$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json) Hash identifier: qJJNRm37kXEgiCgTocfU4a0VMrYbBCycc6Y5sOHS69k= Subject key identifier: 97:4D:24:25:88:5B:F0:29:EC:38:65:D3:37:2A:F3:84:18:7F:CF:57 Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft Manifest number: 0666 Signing time: Sat 10 May 2025 22:02:13 +0000 Manifest this update: Sat 10 May 2025 22:02:13 +0000 Manifest next update: Sat 17 May 2025 22:02:13 +0000 Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: vkfZrIzmF5Y1qGY+wywQyJUvFLKNorawb53a7U6kEuo=) 2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=) 3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=) 4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: May 10 22:02:13 2025 GMT Not After : May 17 22:02:13 2025 GMT Subject: CN=681fcce5-0d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:25:06:d4:79:68:9b:ab:b3:54:60:b7:b8: dd:ae:e4:02:d7:92:62:49:4d:9b:8f:85:8c:3e:0e: 6c:ca:a5:9d:5c:87:80:83:1c:d3:40:e5:22:95:99: e9:7c:2c:37:dd:6a:e5:11:68:29:0c:eb:c7:99:3d: ed:6f:06:e0:2e:32:1c:54:d7:ef:61:6a:4f:b3:d0: 84:76:b2:92:26:49:01:5c:b6:12:3c:98:f7:c7:b4: 7d:c5:69:87:04:9d:d1:36:36:71:a1:7f:dd:11:c2: 33:15:08:7b:9d:1f:1d:84:59:0d:32:1a:17:a4:0e: 0f:50:52:85:d4:a5:9e:6a:f3:b2:e3:61:7c:26:ea: 06:05:0e:73:1e:25:49:94:26:52:25:99:9c:b0:4b: 9d:77:fb:08:34:bb:5b:8a:0e:1a:f4:50:b9:84:c2: 8b:6c:9c:35:a4:70:e3:3a:62:21:09:d8:ac:2b:c5: 26:82:65:d1:83:85:d6:41:e5:4f:f5:c5:c2:05:f2: 11:98:dc:4d:fd:b9:01:1d:38:75:94:f0:ab:f4:c5: 2f:c5:6c:2e:93:ab:88:9e:66:b4:cb:1e:7e:b3:55: 9e:f4:a9:7f:75:35:26:29:22:e6:ff:05:14:9c:b4: 62:d2:04:54:19:ee:a4:13:5e:9d:d0:a2:76:fa:1f: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4D:24:25:88:5B:F0:29:EC:38:65:D3:37:2A:F3:84:18:7F:CF:57 X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6f:e3:ea:ca:d0:a9:ee:94:bd:5b:da:ec:28:bd:76:f4:63: 91:fc:28:44:bb:47:ee:53:ae:47:71:ef:77:5c:8e:40:f1:0e: 17:20:d3:8d:83:87:d6:2d:0e:59:0c:e0:5e:31:cd:38:55:ec: e1:d3:44:db:b1:88:be:d1:79:e0:bd:5c:47:a5:71:f0:94:37: a5:d5:8b:b6:1b:9a:92:3b:fe:43:67:59:e9:09:64:7f:fe:d7: cb:14:db:18:48:42:b5:ef:13:24:6a:d5:aa:3b:ac:de:55:d6: e3:0b:49:41:0b:14:1a:e2:f2:1d:53:e5:44:a8:10:7b:35:24: 7e:f5:6d:0f:1e:c7:11:91:21:7a:f4:e5:96:1a:98:ac:82:9f: 8f:65:f4:9c:ea:94:6c:15:89:26:6f:8e:7c:e6:73:e2:a8:6d: 7d:4e:75:2a:ca:9b:3f:bb:06:e7:64:12:59:c1:82:02:de:30: 2a:d0:b5:42:ef:69:6f:7a:fd:87:2b:04:9b:8d:81:d7:e1:88: 01:1e:8f:4e:72:33:32:3c:11:17:04:73:4f:dc:a4:e7:d7:69: 4e:a4:7d:86:e7:c5:ca:50:e4:6b:24:32:e1:98:43:b7:8d:cd: 07:56:22:60:70:1d:84:cc:29:ba:74:35:77:a2:bf:83:31:39: 6e:22:27:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjUwNTEwMjIwMjEzWhcNMjUwNTE3MjIwMjEzWjAYMRYwFAYD VQQDEw02ODFmY2NlNS0wZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmMlBtR5aJurs1Rgt7jdruQC15JiSU2bj4WMPg5syqWdXIeAgxzTQOUilZnp fCw33WrlEWgpDOvHmT3tbwbgLjIcVNfvYWpPs9CEdrKSJkkBXLYSPJj3x7R9xWmH BJ3RNjZxoX/dEcIzFQh7nR8dhFkNMhoXpA4PUFKF1KWeavOy42F8JuoGBQ5zHiVJ lCZSJZmcsEudd/sINLtbig4a9FC5hMKLbJw1pHDjOmIhCdisK8UmgmXRg4XWQeVP 9cXCBfIRmNxN/bkBHTh1lPCr9MUvxWwuk6uInma0yx5+s1We9Kl/dTUmKSLm/wUU nLRi0gRUGe6kE16d0KJ2+h8HNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdNJCWI W/Ap7Dhl0zcq84QYf89XMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5 UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANb+PqytCp7pS9W9rsKL129GOR/ChEu0fuU65Hce93XI5A8Q4XINON g4fWLQ5ZDOBeMc04Vezh00TbsYi+0XngvVxHpXHwlDel1Yu2G5qSO/5DZ1npCWR/ /tfLFNsYSEK17xMkatWqO6zeVdbjC0lBCxQa4vIdU+VEqBB7NSR+9W0PHscRkSF6 9OWWGpisgp+PZfSc6pRsFYkmb4585nPiqG19TnUqyps/uwbnZBJZwYIC3jAq0LVC 72lvev2HKwSbjYHX4YgBHo9OcjMyPBEXBHNP3KTn12lOpH2G58XKUORrJDLhmEO3 jc0HViJgcB2EzCm6dDV3or+DMTluIidA -----END CERTIFICATE-----Generated at Mon May 12 20:25:14 2025 by rpki-client