d:c8:2a:24:23:a3:fb:a3:9e:67:09:a1:da: c7:52:14:65:ce:f5:85:88:97:63:05:ee:6e:fc:77: 03:de:92:60:0a:9b:3b:ce:82:13:4d:b0:24:38:fb: a3:96:3b:7e:83:54:9e:34:8e:8f:e1:4c:ed:b8:80: fb:da:05:b3:a6:68:bf:70:e8:f4:5d:3e:a6:68:9a: 81:c3:96:a7:da:2d:6e:69:aa:e5:c3:1a:89:29:b7: c1:47:1d:4b:dd:55:e9:e8:2d:67:72:17:55:2b:49: 61:ed:8a:2d:e7:fb:bd:4e:99:e0:c8:23:09:15:0a: 17:e3:ae:6a:06:48:be:fa:cf:ab:7c:74:28:c3:0c: 1a:96:28:d8:7d:3c:b7:07:86:f0:12:f0:3d:65:ab: 0f:94:ac:ff:81:84:9a:46:be:8e:e8:63:45:27:7f: 92:37:63:1d:33:74:a2:a8:01:15:13:89:c3:85:d7: bd:0e:f9:be:e9:74:96:d5:ff:64:86:de:3c:45:45: 6a:20:d1:36:07:79:08:ab:7a:e3:dd:4b:31:31:fa: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:92:0E:EB:DA:04:22:9A:F8:D4:C3:8D:B7:1B:F1:0E:9A:A8:F0 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:38:ff:bd:25:d8:90:96:13:f6:d1:0a:57:de:63:8d:cb:09: 9e:57:02:d4:55:66:dd:86:03:eb:d0:b8:55:23:2c:58:75:4c: c7:4f:8d:19:66:3f:2c:e7:d7:7d:94:a9:87:95:8a:f0:07:2b: 9a:0d:15:0c:34:03:05:c6:82:9a:f0:bd:a5:9e:17:31:38:33: 35:c4:e8:db:3f:30:3d:a4:14:c5:68:f6:70:ea:41:7d:f0:71: 4b:a1:0c:e8:4a:41:d7:c8:19:fb:e3:ab:82:75:e5:57:39:22: 66:02:55:bf:64:76:eb:13:cd:e9:f9:d6:f4:81:9a:7b:11:e5: ec:79:77:6b:ae:22:cb:ff:03:29:3b:71:54:b2:85:17:37:09: 9e:cc:50:d4:2b:72:fa:6b:d8:c1:f0:4e:e2:b9:82:8c:8e:1a: 68:2c:ec:e6:53:bb:eb:d4:97:ad:36:e6:86:0a:b6:c4:24:50: 3b:df:3d:89:66:d4:62:60:eb:96:49:f6:2e:be:71:85:cc:8a: 0c:31:9d:50:f7:e2:10:20:72:1b:0e:3d:88:7e:53:60:3c:b6: 3a:c5:c1:92:5b:8a:33:b8:0a:15:df:55:5e:fe:1e:81:78:cc: 0a:bd:2a:72:20:4b:44:98:3f:45:d1:75:03:d4:f3:82:e3:6e: 7b:8d:ea:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNTE0MTgwMTI2WhcNMjUwNTIxMTgwMTI2WjAYMRYwFAYD VQQDEw02ODI0ZGE3Ny1iNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc/FrwadHTKlb8A9iuLdtSi+7BpzxVNIqX5glq4OSn9uzPKelAQ6TEZIhZ5y Qx3IKiQjo/ujnmcJodrHUhRlzvWFiJdjBe5u/HcD3pJgCps7zoITTbAkOPujljt+ g1SeNI6P4UztuID72gWzpmi/cOj0XT6maJqBw5an2i1uaarlwxqJKbfBRx1L3VXp 6C1nchdVK0lh7Yot5/u9TpngyCMJFQoX465qBki++s+rfHQowwwalijYfTy3B4bw EvA9ZasPlKz/gYSaRr6O6GNFJ3+SN2MdM3SiqAEVE4nDhde9Dvm+6XSW1f9kht48 RUVqINE2B3kIq3rj3UsxMfrgHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcmkg7r 2gQimvjUw423G/EOmqjwMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpOP+9JdiQlhP20QpX3mONywmeVwLUVWbdhgPr0LhVIyxYdUzHT40Z Zj8s59d9lKmHlYrwByuaDRUMNAMFxoKa8L2lnhcxODM1xOjbPzA9pBTFaPZw6kF9 8HFLoQzoSkHXyBn746uCdeVXOSJmAlW/ZHbrE83p+db0gZp7EeXseXdrriLL/wMp O3FUsoUXNwmezFDUK3L6a9jB8E7iuYKMjhpoLOzmU7vr1JetNuaGCrbEJFA73z2J ZtRiYOuWSfYuvnGFzIoMMZ1Q9+IQIHIbDj2IflNgPLY6xcGSW4ozuAoV31Ve/h6B eMwKvSpyIEtEmD9F0XUD1POC4257jeqJ -----END CERTIFICATE-----Generated at Thu May 15 18:42:09 2025 by rpki-client