$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: uzLTfhlS1vzMrixAZcbrCcZGH9l4Xg5vPUgKmVU4SZs= Subject key identifier: D3:7A:70:F0:7D:84:D7:4F:63:9F:F8:BB:64:A5:67:DA:16:18:A1:09 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 1FAD Signing time: Sat 10 May 2025 16:34:49 +0000 Manifest this update: Sat 10 May 2025 16:34:49 +0000 Manifest next update: Sat 17 May 2025 16:34:49 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: lSrTTYfYV0PGsE6eZi4N3nNEepbb5evcu8V0wF66U6s=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: May 10 16:34:49 2025 GMT Not After : May 17 16:34:49 2025 GMT Subject: CN=681f8029-0bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:d7:92:66:4f:e4:6b:4e:38:4c:5f:04:19: 07:63:89:1b:4a:ba:2f:71:c7:e4:e8:13:7f:25:35: 11:dc:15:3e:0f:2e:ba:f0:31:84:a4:e0:6d:6a:ef: 59:54:26:6f:d5:01:ea:85:e2:79:fd:57:c5:c0:2b: f5:6c:23:70:b9:9f:fe:bd:68:f2:fe:9f:05:de:45: 27:13:53:1f:37:60:a6:90:36:08:1d:9e:4c:6d:72: 94:c5:87:c7:ca:67:c2:ee:1f:98:c5:09:8e:53:f6: 94:cb:ec:31:c0:59:40:36:85:db:e4:9f:72:38:db: 85:9d:2d:04:9b:a9:eb:ea:34:bb:22:32:9c:c0:be: 9a:ae:5b:86:80:b6:65:5a:f0:28:56:40:1f:c9:7f: 09:83:e2:5b:41:b1:42:0e:db:87:4d:96:fc:2d:1b: 02:d0:81:a9:c6:ca:fe:17:e8:f1:24:f4:73:7a:b0: eb:1b:09:d5:1f:90:8c:7b:d3:3a:ff:e8:c6:9d:0d: 0d:c0:42:90:7e:f4:b9:fd:eb:61:8f:00:5b:a3:ca: 02:e8:c2:95:20:0e:8e:72:5c:c8:58:9c:8d:af:64: fc:2e:60:d6:6e:69:4e:6d:7d:78:7b:b9:35:b5:ab: d0:74:d0:b3:ef:f1:9f:fd:6e:fc:8d:a4:7c:b4:59: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:70:F0:7D:84:D7:4F:63:9F:F8:BB:64:A5:67:DA:16:18:A1:09 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b8:fd:de:16:a4:dc:10:b8:df:e1:d8:8e:bc:72:4e:e9:ff: 3a:43:b9:0c:7a:4a:2d:07:5b:06:d9:02:37:5b:d4:1b:0b:ab: 1f:34:ee:89:01:16:1b:cd:21:97:0e:18:4e:e1:a8:44:f5:7c: a7:2a:81:68:f9:34:64:8c:54:58:75:16:42:0e:8f:29:21:69: 76:18:e7:fb:35:2c:d9:81:a5:b4:38:18:46:c7:70:e6:4e:4b: ba:2d:e3:0d:d6:d9:53:94:8f:bd:aa:aa:2f:4e:8b:d1:d0:14: 71:9c:a1:7a:f2:c8:ce:4c:93:d4:19:9a:ed:e2:24:a1:2f:0b: 71:d9:db:ce:ac:42:60:3c:21:41:76:13:10:64:bd:f1:0f:ba: 8d:13:11:36:ea:78:c2:c8:28:9a:7a:cd:38:3f:91:99:3e:4f: ef:7c:10:88:be:1a:55:db:e2:21:0d:8b:a2:d5:10:73:d5:9c: 63:43:ce:28:01:97:59:d9:ef:48:63:0c:d4:3e:cb:3f:59:98: c4:af:16:44:13:69:20:2d:9c:5e:60:0e:2e:e2:23:44:61:b3: fb:ab:d1:52:07:ba:76:f2:42:d4:b2:4f:fb:16:07:d8:ca:7e: 99:79:e1:ad:f5:ba:8b:c5:3c:b4:8b:ad:59:01:fa:4b:18:b5: 26:93:47:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwNTEwMTYzNDQ5WhcNMjUwNTE3MTYzNDQ5WjAYMRYwFAYD VQQDEw02ODFmODAyOS0wYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEbXkmZP5GtOOExfBBkHY4kbSrovccfk6BN/JTUR3BU+Dy668DGEpOBtau9Z VCZv1QHqheJ5/VfFwCv1bCNwuZ/+vWjy/p8F3kUnE1MfN2CmkDYIHZ5MbXKUxYfH ymfC7h+YxQmOU/aUy+wxwFlANoXb5J9yONuFnS0Em6nr6jS7IjKcwL6arluGgLZl WvAoVkAfyX8Jg+JbQbFCDtuHTZb8LRsC0IGpxsr+F+jxJPRzerDrGwnVH5CMe9M6 /+jGnQ0NwEKQfvS5/ethjwBbo8oC6MKVIA6OclzIWJyNr2T8LmDWbmlObX14e7k1 tavQdNCz7/Gf/W78jaR8tFnvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN6cPB9 hNdPY5/4u2SlZ9oWGKEJMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMuP3eFqTcELjf4diOvHJO6f86Q7kMekotB1sG2QI3W9QbC6sfNO6J ARYbzSGXDhhO4ahE9XynKoFo+TRkjFRYdRZCDo8pIWl2GOf7NSzZgaW0OBhGx3Dm Tku6LeMN1tlTlI+9qqovTovR0BRxnKF68sjOTJPUGZrt4iShLwtx2dvOrEJgPCFB dhMQZL3xD7qNExE26njCyCiaes04P5GZPk/vfBCIvhpV2+IhDYui1RBz1ZxjQ84o AZdZ2e9IYwzUPss/WZjErxZEE2kgLZxeYA4u4iNEYbP7q9FSB7p28kLUsk/7FgfY yn6ZeeGt9bqLxTy0i61ZAfpLGLUmk0ei -----END CERTIFICATE-----Generated at Sun May 11 13:22:22 2025 by rpki-client