$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json) Hash identifier: PD5TSQybSYHqB/IK01sa49crkmiR1FqTKgaC2ydvu0M= Subject key identifier: 32:63:48:54:8D:06:05:E8:34:1C:98:A8:52:2A:C7:40:49:A3:CB:15 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 10C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft Manifest number: 10A5 Signing time: Fri 16 May 2025 17:34:08 +0000 Manifest this update: Fri 16 May 2025 17:34:07 +0000 Manifest next update: Fri 23 May 2025 17:34:07 +0000 Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: h7J9ZEZo8Ibx3TDrNm9pmydFGByNCLLD6J/17arYg0E=) 2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: lCmO2moRnEyFjHn2T0RrSpJHfoRMsDo8flibJ/q1im8=) 3: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: tpKBG2KlXfT/Zt122B62y1RWSYubHmXeyHELnt2EtS4=) 4: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4288 (0x10c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: May 16 17:34:07 2025 GMT Not After : May 23 17:34:07 2025 GMT Subject: CN=68277710-b992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:6b:f2:39:f1:41:41:18:4f:49:00:54:69: 24:a2:6b:ba:5d:30:e1:dc:ef:a9:48:98:f6:82:ba: 39:e0:3d:0b:0a:23:e7:11:fb:e2:a6:99:95:bb:75: f3:d3:6d:8f:c0:90:18:6d:84:86:fb:94:8b:9d:a4: 7a:fd:e7:3c:da:c3:15:d3:92:a8:94:00:83:11:3b: 53:1a:20:7f:8b:62:75:16:76:fe:15:a8:62:96:fa: a7:4e:9f:79:81:ed:1c:93:4a:91:6d:76:f8:20:04: e6:83:30:ce:f4:50:80:61:e7:49:99:c8:6e:79:86: 5c:9f:b3:e0:f0:fd:45:ce:45:b3:f2:8f:91:5d:f5: 48:44:16:9e:2c:a7:a5:8c:f8:89:64:48:cd:80:82: 8c:31:95:b2:57:ef:76:b7:6a:bf:3e:b7:af:36:e5: e1:49:29:45:33:a7:fc:22:18:bb:c9:e4:59:11:43: 25:8d:53:2e:aa:9d:5d:64:0d:88:52:5c:01:cf:be: 9c:a2:8d:95:32:49:2f:72:df:3d:79:ef:ec:fc:e6: 11:de:c4:39:99:57:a6:38:ee:17:5e:4e:bf:2b:46: 4e:55:00:9f:66:03:eb:ef:cf:f8:78:ef:94:6c:35: c0:53:5a:d6:16:ba:70:42:9c:64:52:be:9e:16:c8: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:63:48:54:8D:06:05:E8:34:1C:98:A8:52:2A:C7:40:49:A3:CB:15 X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:28:f6:b8:7d:c9:c3:18:c2:a1:9e:1a:bc:b7:87:12:54:89: ef:05:3a:8b:c9:60:8a:5e:dc:eb:51:e4:d6:2c:28:10:d0:74: c6:5e:65:60:4c:ae:fc:d8:46:54:5b:ad:bc:c3:f4:e1:97:0d: 68:88:c8:f6:72:0c:ae:b3:89:af:d6:6b:8a:fe:72:1a:4e:26: 4b:05:b5:36:3e:d4:f1:1f:38:9b:38:03:30:cc:61:a7:19:32: e8:f1:03:40:94:38:f9:d6:92:30:59:14:67:8a:39:0f:4a:e6: c9:1e:bc:4f:8a:17:c8:52:71:cb:39:d9:25:42:f4:85:00:b8: 83:df:51:72:81:4e:39:84:4e:b0:03:c5:29:18:70:84:e1:79: 58:cc:ef:cb:42:4f:70:7b:3e:3b:3d:53:d9:a8:bf:b0:2d:df: fe:1e:2f:e6:25:18:08:aa:b6:54:c6:3d:2f:3d:51:9d:15:eb: 01:c5:b3:c3:6d:73:89:35:90:23:f6:00:8d:e1:65:b2:88:99: 78:ed:01:6f:35:03:b6:56:35:f5:7f:99:24:5d:02:a8:fb:61: 94:ed:48:61:49:58:a9:e3:d2:a9:1f:db:a5:ea:22:14:3b:ef: 8a:d7:8f:ce:81:53:6b:eb:6c:8f:72:bf:2d:38:2b:57:4f:63: 05:33:98:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjUwNTE2MTczNDA3WhcNMjUwNTIzMTczNDA3WjAYMRYwFAYD VQQDEw02ODI3NzcxMC1iOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWBr8jnxQUEYT0kAVGkkomu6XTDh3O+pSJj2gro54D0LCiPnEfvippmVu3Xz 022PwJAYbYSG+5SLnaR6/ec82sMV05KolACDETtTGiB/i2J1Fnb+FahilvqnTp95 ge0ck0qRbXb4IATmgzDO9FCAYedJmchueYZcn7Pg8P1FzkWz8o+RXfVIRBaeLKel jPiJZEjNgIKMMZWyV+92t2q/PrevNuXhSSlFM6f8Ihi7yeRZEUMljVMuqp1dZA2I UlwBz76coo2VMkkvct89ee/s/OYR3sQ5mVemOO4XXk6/K0ZOVQCfZgPr78/4eO+U bDXAU1rWFrpwQpxkUr6eFsivnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJjSFSN BgXoNByYqFIqx0BJo8sVMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjA4RC84MTA3M0EzMDI4NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdY bDhJZm4yQWxJMFZrWXhzX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbKPa4fcnDGMKhnhq8t4cSVInvBTqLyWCKXtzrUeTWLCgQ0HTGXmVg TK782EZUW628w/Thlw1oiMj2cgyus4mv1muK/nIaTiZLBbU2PtTxHzibOAMwzGGn GTLo8QNAlDj51pIwWRRnijkPSubJHrxPihfIUnHLOdklQvSFALiD31FygU45hE6w A8UpGHCE4XlYzO/LQk9wez47PVPZqL+wLd/+Hi/mJRgIqrZUxj0vPVGdFesBxbPD bXOJNZAj9gCN4WWyiJl47QFvNQO2VjX1f5kkXQKo+2GU7UhhSVip49KpH9ul6iIU O++K14/OgVNr62yPcr8tOCtXT2MFM5hf -----END CERTIFICATE-----Generated at Sat May 17 06:03:46 2025 by rpki-client