$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: Gsh/omnehxaUrF+dtv2vZPbAFPZibo2TdlC80To7Ens= Subject key identifier: ED:3E:E1:10:00:28:31:5C:15:DC:DF:19:58:84:12:D5:A5:43:A9:BB Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 030A Signing time: Fri 09 May 2025 01:00:34 +0000 Manifest this update: Fri 09 May 2025 01:00:34 +0000 Manifest next update: Fri 16 May 2025 01:00:34 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: fiq9/XimJXKINZav54IUn9vlgiZ2OS4P9aokKn1MT8s=) 2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=) 3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: May 9 01:00:34 2025 GMT Not After : May 16 01:00:34 2025 GMT Subject: CN=681d53b2-4e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:b3:0e:07:e5:b8:a7:0e:21:9a:e6:92:0e: 3b:6b:bd:eb:25:a4:e1:bb:4d:e2:b5:d7:ac:8f:ae: b4:b0:20:6e:6f:b1:80:97:75:c5:7a:cd:47:99:f4: e0:18:ee:3e:24:a1:d8:14:d0:3b:e0:61:c4:1b:ea: a4:58:e3:43:e7:cb:8c:ad:a2:1f:12:2e:78:31:d2: e1:59:2f:09:96:0f:3c:4a:f7:94:4e:9c:6c:c5:fd: 27:95:93:04:d3:6f:fe:5d:93:02:1d:43:89:e1:5f: a8:70:fb:1a:da:41:18:1b:62:e2:63:6e:5f:ca:6c: a8:bd:c3:17:01:e7:c0:13:05:a0:80:f9:b7:70:f0: 80:46:57:b9:ef:62:fd:19:b7:b3:f7:7f:38:84:40: 30:eb:2b:66:cc:38:cf:24:80:5a:9a:87:8e:ad:67: 5a:11:ac:8a:08:ab:2c:ca:70:1e:96:06:94:8a:1e: 6f:bf:71:8e:c9:bc:98:93:89:2b:c0:b0:c2:01:f0: 12:64:96:4f:6c:45:1f:b5:a7:00:d6:e0:f4:a4:fc: b9:f1:85:d0:eb:f3:da:ab:a5:10:b6:78:3e:38:85: 80:02:c8:7a:ea:2a:f3:4a:75:a2:4f:13:01:42:df: 8e:69:3f:84:b4:d6:c5:af:ff:2e:23:d3:40:93:d8: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:E1:10:00:28:31:5C:15:DC:DF:19:58:84:12:D5:A5:43:A9:BB X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:d3:d8:14:52:04:6a:b0:02:77:b4:45:a2:88:9c:26:89: 7f:81:45:be:7b:11:f0:d8:83:2e:91:32:6c:11:16:c1:22:ea: cb:2d:6d:ac:a5:41:8d:d7:7f:cc:75:76:82:09:56:f6:0e:02: 9d:db:a3:2c:87:15:05:e0:ff:47:fe:6b:20:11:0d:9f:17:91: e8:77:1f:0b:31:f2:11:aa:99:ec:4a:2a:52:f9:9b:bc:22:f0: 0f:e0:9b:57:74:79:20:70:2c:2e:dc:13:e4:52:81:c9:15:9e: 9a:d5:bf:5f:36:b5:26:9f:b6:5a:da:2f:cc:9f:9d:08:b2:0d: 1a:ef:69:08:a5:2f:ab:27:dc:e5:1a:01:ec:3f:4c:a1:bb:1d: 1a:bb:9a:dd:d1:01:9d:9f:b0:ca:ff:5c:ac:ac:ed:0b:19:0e: 33:24:40:6d:2f:e7:3f:4e:65:c0:d4:b1:42:18:35:f5:e5:b3: 31:29:67:4d:ad:fa:5e:e9:7c:af:7e:e1:b4:66:79:41:46:f9: 91:66:99:89:29:29:ab:b2:ab:08:8f:1d:e7:88:dc:bd:6d:e5: dd:84:61:11:b7:98:1c:9c:a6:da:20:c7:09:fe:c1:c7:93:71: a2:c6:78:c8:cc:25:a1:ab:0e:e0:18:26:11:35:3c:33:96:08: 5a:b1:0f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjUwNTA5MDEwMDM0WhcNMjUwNTE2MDEwMDM0WjAYMRYwFAYD VQQDEw02ODFkNTNiMi00ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqKzDgfluKcOIZrmkg47a73rJaThu03itdesj660sCBub7GAl3XFes1HmfTg GO4+JKHYFNA74GHEG+qkWOND58uMraIfEi54MdLhWS8Jlg88SveUTpxsxf0nlZME 02/+XZMCHUOJ4V+ocPsa2kEYG2LiY25fymyovcMXAefAEwWggPm3cPCARle572L9 Gbez9384hEAw6ytmzDjPJIBamoeOrWdaEayKCKssynAelgaUih5vv3GOybyYk4kr wLDCAfASZJZPbEUftacA1uD0pPy58YXQ6/Paq6UQtng+OIWAAsh66irzSnWiTxMB Qt+OaT+EtNbFr/8uI9NAk9iniQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0+4RAA KDFcFdzfGViEEtWlQ6m7MB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJdPYFFIEarACd7RFooicJol/gUW+exHw2IMukTJsERbBIurLLW2s pUGN13/MdXaCCVb2DgKd26MshxUF4P9H/msgEQ2fF5Hodx8LMfIRqpnsSipS+Zu8 IvAP4JtXdHkgcCwu3BPkUoHJFZ6a1b9fNrUmn7Za2i/Mn50Isg0a72kIpS+rJ9zl GgHsP0yhux0au5rd0QGdn7DK/1ysrO0LGQ4zJEBtL+c/TmXA1LFCGDX15bMxKWdN rfpe6XyvfuG0ZnlBRvmRZpmJKSmrsqsIjx3niNy9beXdhGERt5gcnKbaIMcJ/sHH k3GixnjIzCWhqw7gGCYRNTwzlghasQ8b -----END CERTIFICATE-----Generated at Sat May 10 08:00:31 2025 by rpki-client