$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: yV2BnhbxS4zvDsVLS+5sae6b4mVDDi3Y8OwfDgYPCD8= Subject key identifier: 65:AE:3A:C6:BD:12:13:4F:20:AD:A7:3D:97:4A:B6:61:2F:6A:63:20 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 0169 Signing time: Sun 11 May 2025 02:47:40 +0000 Manifest this update: Sun 11 May 2025 02:47:39 +0000 Manifest next update: Sun 18 May 2025 02:47:39 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: YswfTS7jNwizxokf+b3U1JqJ5F1A1XFBRvp8Ez2eaYs=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: May 11 02:47:39 2025 GMT Not After : May 18 02:47:39 2025 GMT Subject: CN=68200fcc-ec09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:49:6f:65:6c:51:a8:74:98:b0:3a:3a:b9: 98:a2:96:d4:75:70:b5:7b:5b:ee:93:b3:61:0d:9f: 6e:6f:de:c1:c1:64:38:84:a2:c7:5c:08:0b:b2:d3: 23:04:5a:d3:9c:ed:e1:1e:4b:4c:63:59:45:4c:a6: 6f:00:ca:8c:62:98:dd:af:05:2b:fe:0b:de:94:c9: 83:21:47:0d:76:09:d8:97:1f:4a:5f:f5:19:cd:c8: d8:f0:95:d8:e5:88:bb:0c:60:e6:dc:9d:50:8a:30: 25:78:17:87:a1:52:a3:06:3e:c5:35:7c:1f:e8:46: d6:68:b3:e2:48:09:1a:27:7f:9f:04:11:97:8a:83: 0e:8f:ca:a0:f9:0d:54:fc:e0:59:f0:c9:0c:6d:ee: 99:78:fd:0c:1c:04:cf:00:f9:ce:5f:b3:1e:6b:2b: 13:fd:30:e1:ec:f8:92:ad:b2:b7:4e:b0:c4:a7:8c: f5:65:0d:3b:e0:e3:a9:f0:33:89:4e:8f:b8:71:fb: 93:18:1b:6f:10:74:ec:be:a4:81:ec:53:1e:85:62: cb:fc:ea:35:21:95:56:bd:36:5a:7f:4b:4c:ce:be: 60:4e:24:3c:33:74:03:fd:2c:7d:1c:ac:83:47:7a: 34:77:50:2a:67:83:d5:bc:39:e7:3f:c1:6b:b6:1f: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AE:3A:C6:BD:12:13:4F:20:AD:A7:3D:97:4A:B6:61:2F:6A:63:20 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:71:47:86:df:14:fa:a7:d7:9e:35:12:8d:3f:84:ef:c8: c7:0f:1d:eb:66:ee:f9:ab:25:0c:4e:53:fb:ef:21:ce:45:33: af:cb:d5:aa:fb:20:15:ae:c5:f3:b3:7f:be:d7:04:2a:ca:64: b1:92:c2:d2:fd:ca:90:92:b9:a3:ed:98:e5:a2:3b:94:63:88: 2f:50:87:8c:11:74:ae:a6:06:43:04:c3:90:f1:5b:06:40:9a: 73:44:8c:66:52:4e:9f:d0:34:98:bc:45:43:9c:64:e6:8f:f5: 6a:39:36:e9:af:da:ad:02:cc:f9:2f:04:c0:9c:c3:3d:14:7f: eb:f0:89:b7:1a:a1:c0:95:c1:8a:01:1d:7d:71:45:a9:10:6a: e5:6d:b3:7f:81:27:11:66:cf:43:83:2e:00:94:2b:c1:e3:17: 67:8e:da:b1:b3:0f:4b:ef:f6:81:a7:7f:01:a0:1d:d5:1a:2b: 20:a1:2e:82:f9:72:b8:af:dc:0f:c8:36:82:d9:1f:a5:c8:ef: a3:73:74:72:01:a7:0c:87:a4:26:cc:67:b7:d0:ce:71:d0:28: a4:de:cc:5a:ba:ce:bd:ed:5b:7b:c1:ab:30:d7:bc:e5:28:95: ca:23:ae:95:d5:cf:33:ea:0e:79:48:fe:2e:af:21:02:7d:4d: 52:88:92:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUwNTExMDI0NzM5WhcNMjUwNTE4MDI0NzM5WjAYMRYwFAYD VQQDEw02ODIwMGZjYy1lYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAtJb2VsUah0mLA6OrmYopbUdXC1e1vuk7NhDZ9ub97BwWQ4hKLHXAgLstMj BFrTnO3hHktMY1lFTKZvAMqMYpjdrwUr/gvelMmDIUcNdgnYlx9KX/UZzcjY8JXY 5Yi7DGDm3J1QijAleBeHoVKjBj7FNXwf6EbWaLPiSAkaJ3+fBBGXioMOj8qg+Q1U /OBZ8MkMbe6ZeP0MHATPAPnOX7MeaysT/TDh7PiSrbK3TrDEp4z1ZQ074OOp8DOJ To+4cfuTGBtvEHTsvqSB7FMehWLL/Oo1IZVWvTZaf0tMzr5gTiQ8M3QD/Sx9HKyD R3o0d1AqZ4PVvDnnP8Frth+eYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWuOsa9 EhNPIK2nPZdKtmEvamMgMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLHFHht8U+qfXnjUSjT+E78jHDx3rZu75qyUMTlP77yHORTOvy9Wq +yAVrsXzs3++1wQqymSxksLS/cqQkrmj7ZjlojuUY4gvUIeMEXSupgZDBMOQ8VsG QJpzRIxmUk6f0DSYvEVDnGTmj/VqOTbpr9qtAsz5LwTAnMM9FH/r8Im3GqHAlcGK AR19cUWpEGrlbbN/gScRZs9Dgy4AlCvB4xdnjtqxsw9L7/aBp38BoB3VGisgoS6C +XK4r9wPyDaC2R+lyO+jc3RyAacMh6QmzGe30M5x0Cik3sxaus697Vt7wasw17zl KJXKI66V1c8z6g55SP4uryECfU1SiJKg -----END CERTIFICATE-----Generated at Mon May 12 07:22:30 2025 by rpki-client