$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: Bmc/iRRSj4j1WHSyKmT6477v4Wc6e/sLHM/+kgciDBQ= Subject key identifier: 2F:DF:0D:9A:63:F8:BB:8C:4B:0E:4C:C6:03:04:A7:EB:E0:12:C5:C8 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C1F Signing time: Sat 10 May 2025 18:24:05 +0000 Manifest this update: Sat 10 May 2025 18:24:05 +0000 Manifest next update: Sat 17 May 2025 18:24:05 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: YEnX0eDjQIrEx9QGKuI181VkzVchBpsA5aah4sGERM4=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: May 10 18:24:05 2025 GMT Not After : May 17 18:24:05 2025 GMT Subject: CN=681f99c5-ca75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:d4:7a:78:40:5c:b8:a4:09:01:1b:c8:27: 54:85:e0:d9:55:b4:b9:7a:a0:2e:b4:2c:4d:5d:a6: 8d:f1:de:fa:4b:d4:c1:6c:3a:25:95:61:51:58:be: 22:ee:29:06:60:2a:8b:88:e7:51:ad:6e:ce:0e:1a: 66:f7:da:40:3c:5e:35:98:9a:ee:ff:6b:50:c8:d7: 84:2c:e0:81:20:50:e6:df:0e:45:ac:91:1f:48:24: 86:b4:a1:ac:3b:5f:ef:4a:a1:d5:10:cd:23:2c:f0: a3:62:c6:b3:08:08:f9:83:20:53:d4:38:4a:36:67: 19:13:c8:89:c6:dc:a3:70:f0:d3:b0:f6:49:3a:c4: 6d:a2:e5:3f:de:d1:ee:0c:31:25:d9:10:01:43:73: c3:5e:6d:58:a3:6b:85:7e:4b:65:e2:a0:d7:10:23: 1d:8c:bb:29:08:e0:67:cd:53:98:9b:bc:86:92:60: 9e:09:a5:95:1d:a3:7f:ca:1e:95:47:47:90:83:0e: ea:bd:bb:c9:ff:ad:5d:05:de:26:9e:89:a2:cd:ae: 0b:b4:54:12:af:f6:b2:44:d4:7a:12:e7:fc:bb:b6: ab:78:53:27:1c:5e:22:e6:89:c8:28:fd:cf:0d:18: 40:6f:3f:0d:aa:3c:d5:0e:f6:30:21:ac:86:9a:38: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:0D:9A:63:F8:BB:8C:4B:0E:4C:C6:03:04:A7:EB:E0:12:C5:C8 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:28:3b:e4:13:6c:47:95:5c:39:87:09:5d:7b:cd:58:23:18: f8:04:72:ba:89:fd:4e:cd:a6:80:6e:56:8e:68:44:23:1e:51: 79:58:b7:65:0c:55:72:00:ab:c4:2e:5d:b9:91:8b:bb:14:f5: 77:2a:4f:e4:bd:ed:4d:61:2a:ba:a6:f0:74:21:bd:39:00:33: 7f:3f:43:c9:29:08:2d:3d:f4:25:c9:a7:2d:19:1d:c1:11:a6: 65:fc:0e:e9:35:e9:51:57:0b:f7:0c:9b:ba:31:ba:88:29:a1: 2a:56:36:b5:60:0d:af:10:6d:c3:1b:ad:e4:f8:e1:e7:f1:ea: 48:c0:4d:8d:17:b5:cd:ac:d1:e6:a2:8b:7d:07:ab:2f:b9:ea: c4:6e:71:25:a8:3c:2c:1d:bc:34:d9:5b:df:c0:e6:d5:7b:0d: f4:98:85:ca:ab:16:4e:cd:cb:ab:54:f3:73:a4:76:3d:40:a0: d2:1a:5c:e7:9c:4e:61:82:74:6b:44:9b:21:d7:99:66:7a:c5: d4:65:0d:81:f5:0f:c1:83:ef:b9:1a:35:b6:14:4b:59:92:a7: 91:95:68:1c:af:60:7b:41:07:07:42:c6:1e:46:76:25:66:8d: 2c:e5:db:cc:32:1f:1e:77:17:f9:dc:74:13:80:a0:71:52:ad: 6c:43:db:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNTEwMTgyNDA1WhcNMjUwNTE3MTgyNDA1WjAYMRYwFAYD VQQDEw02ODFmOTljNS1jYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk3UenhAXLikCQEbyCdUheDZVbS5eqAutCxNXaaN8d76S9TBbDollWFRWL4i 7ikGYCqLiOdRrW7ODhpm99pAPF41mJru/2tQyNeELOCBIFDm3w5FrJEfSCSGtKGs O1/vSqHVEM0jLPCjYsazCAj5gyBT1DhKNmcZE8iJxtyjcPDTsPZJOsRtouU/3tHu DDEl2RABQ3PDXm1Yo2uFfktl4qDXECMdjLspCOBnzVOYm7yGkmCeCaWVHaN/yh6V R0eQgw7qvbvJ/61dBd4mnomiza4LtFQSr/ayRNR6Euf8u7areFMnHF4i5onIKP3P DRhAbz8NqjzVDvYwIayGmjgUawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/fDZpj +LuMSw5MxgMEp+vgEsXIMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWKDvkE2xHlVw5hwlde81YIxj4BHK6if1OzaaAblaOaEQjHlF5WLdl DFVyAKvELl25kYu7FPV3Kk/kve1NYSq6pvB0Ib05ADN/P0PJKQgtPfQlyactGR3B EaZl/A7pNelRVwv3DJu6MbqIKaEqVja1YA2vEG3DG63k+OHn8epIwE2NF7XNrNHm oot9B6svuerEbnElqDwsHbw02VvfwObVew30mIXKqxZOzcurVPNzpHY9QKDSGlzn nE5hgnRrRJsh15lmesXUZQ2B9Q/Bg++5GjW2FEtZkqeRlWgcr2B7QQcHQsYeRnYl Zo0s5dvMMh8edxf53HQTgKBxUq1sQ9ui -----END CERTIFICATE-----Generated at Sun May 11 01:15:05 2025 by rpki-client