$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: BZwr7c31mhA2iEFrE7ySQrLPfLz01H6ge4Sujt8Ffug= Subject key identifier: 73:7A:83:46:80:72:B8:21:F4:80:CC:B1:F7:71:1D:65:CE:25:86:5A Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 03:08:36 +0000 Manifest this update: Fri 25 Apr 2025 03:08:36 +0000 Manifest next update: Fri 02 May 2025 03:08:36 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: Jfg//DyQPF0JqxN1lb/nZNYkHlrVbwenglde/2+SSm0=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=) 4: 3DA6569E383A11EF8998A252C4F9AE02.roa (hash: PvqaT2m26VjtkGuTElfQIOHqKDs1V4TPHM7KOHfBUSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Apr 25 03:08:36 2025 GMT Not After : May 2 03:08:36 2025 GMT Subject: CN=680afcb4-85b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:b5:f8:f0:65:0f:67:a8:65:4d:17:e6:73: b9:08:f8:d7:59:e5:ec:2a:19:13:65:44:1b:49:d9: 4d:cb:54:fd:37:f4:3b:d9:d4:41:9f:34:c3:10:2e: c3:70:b9:fa:ea:e1:87:0f:84:97:88:17:0e:a9:ac: e0:a7:65:f2:c4:8a:60:39:a4:0e:62:b0:a3:0f:93: 57:40:41:b7:2f:8e:a4:fc:e4:a0:c8:ba:9a:51:3b: a0:5e:29:1a:1d:80:26:c1:47:39:f8:6c:2a:24:44: fa:56:e3:52:2c:20:6c:54:00:80:82:83:3c:18:c6: 81:0c:4b:45:cd:f4:94:a9:1d:05:db:ef:33:c5:eb: 31:cc:4e:7b:36:d6:ed:fe:e1:e6:39:96:54:d3:0d: 23:a1:26:a9:37:e0:8f:ea:0a:8f:cd:80:a3:f3:d0: 85:a2:03:36:b3:d1:b8:4e:95:7d:93:53:88:a5:1d: 13:57:da:d8:04:b8:60:29:09:ee:da:62:12:45:9a: 7e:7d:e8:bb:cc:9a:35:b0:8a:d6:1b:72:4c:7d:7c: ea:be:bc:72:7c:ab:cc:53:0e:5e:f5:57:8f:47:5a: 99:d1:d0:d7:eb:04:04:50:78:82:89:4b:78:63:13: 3e:ec:ea:4a:5f:8a:ec:42:b1:22:b3:0c:9e:e1:c4: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7A:83:46:80:72:B8:21:F4:80:CC:B1:F7:71:1D:65:CE:25:86:5A X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c2:39:58:89:ed:7f:f9:56:86:0a:2b:46:84:c8:f8:0f:86: 78:83:cb:43:65:af:3e:00:55:a2:ac:f3:f8:37:c9:1f:d8:0e: f0:5d:86:d1:ab:74:2c:d4:e6:7f:bc:a8:39:2c:ac:3c:0f:9e: 9c:f2:f6:57:3c:5b:da:ff:cf:2c:61:76:86:9c:e0:24:d9:42: 66:b1:37:3e:38:19:7b:af:79:34:fc:5a:5d:4b:94:0a:86:ac: 55:06:bb:9c:a2:4e:cb:99:37:c4:e6:be:52:a8:54:93:60:0a: c5:fe:91:8d:4c:fc:e8:c2:2b:92:88:46:91:c4:f7:84:fb:dd: 15:63:be:9d:23:cd:dc:b1:4e:38:bb:2b:07:1a:c9:54:f6:ac: fb:b4:ec:15:90:f3:56:b1:bd:0b:0c:d5:d5:96:34:5a:b8:14: bf:26:9f:d0:1f:0c:c8:60:8a:8a:01:a1:14:51:98:6f:0c:28: 0e:71:91:67:5c:aa:d7:92:56:8f:88:8a:5d:fc:47:01:f2:91: 7a:06:bc:5c:11:51:ca:6a:e0:c9:43:e1:ea:dd:04:94:12:55: 4b:9f:28:1b:09:86:2a:32:f1:43:9c:ce:e8:e3:3d:8f:1c:25: 5b:27:79:9e:1b:d2:b0:4a:3d:b9:15:86:cd:ae:94:7c:61:7e: 67:38:83:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUwNDI1MDMwODM2WhcNMjUwNTAyMDMwODM2WjAYMRYwFAYD VQQDEw02ODBhZmNiNC04NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFu1+PBlD2eoZU0X5nO5CPjXWeXsKhkTZUQbSdlNy1T9N/Q72dRBnzTDEC7D cLn66uGHD4SXiBcOqazgp2XyxIpgOaQOYrCjD5NXQEG3L46k/OSgyLqaUTugXika HYAmwUc5+GwqJET6VuNSLCBsVACAgoM8GMaBDEtFzfSUqR0F2+8zxesxzE57Ntbt /uHmOZZU0w0joSapN+CP6gqPzYCj89CFogM2s9G4TpV9k1OIpR0TV9rYBLhgKQnu 2mISRZp+fei7zJo1sIrWG3JMfXzqvrxyfKvMUw5e9VePR1qZ0dDX6wQEUHiCiUt4 YxM+7OpKX4rsQrEiswye4cSTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHN6g0aA crgh9IDMsfdxHWXOJYZaMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwwjlYie1/+VaGCitGhMj4D4Z4g8tDZa8+AFWirPP4N8kf2A7wXYbR q3Qs1OZ/vKg5LKw8D56c8vZXPFva/88sYXaGnOAk2UJmsTc+OBl7r3k0/FpdS5QK hqxVBrucok7LmTfE5r5SqFSTYArF/pGNTPzowiuSiEaRxPeE+90VY76dI83csU44 uysHGslU9qz7tOwVkPNWsb0LDNXVljRauBS/Jp/QHwzIYIqKAaEUUZhvDCgOcZFn XKrXklaPiIpd/EcB8pF6BrxcEVHKauDJQ+Hq3QSUElVLnygbCYYqMvFDnM7o4z2P HCVbJ3meG9KwSj25FYbNrpR8YX5nOINt -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:22 2025 by rpki-client