$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: 7Oealq2J0aoOS20nXizk3C1uFeTWzlMXO56wZCJCNRs= Subject key identifier: F3:7C:E7:C1:11:0E:08:2C:59:22:79:51:12:F5:18:14:D8:BA:A2:FD Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 12BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 129E Signing time: Mon 12 May 2025 17:02:04 +0000 Manifest this update: Mon 12 May 2025 17:02:03 +0000 Manifest next update: Mon 19 May 2025 17:02:03 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: ImxG2qUGmzBOTCz9Z4VTPkh+hq3Dv2rZsvmVipkRyFI=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) 4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs=) 5: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4798 (0x12be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: May 12 17:02:03 2025 GMT Not After : May 19 17:02:03 2025 GMT Subject: CN=6822298b-fe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:62:98:90:c4:2f:3d:ea:67:18:1c:f2:cf: a0:91:6f:4c:cc:52:ac:45:75:3d:72:1f:1d:6d:c1: fd:a2:92:d0:b4:d2:34:3b:b1:ad:13:33:8a:08:a4: 93:45:a7:34:b8:af:2d:3f:ee:db:6a:cb:84:fa:69: 99:2b:5d:3e:02:ea:df:e0:33:5b:7e:de:eb:55:1c: b6:bb:94:f3:d7:5a:36:5f:eb:ca:0e:95:6b:47:59: e4:52:1a:31:eb:d3:ef:5f:6c:06:b4:dc:2e:98:28: 6b:be:d1:9c:92:63:a0:bc:bb:fd:42:1d:a2:ac:07: 07:a8:79:1e:0f:15:af:a6:a8:79:00:1d:dc:b2:f9: 40:f7:da:f8:ed:fa:f3:39:e8:e7:e8:dc:e4:56:45: 4a:e1:4f:6a:ca:d2:c9:6b:f9:f9:0f:64:ad:df:0d: f6:3a:c0:a7:a2:ab:a1:9c:15:42:b5:41:8f:21:36: 5d:59:6f:83:73:39:ac:84:8b:88:7d:e3:4d:04:23: ad:e2:ae:3b:44:42:e1:3c:cd:a1:08:b4:df:a5:55: bd:35:72:e9:fc:a3:d8:36:2f:7c:76:2a:48:50:c3: de:38:40:99:7e:a7:c0:0d:e5:03:fa:73:58:c4:eb: a4:d9:57:37:24:64:a0:4b:68:70:05:58:96:82:b4: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:E7:C1:11:0E:08:2C:59:22:79:51:12:F5:18:14:D8:BA:A2:FD X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:4d:84:8d:9d:29:68:ff:89:8d:93:31:95:65:26:b9:58:11: 2a:6f:31:05:35:13:9f:2e:b1:07:6d:4a:c6:66:b1:1b:05:85: 45:30:91:d6:41:e2:17:91:8e:fe:e7:44:89:5a:ce:c7:3e:1f: 18:6a:9f:8b:8b:fc:7a:c8:fe:81:34:84:8b:6d:2f:c2:bc:80: 84:2c:4e:0e:b1:8c:9a:c1:35:eb:d6:23:1e:bb:5e:b6:13:9e: 98:87:cb:88:e3:95:11:19:29:4a:4e:eb:16:e5:b2:2c:2f:db: e6:1f:ea:c2:67:2f:03:ee:3f:cd:3c:39:34:a7:ef:9a:e2:18: 56:77:5b:21:f6:dd:c0:fa:18:f4:be:17:60:de:2f:2b:3b:e5: ca:8d:83:dd:fb:2a:35:73:97:27:e3:37:f7:b0:2f:41:a9:ec: 12:f7:71:f8:ea:31:b4:3b:6e:b0:46:6b:dd:d9:72:32:6a:de: ae:8b:f5:27:bb:dc:c0:cc:86:57:78:f9:bd:5f:a0:04:37:25: 8a:b7:d2:6f:16:c5:f3:12:2d:33:5d:af:a3:65:de:4c:22:2b: 96:8e:f9:75:36:8f:fa:bb:06:f1:28:df:b5:6c:61:51:00:b3: ae:21:f8:f5:a7:8d:cf:ee:f9:b6:25:d0:44:2e:ea:d2:c0:b4: 50:36:6c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwNTEyMTcwMjAzWhcNMjUwNTE5MTcwMjAzWjAYMRYwFAYD VQQDEw02ODIyMjk4Yi1mZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApO5imJDELz3qZxgc8s+gkW9MzFKsRXU9ch8dbcH9opLQtNI0O7GtEzOKCKST Rac0uK8tP+7basuE+mmZK10+Aurf4DNbft7rVRy2u5Tz11o2X+vKDpVrR1nkUhox 69PvX2wGtNwumChrvtGckmOgvLv9Qh2irAcHqHkeDxWvpqh5AB3csvlA99r47frz Oejn6NzkVkVK4U9qytLJa/n5D2St3w32OsCnoquhnBVCtUGPITZdWW+DczmshIuI feNNBCOt4q47RELhPM2hCLTfpVW9NXLp/KPYNi98dipIUMPeOECZfqfADeUD+nNY xOuk2Vc3JGSgS2hwBViWgrTR8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN858ER DggsWSJ5URL1GBTYuqL9MB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsTYSNnSlo/4mNkzGVZSa5WBEqbzEFNROfLrEHbUrGZrEbBYVFMJHW QeIXkY7+50SJWs7HPh8Yap+Li/x6yP6BNISLbS/CvICELE4OsYyawTXr1iMeu162 E56Yh8uI45URGSlKTusW5bIsL9vmH+rCZy8D7j/NPDk0p++a4hhWd1sh9t3A+hj0 vhdg3i8rO+XKjYPd+yo1c5cn4zf3sC9BqewS93H46jG0O26wRmvd2XIyat6ui/Un u9zAzIZXePm9X6AENyWKt9JvFsXzEi0zXa+jZd5MIiuWjvl1No/6uwbxKN+1bGFR ALOuIfj1p43P7vm2JdBELurSwLRQNmww -----END CERTIFICATE-----Generated at Tue May 13 15:28:47 2025 by rpki-client