$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: ol8dWb6rzCMLrpVZoqL+Zqzxc3mlW/X4CfiHjkjHbc8= Subject key identifier: 83:0C:F5:B2:1B:83:93:21:25:35:41:56:A7:F3:1A:81:6A:62:F0:9D Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: C9 Signing time: Thu 15 May 2025 05:07:51 +0000 Manifest this update: Thu 15 May 2025 05:07:50 +0000 Manifest next update: Thu 22 May 2025 05:07:50 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: qd5b4mdK7Wn2hl2iNW6JH8UQEIdburstV1rXI4UccuA=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: 5eMEB5vOjKQ5wQgd27+ZUWTTg4x5gmrbf6+2h3hRHcw=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: qJIeqrgvCSqMs8+P3KeM1F5hY5WT3B+IFIjWWFc0WLk=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: wEtGlzkarGn03dBjE4SQLfRy6nk8r9fN3HDFHlt9mQY=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: OxXlFTh6o0hdm5zRnG9YrbxWsj3c5r5ToTCPNyKoHps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: May 15 05:07:50 2025 GMT Not After : May 22 05:07:50 2025 GMT Subject: CN=682576a7-d132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:01:7b:9c:dc:dc:f8:1c:4a:e7:37:02:02: 14:ae:ab:ae:28:61:81:c4:b4:2b:99:6f:7d:72:5e: 10:c0:72:15:2c:13:81:fb:41:5d:43:cf:db:1a:28: e3:a2:ca:50:54:ef:e7:48:d7:a1:cd:2a:1a:32:3f: 1b:46:fd:bd:25:11:20:5f:e9:0f:e1:17:e3:a6:51: 73:21:7b:cc:f7:e7:31:94:88:3e:30:40:ed:97:41: d3:a1:20:0a:f9:17:95:99:fe:b3:55:34:65:21:94: 3a:a7:d6:eb:36:f9:46:5c:c0:bd:c7:4f:72:4d:8c: 6f:10:6b:03:eb:e7:f4:a8:5f:29:94:a1:96:b2:97: 30:44:f8:61:87:e2:41:22:69:f0:e7:55:39:40:76: 58:37:8f:da:15:01:6c:5b:9f:65:b7:dd:34:0f:56: a1:f9:66:b9:85:3b:b2:68:bc:77:61:f3:c7:39:dd: 89:73:17:36:0b:13:22:56:88:3c:8d:c3:41:c4:5b: f0:09:04:39:e2:a3:88:5a:5c:95:78:51:97:47:73: e3:69:0e:ae:e5:db:02:2a:ad:2d:e8:96:2c:0d:ab: 43:40:cf:03:a6:a2:20:c2:d0:9c:75:b6:cd:9c:04: ff:69:2a:e7:ad:aa:0c:cd:0d:78:88:a8:24:c5:19: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0C:F5:B2:1B:83:93:21:25:35:41:56:A7:F3:1A:81:6A:62:F0:9D X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ae:3f:d3:55:0e:82:e2:a6:34:a4:97:fc:87:2c:12:69:37: a2:ce:81:f8:99:0b:cd:d2:f7:e0:40:c7:5d:11:ba:75:2a:a0: 04:10:40:d2:93:71:6e:e7:97:13:b5:bc:64:d8:64:d3:b4:18: 3c:a9:27:4b:d3:db:d8:be:1d:cc:23:74:4c:7a:2d:af:61:b3: 0e:e9:6f:4d:42:7b:5d:29:5b:1c:e9:28:2e:ca:d9:af:8b:bf: 15:4d:71:7f:a6:be:d5:e4:04:95:28:cc:63:7b:0f:1e:16:86: dd:01:d7:88:ff:91:b0:68:7d:28:5d:ef:df:b0:13:7e:d8:0f: 80:75:2f:ad:27:04:ff:00:17:6d:5a:3a:f6:ac:ba:17:4f:00: 3a:04:75:55:09:18:bc:6f:ed:63:14:fd:86:28:54:e3:99:ff: 9a:4a:c4:19:8b:65:66:db:d5:99:dd:10:1a:f7:78:78:e9:70: 34:41:83:f8:e2:2a:7e:0c:b1:47:3d:f8:6f:cd:86:39:67:90: 1b:95:51:6c:79:89:c0:bc:96:90:5e:ad:04:e5:b8:b1:fe:1c: 42:74:3c:32:ff:fe:70:3c:fc:19:98:51:66:cb:30:15:c9:13: bf:06:93:00:26:5b:49:93:e4:74:53:34:00:14:ac:b9:9c:d6: 55:9f:32:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNTE1MDUwNzUwWhcNMjUwNTIyMDUwNzUwWjAYMRYwFAYD VQQDEw02ODI1NzZhNy1kMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpcBe5zc3PgcSuc3AgIUrquuKGGBxLQrmW99cl4QwHIVLBOB+0FdQ8/bGijj ospQVO/nSNehzSoaMj8bRv29JREgX+kP4RfjplFzIXvM9+cxlIg+MEDtl0HToSAK +ReVmf6zVTRlIZQ6p9brNvlGXMC9x09yTYxvEGsD6+f0qF8plKGWspcwRPhhh+JB Imnw51U5QHZYN4/aFQFsW59lt900D1ah+Wa5hTuyaLx3YfPHOd2Jcxc2CxMiVog8 jcNBxFvwCQQ54qOIWlyVeFGXR3PjaQ6u5dsCKq0t6JYsDatDQM8DpqIgwtCcdbbN nAT/aSrnraoMzQ14iKgkxRlifwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMM9bIb g5MhJTVBVqfzGoFqYvCdMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUrj/TVQ6C4qY0pJf8hywSaTeizoH4mQvN0vfgQMddEbp1KqAEEEDS k3Fu55cTtbxk2GTTtBg8qSdL09vYvh3MI3RMei2vYbMO6W9NQntdKVsc6Sguytmv i78VTXF/pr7V5ASVKMxjew8eFobdAdeI/5GwaH0oXe/fsBN+2A+AdS+tJwT/ABdt Wjr2rLoXTwA6BHVVCRi8b+1jFP2GKFTjmf+aSsQZi2Vm29WZ3RAa93h46XA0QYP4 4ip+DLFHPfhvzYY5Z5AblVFseYnAvJaQXq0E5bix/hxCdDwy//5wPPwZmFFmyzAV yRO/BpMAJltJk+R0UzQAFKy5nNZVnzIV -----END CERTIFICATE-----Generated at Thu May 15 18:03:37 2025 by rpki-client