$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: 9k8WiKPMe/7M6l3vwoVbzhDIX6kPBQ9kGhjvw93weuo= Subject key identifier: BF:FA:27:98:10:78:F3:0F:E0:03:FA:56:99:98:8C:7B:3A:00:0E:D5 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 06D6 Signing time: Wed 14 May 2025 22:06:05 +0000 Manifest this update: Wed 14 May 2025 22:06:04 +0000 Manifest next update: Wed 21 May 2025 22:06:04 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: u4Zi6GlTcvT8Dka5nTP7fJHj5q7N+HyGJ0kbNB2pOxk=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: May 14 22:06:04 2025 GMT Not After : May 21 22:06:04 2025 GMT Subject: CN=682513cd-d217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:8c:38:b2:5f:c9:5a:cb:fa:3a:87:83:f4: 06:db:81:d8:b5:18:2b:36:3b:fa:19:24:b8:ef:13: 40:53:f4:cc:fd:6e:4f:90:c9:75:b1:8a:de:c6:95: ae:77:77:f8:ce:20:17:76:00:1f:8b:b4:6c:0b:ce: 3a:6b:40:cc:64:0d:7d:70:e8:dd:76:fe:5b:ae:f4: 6e:11:25:f5:8e:36:04:af:1b:44:63:20:b7:4d:44: 56:21:b4:b7:d0:98:be:bf:f5:67:fa:6d:20:e3:c4: 63:3c:03:ec:a3:ce:e7:ec:5b:3a:52:9a:d4:2e:e7: 9f:a5:45:7a:0b:ff:86:e1:8c:29:cb:93:d2:3e:9c: 18:93:cf:97:7a:82:c1:cc:92:3a:a0:56:48:fb:6d: 95:e0:8c:86:81:99:8f:01:5a:5a:44:2e:29:14:a7: 37:cf:6b:9e:f0:33:56:3f:2b:1e:6d:94:f7:7d:ca: 83:4c:eb:72:1b:85:31:9a:b4:65:9a:21:d9:1b:98: 86:e9:66:3d:d5:e4:6a:f7:6f:bd:4b:5e:4a:fb:b3: 3f:be:a1:dd:2f:e1:1e:e6:c2:44:73:d4:c7:5a:0f: 72:d3:c3:cc:22:84:c5:76:21:ea:0e:b0:a8:6e:17: b5:fd:a2:89:ef:56:f4:d1:b6:6f:2c:7f:10:8d:f5: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:27:98:10:78:F3:0F:E0:03:FA:56:99:98:8C:7B:3A:00:0E:D5 X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dc:54:89:2f:82:d0:fc:09:35:81:65:6d:cd:ec:6a:84:85: 94:c5:c2:a9:9c:48:ea:16:f0:11:1b:db:be:10:9d:13:bd:2b: 93:be:f2:dd:38:43:02:a5:a8:ac:ce:7c:c0:1d:aa:63:2f:bd: b5:55:88:40:62:8d:cd:64:88:36:79:4c:66:c3:51:81:26:17: 4d:27:32:71:ec:10:87:28:fd:bb:b2:05:e4:3a:52:47:22:54: bd:38:bd:eb:f5:9f:c8:bc:fe:62:40:cb:ae:cf:1c:9c:de:29: 03:37:5d:47:8f:0d:01:7a:4a:bb:5b:27:21:cd:0c:b3:57:f1: f7:ee:ea:fe:0d:7c:16:8b:cf:13:9f:7b:72:ba:f3:b1:5b:a0: 5d:0d:87:8f:55:ef:1f:7a:bb:13:8e:2f:fe:51:69:d9:d2:d2: 5a:f2:54:00:e0:9c:44:fd:a0:81:d7:75:6d:2d:28:72:4a:2b: a8:2e:a3:06:88:6d:59:8d:a8:02:a8:4c:b0:47:47:6e:a9:af: f2:d3:77:d0:3e:ce:44:bc:bd:20:8d:b4:1c:49:a6:b9:2e:72: 0e:75:0c:4b:2d:59:f6:0f:39:02:0c:20:d4:3d:aa:22:e3:8b: ef:f4:13:2c:e9:d5:10:8c:1f:84:c8:1f:61:6e:50:cd:db:eb: 1f:1d:15:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUwNTE0MjIwNjA0WhcNMjUwNTIxMjIwNjA0WjAYMRYwFAYD VQQDEw02ODI1MTNjZC1kMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyCMOLJfyVrL+jqHg/QG24HYtRgrNjv6GSS47xNAU/TM/W5PkMl1sYrexpWu d3f4ziAXdgAfi7RsC846a0DMZA19cOjddv5brvRuESX1jjYErxtEYyC3TURWIbS3 0Ji+v/Vn+m0g48RjPAPso87n7Fs6UprULuefpUV6C/+G4Ywpy5PSPpwYk8+XeoLB zJI6oFZI+22V4IyGgZmPAVpaRC4pFKc3z2ue8DNWPysebZT3fcqDTOtyG4UxmrRl miHZG5iG6WY91eRq92+9S15K+7M/vqHdL+Ee5sJEc9THWg9y08PMIoTFdiHqDrCo bhe1/aKJ71b00bZvLH8QjfW7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/6J5gQ ePMP4AP6VpmYjHs6AA7VMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3FSJL4LQ/Ak1gWVtzexqhIWUxcKpnEjqFvARG9u+EJ0TvSuTvvLd OEMCpaisznzAHapjL721VYhAYo3NZIg2eUxmw1GBJhdNJzJx7BCHKP27sgXkOlJH IlS9OL3r9Z/IvP5iQMuuzxyc3ikDN11Hjw0Bekq7WychzQyzV/H37ur+DXwWi88T n3tyuvOxW6BdDYePVe8fersTji/+UWnZ0tJa8lQA4JxE/aCB13VtLShySiuoLqMG iG1ZjagCqEywR0duqa/y03fQPs5EvL0gjbQcSaa5LnIOdQxLLVn2DzkCDCDUPaoi 44vv9BMs6dUQjB+EyB9hblDN2+sfHRUi -----END CERTIFICATE-----Generated at Fri May 16 22:33:31 2025 by rpki-client