$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: uF1bRZV1ai3a5y2vLwkK9PIETx8t8iZ39hFXfQOdhIg= Subject key identifier: 9E:0D:B1:5C:50:C3:93:97:11:33:11:11:40:BA:E2:FF:95:7A:59:99 Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 02B6 Signing time: Sun 11 May 2025 01:00:17 +0000 Manifest this update: Sun 11 May 2025 01:00:16 +0000 Manifest next update: Sun 18 May 2025 01:00:16 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: hvni53XcEDgzrrCpdJIKejkQ2rI90W8Y52/rp6ulZYA=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: May 11 01:00:16 2025 GMT Not After : May 18 01:00:16 2025 GMT Subject: CN=681ff6a0-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:8f:9d:cc:76:93:70:a8:45:52:d7:3e:7b: 35:e3:5c:67:a9:df:ab:f0:87:da:2d:8c:c1:37:be: 39:16:7a:de:5a:8b:f6:78:68:7b:d0:71:ba:ef:6f: b5:81:30:04:02:93:30:06:13:6c:c6:1b:f1:f1:6d: c6:4c:f0:63:64:cf:b3:17:22:d1:c5:7d:fd:c8:23: f2:f8:f0:cb:2c:f2:24:df:d8:9e:37:cd:3a:d3:41: d6:7d:0a:5c:41:ea:01:54:db:bd:34:4a:9e:9f:c7: 76:0a:cb:99:06:62:ce:92:66:ff:4b:9a:72:90:62: a4:2b:c3:cc:c3:0b:a4:72:10:46:20:96:ea:30:14: d3:b9:3d:10:d8:f7:2e:5b:7c:8f:3c:4e:b2:1e:be: af:c8:61:db:a3:7f:f0:36:21:56:31:18:06:87:0e: d3:d8:5d:62:ee:79:de:3e:fa:c3:d1:bd:5d:a8:14: 5d:ef:ba:e5:70:6e:0a:b6:0b:c5:e9:ba:bb:35:b8: 75:a5:db:ce:8d:72:b3:a0:88:65:cc:e6:63:db:eb: f9:d7:54:03:8a:a6:f3:7b:ad:15:32:c4:29:41:df: 2d:6c:8d:b0:e0:6f:e4:69:d4:d7:e5:f9:23:d5:02: fc:e3:55:91:66:1b:9b:88:3c:b5:9f:7e:3c:fb:d7: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:B1:5C:50:C3:93:97:11:33:11:11:40:BA:E2:FF:95:7A:59:99 X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a0:b9:00:84:78:46:b1:c6:d5:9b:5c:27:c3:a6:64:0c:be: 83:d9:26:e0:00:c7:4d:e4:8c:f3:93:d2:93:53:f8:bf:50:15: 57:3b:91:d5:3e:07:0e:ff:37:48:b9:39:3c:f0:2c:cb:6f:e0: 6f:34:37:23:08:a9:3d:c6:d8:64:96:ee:6d:7c:3f:7c:3b:95: f1:81:bc:98:e4:da:f4:61:15:65:f7:5d:56:33:ca:b4:36:81: 43:8a:3e:ac:db:5d:da:f6:ef:3a:f2:16:3e:29:3c:4d:2e:98: 12:85:64:15:12:91:55:8c:6c:56:28:c9:84:09:1e:9a:12:e1: bc:81:d9:8e:59:9c:41:a8:2c:31:94:3e:8d:0e:ac:4f:2d:94: 02:3b:8e:c4:93:54:5e:3c:18:fa:9d:8a:ae:83:56:e6:fa:cd: 4b:ff:12:c4:0e:d4:01:40:3c:4d:03:c6:08:4d:06:59:a9:a6: bc:04:49:28:47:48:8e:0c:0f:3e:a3:65:ce:6d:b1:8c:48:dc: 9e:a9:5a:9c:68:94:5d:0a:ce:e6:2e:cb:3d:73:f4:19:2e:43: 07:db:89:38:f9:3d:6d:aa:53:91:82:2c:94:15:aa:20:57:27: c5:d0:44:bc:11:2c:42:7a:fe:01:a5:f9:9e:65:41:fd:04:10: 85:e0:35:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUwNTExMDEwMDE2WhcNMjUwNTE4MDEwMDE2WjAYMRYwFAYD VQQDEw02ODFmZjZhMC01MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNaPncx2k3CoRVLXPns141xnqd+r8IfaLYzBN745FnreWov2eGh70HG672+1 gTAEApMwBhNsxhvx8W3GTPBjZM+zFyLRxX39yCPy+PDLLPIk39ieN80600HWfQpc QeoBVNu9NEqen8d2CsuZBmLOkmb/S5pykGKkK8PMwwukchBGIJbqMBTTuT0Q2Pcu W3yPPE6yHr6vyGHbo3/wNiFWMRgGhw7T2F1i7nnePvrD0b1dqBRd77rlcG4KtgvF 6bq7Nbh1pdvOjXKzoIhlzOZj2+v511QDiqbze60VMsQpQd8tbI2w4G/kadTX5fkj 1QL841WRZhubiDy1n348+9dQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4NsVxQ w5OXETMREUC64v+VelmZMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARoLkAhHhGscbVm1wnw6ZkDL6D2SbgAMdN5Izzk9KTU/i/UBVXO5HV PgcO/zdIuTk88CzLb+BvNDcjCKk9xthklu5tfD98O5XxgbyY5Nr0YRVl911WM8q0 NoFDij6s213a9u868hY+KTxNLpgShWQVEpFVjGxWKMmECR6aEuG8gdmOWZxBqCwx lD6NDqxPLZQCO47Ek1RePBj6nYqug1bm+s1L/xLEDtQBQDxNA8YITQZZqaa8BEko R0iODA8+o2XObbGMSNyeqVqcaJRdCs7mLss9c/QZLkMH24k4+T1tqlORgiyUFaog VyfF0ES8ESxCev4BpfmeZUH9BBCF4DUe -----END CERTIFICATE-----Generated at Sun May 11 15:11:01 2025 by rpki-client