$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: 9cQII2cbwFPFCPehRqTV4Az+T4iY92WzoSAf80Icpa8= Subject key identifier: B5:8F:0C:B6:D5:F3:65:A5:3D:9A:65:10:B2:08:FD:AF:33:0C:2A:37 Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0235 Signing time: Sun 11 May 2025 01:26:32 +0000 Manifest this update: Sun 11 May 2025 01:26:32 +0000 Manifest next update: Sun 18 May 2025 01:26:32 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: YOlmAEJz9Q69xk0ZPVqTyUM4aSYNY5dMDleWsUYNVAw=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: May 11 01:26:32 2025 GMT Not After : May 18 01:26:32 2025 GMT Subject: CN=681ffcc8-850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:71:74:9a:03:2d:3d:3e:09:ea:2f:29:2e: e0:37:70:fa:7a:c3:64:b5:8f:bc:da:3b:76:f6:ab: 7d:15:7f:0f:bf:e1:cb:50:23:b9:0b:bb:9a:01:c2: f8:e3:dc:03:7d:4e:68:ed:f4:64:33:c6:49:f4:ad: 50:60:88:f5:b5:e8:a5:c5:8d:00:55:c9:fb:50:3f: 6e:f6:b5:a8:81:c2:a4:5d:4b:53:99:6b:a3:59:57: bf:9b:6a:5f:fc:f7:84:81:96:33:81:d3:2e:68:98: 07:72:5c:c6:30:d4:8b:13:14:7c:2e:9f:de:81:3c: 8e:2e:cd:b9:74:76:21:d4:03:ae:fe:a6:70:fb:4a: 44:64:36:30:ad:ba:2b:d1:58:95:a6:fe:9a:02:43: 71:32:ce:db:f7:bb:8a:a2:b6:12:56:46:0b:9f:80: 3c:cb:17:84:6c:bf:ea:4f:05:22:f9:fe:f9:f9:b1: 13:98:43:63:a4:5f:6c:48:08:03:fc:4b:ce:9f:d9: 32:a4:52:92:a2:c0:ff:ac:38:5e:3f:37:1c:4b:da: 93:0b:14:57:27:22:7a:4e:41:86:b2:0e:9d:02:e6: a3:24:1b:ba:5f:27:48:84:60:2c:2c:e4:27:14:e8: 0f:71:d2:b3:88:3e:0d:97:74:f7:81:c0:5f:66:d5: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8F:0C:B6:D5:F3:65:A5:3D:9A:65:10:B2:08:FD:AF:33:0C:2A:37 X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2e:68:fb:a6:d0:03:6c:15:3f:8c:fb:32:7a:97:64:84:1d: de:2e:cb:8e:a5:61:2c:22:f1:87:9a:fe:d0:28:24:f5:67:63: 3a:52:1c:bf:f2:da:1f:9a:d8:fb:16:4f:82:d5:d6:b4:fa:2b: ff:e8:54:65:5c:a6:40:d8:10:2f:06:b0:35:bf:e2:b4:9a:42: 0e:6f:43:dd:b7:af:45:70:52:e1:f7:86:55:20:9b:85:b6:f0: bb:14:ea:11:b1:21:22:6b:14:70:98:42:87:0a:cc:2a:ef:11: 76:2a:67:86:e6:c9:e8:e8:b7:90:b8:a6:dd:9b:43:df:0c:45: 29:45:fc:cf:e1:d5:f3:e3:d6:83:3a:92:5b:7b:86:f7:d4:14: d8:cd:96:ed:1a:7c:b1:e3:c2:57:c8:7b:df:88:75:1b:1b:e5: 7d:f1:2c:ca:fc:22:f5:13:09:ad:29:1a:c3:93:25:be:ff:ec: 1c:78:4a:fa:68:ec:0e:b9:ee:0a:df:0a:20:a7:97:04:5c:82: 88:78:fd:cf:20:d1:d3:1e:61:9c:55:6d:7e:16:b1:ca:e6:b7: 5c:21:72:24:88:da:18:fd:da:39:30:89:d9:af:39:00:07:04: b4:a6:ce:92:f7:79:e2:df:2d:9c:5a:75:68:96:ec:c1:e8:dc: 0e:a7:23:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwNTExMDEyNjMyWhcNMjUwNTE4MDEyNjMyWjAYMRYwFAYD VQQDEw02ODFmZmNjOC04NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LFxdJoDLT0+CeovKS7gN3D6esNktY+82jt29qt9FX8Pv+HLUCO5C7uaAcL4 49wDfU5o7fRkM8ZJ9K1QYIj1teilxY0AVcn7UD9u9rWogcKkXUtTmWujWVe/m2pf /PeEgZYzgdMuaJgHclzGMNSLExR8Lp/egTyOLs25dHYh1AOu/qZw+0pEZDYwrbor 0ViVpv6aAkNxMs7b97uKorYSVkYLn4A8yxeEbL/qTwUi+f75+bETmENjpF9sSAgD /EvOn9kypFKSosD/rDhePzccS9qTCxRXJyJ6TkGGsg6dAuajJBu6XydIhGAsLOQn FOgPcdKziD4Nl3T3gcBfZtViXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWPDLbV 82WlPZplELII/a8zDCo3MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLmj7ptADbBU/jPsyepdkhB3eLsuOpWEsIvGHmv7QKCT1Z2M6Uhy/ 8tofmtj7Fk+C1da0+iv/6FRlXKZA2BAvBrA1v+K0mkIOb0Pdt69FcFLh94ZVIJuF tvC7FOoRsSEiaxRwmEKHCswq7xF2KmeG5sno6LeQuKbdm0PfDEUpRfzP4dXz49aD OpJbe4b31BTYzZbtGnyx48JXyHvfiHUbG+V98SzK/CL1EwmtKRrDkyW+/+wceEr6 aOwOue4K3wogp5cEXIKIeP3PINHTHmGcVW1+FrHK5rdcIXIkiNoY/do5MInZrzkA BwS0ps6S93ni3y2cWnVoluzB6NwOpyPd -----END CERTIFICATE-----Generated at Sun May 11 10:33:09 2025 by rpki-client