$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: m293uUBsys39IWOgPr/8WKVG0TvFR9qVLkTSfldyHos= Subject key identifier: B5:65:CB:26:81:06:C1:58:D6:39:48:5B:B3:A0:32:EF:5D:B5:DA:6E Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 07B8 Signing time: Sat 10 May 2025 20:52:02 +0000 Manifest this update: Sat 10 May 2025 20:52:01 +0000 Manifest next update: Sat 17 May 2025 20:52:01 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: kRB5+oCpdB8nOFRg/NP8J60C1v2kjcR30Zb9Fslj7l4=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 10 20:52:01 2025 GMT Not After : May 17 20:52:01 2025 GMT Subject: CN=681fbc71-0caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:69:f5:f3:4c:fd:4b:b5:90:9b:3e:62:ed: ef:23:34:c8:aa:01:2f:ea:3f:55:df:59:29:eb:41: 00:59:3d:61:5b:34:cb:4f:af:12:99:f8:41:cc:10: 7c:b0:be:0e:5d:c4:6c:c0:af:ca:f3:d9:ff:b2:fd: d0:27:cd:0e:f0:b5:d3:33:44:4b:a9:d1:33:3f:98: 79:54:74:94:f5:e9:d3:53:79:09:ad:d3:60:9c:b8: 56:57:17:12:d9:de:45:e7:54:c6:c4:1d:17:e6:c6: 3b:3f:78:cb:4a:e7:87:3d:ca:b3:36:81:b5:e0:2b: 78:7d:52:59:e4:eb:95:95:6e:db:b1:d1:e4:cd:d5: 12:2b:8a:4a:7a:ff:9a:74:86:c0:53:95:ef:8f:89: dc:97:57:2a:ba:77:60:30:58:5b:2a:af:ad:0f:a5: 70:13:ce:47:ef:b6:1c:8c:63:51:67:f6:75:95:f2: d3:78:85:14:ad:53:b1:5d:a5:5b:b5:b9:2b:64:ed: b6:2e:f7:ef:a6:ae:91:47:53:1b:09:a5:f9:96:09: 6c:ff:80:1b:30:12:68:47:14:64:23:00:d4:1c:a8: 64:fe:16:bc:b2:71:10:d8:e2:56:9b:ac:f0:3b:ae: be:7b:e6:2a:9d:48:a0:01:c6:8c:52:56:c2:5f:cb: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:65:CB:26:81:06:C1:58:D6:39:48:5B:B3:A0:32:EF:5D:B5:DA:6E X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:62:d1:24:fc:37:29:72:02:4b:b7:60:bf:9c:77:79:15:5f: 0b:2b:a0:44:56:a4:de:b7:9e:97:4c:4e:4e:d8:d0:3c:d9:be: a9:54:75:ce:71:61:50:d3:35:d3:c5:9e:72:7f:bf:e8:c7:ba: 4b:e1:56:4f:4d:13:c1:83:1c:7a:f8:6d:4b:5f:21:ec:84:34: 1e:17:9f:2a:09:f0:fc:70:b5:67:b5:98:4c:24:fe:5d:ee:8f: 58:c8:a7:81:24:76:09:de:ac:2f:1e:b0:f7:1d:31:e6:e7:bb: bb:08:b6:0b:cc:74:42:d9:65:06:45:09:d5:ea:a5:9b:ac:35: 6a:af:c6:c0:34:d7:83:9e:7a:a3:ba:c1:ab:8d:36:98:7a:6d: fc:f0:2b:07:19:fd:b9:b1:f5:96:cb:9e:89:cc:c7:11:fa:6a: c7:a1:77:28:e8:68:38:ac:c5:b6:30:10:0e:a1:ea:43:b5:d3: 7e:4e:46:b4:1d:7b:a6:bc:b7:80:a2:a5:b5:7a:c4:1f:14:50: 1c:6e:f9:1d:a4:7b:4d:37:e7:4c:8b:85:7d:fb:15:55:28:3c: 3d:a0:2a:af:cf:40:2e:11:30:83:71:b5:45:9e:a6:e0:c3:db: f7:62:6b:74:8a:64:10:08:72:c8:46:df:85:67:c2:39:40:40: 44:ec:f8:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwNTEwMjA1MjAxWhcNMjUwNTE3MjA1MjAxWjAYMRYwFAYD VQQDEw02ODFmYmM3MS0wY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMlp9fNM/Uu1kJs+Yu3vIzTIqgEv6j9V31kp60EAWT1hWzTLT68SmfhBzBB8 sL4OXcRswK/K89n/sv3QJ80O8LXTM0RLqdEzP5h5VHSU9enTU3kJrdNgnLhWVxcS 2d5F51TGxB0X5sY7P3jLSueHPcqzNoG14Ct4fVJZ5OuVlW7bsdHkzdUSK4pKev+a dIbAU5Xvj4ncl1cqundgMFhbKq+tD6VwE85H77YcjGNRZ/Z1lfLTeIUUrVOxXaVb tbkrZO22Lvfvpq6RR1MbCaX5lgls/4AbMBJoRxRkIwDUHKhk/ha8snEQ2OJWm6zw O66+e+YqnUigAcaMUlbCX8uZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVlyyaB BsFY1jlIW7OgMu9dtdpuMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJYtEk/DcpcgJLt2C/nHd5FV8LK6BEVqTet56XTE5O2NA82b6pVHXO cWFQ0zXTxZ5yf7/ox7pL4VZPTRPBgxx6+G1LXyHshDQeF58qCfD8cLVntZhMJP5d 7o9YyKeBJHYJ3qwvHrD3HTHm57u7CLYLzHRC2WUGRQnV6qWbrDVqr8bANNeDnnqj usGrjTaYem388CsHGf25sfWWy56JzMcR+mrHoXco6Gg4rMW2MBAOoepDtdN+Tka0 HXumvLeAoqW1esQfFFAcbvkdpHtNN+dMi4V9+xVVKDw9oCqvz0AuETCDcbVFnqbg w9v3Ymt0imQQCHLIRt+FZ8I5QEBE7Pg2 -----END CERTIFICATE-----Generated at Mon May 12 03:19:41 2025 by rpki-client