$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft File: T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json) Hash identifier: jkxc1EWU0h2xOkZBuKoM4/OfOxTfjwh5jTyFW715QBE= Subject key identifier: B8:E7:58:CB:A1:FA:3F:6D:DF:FA:E5:FC:66:67:7A:97:96:0B:0B:7D Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft Manifest number: 15 Signing time: Fri 25 Apr 2025 07:03:56 +0000 Manifest this update: Fri 25 Apr 2025 07:03:55 +0000 Manifest next update: Fri 02 May 2025 07:03:55 +0000 Files and hashes: 1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: /G0oDhrEPIaRA8eESo7n3YQ6uEcRxLO8uJqjiRfZEpo=) 2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=) 3: 426BCB780BA211F08457541BC4F9AE02.roa (hash: u7O3FF9kpzwjobo755EoRFgx1pFaBs9MURnDVMTexT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72 Validity Not Before: Apr 25 07:03:55 2025 GMT Not After : May 2 07:03:55 2025 GMT Subject: CN=680b33db-dc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:ed:08:46:44:cf:3e:57:a4:e2:30:5a:dd: 3e:ca:7d:39:c2:0f:e1:18:d8:e1:79:4e:25:52:54: b1:2e:9b:6c:f0:59:8d:bd:2f:b1:03:e4:1c:59:bf: fd:76:30:da:0f:6f:a1:f0:e0:d7:0c:c2:96:c2:27: 6a:35:c8:d7:54:7c:e6:17:e3:fb:17:11:39:7c:67: 83:06:3a:42:4b:e5:80:1c:82:ae:e3:ed:f3:34:b0: 45:16:cf:af:d4:05:79:1b:2f:7a:fc:a6:84:ba:ee: 53:ff:45:62:47:ba:3b:47:9c:ff:13:c9:b1:96:76: ed:91:de:4d:f1:d9:15:df:b2:ff:cf:a1:07:de:9d: e1:bd:3c:19:5c:f5:ab:bb:1f:50:f9:42:f0:e8:7e: c6:21:f9:d4:db:87:65:13:dd:b4:d0:b0:32:fe:e4: eb:43:9c:1a:98:84:41:12:7c:63:01:b4:2f:c2:68: a9:6c:3f:0d:4e:b6:8d:4a:12:8a:d3:c4:04:5d:0b: 01:06:76:c2:b7:2e:eb:d8:a7:c0:8e:2e:da:1a:ab: 71:88:86:7a:f6:0c:7d:a0:ed:09:61:56:1e:3f:1b: 8e:46:b6:bb:fa:04:28:7a:32:b2:2f:3d:ce:d7:8f: 6a:a6:78:f2:3c:0f:20:24:8f:7a:e8:be:ed:62:72: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:58:CB:A1:FA:3F:6D:DF:FA:E5:FC:66:67:7A:97:96:0B:0B:7D X509v3 Authority Key Identifier: keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3a:9f:4c:81:37:8d:af:8e:b6:c4:3a:24:e7:95:36:54:c7: 32:b4:91:66:4d:1b:c6:99:a5:35:7e:a4:cd:36:9a:45:33:6e: c6:0b:51:2f:9a:87:a7:32:2b:f4:6b:f5:cb:ac:6d:ed:12:79: ab:43:54:d7:c5:02:d8:fa:b9:c7:96:70:2b:d9:88:98:c0:15: 3b:09:41:5b:ba:0e:a8:52:f1:cd:79:5d:ff:08:fa:e5:99:88: 5b:a0:61:f6:83:e1:d2:b8:61:89:19:8a:e3:f8:eb:9b:e9:7f: 2d:bc:85:3c:0e:f0:a1:8d:32:79:cb:ec:ad:b0:bd:52:ec:89: da:54:b6:6f:7a:4f:40:ba:e7:6c:39:89:f6:e6:76:26:e1:c6: 38:74:66:97:e0:0c:01:2b:3c:cb:76:11:10:c0:37:aa:03:b6: 4c:8f:df:b2:7e:4c:2b:0b:74:58:ce:49:6f:11:46:b3:8e:5a: 61:34:c9:bb:f4:20:f5:90:c2:a1:48:15:1c:e9:1c:8e:62:14: b9:3e:23:a4:f0:cc:8d:09:b8:4a:c9:c2:34:86:0d:3b:58:a6: c2:5b:9a:14:d7:37:2d:6b:af:42:f6:df:c4:7a:27:8e:b6:e1: f4:d7:82:bb:45:eb:2a:61:e2:4d:cc:72:d4:84:bc:d7:33:d0: df:11:53:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzNGQjExMC8GA1UEBRMoNEY1Rjc1QTZDMjk4OEY1OEI2MDMwMTJBOERCNDQ1QTFG MzdENUQ3MjAeFw0yNTA0MjUwNzAzNTVaFw0yNTA1MDIwNzAzNTVaMBgxFjAUBgNV BAMTDTY4MGIzM2RiLWRjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyUO0IRkTPPlek4jBa3T7KfTnCD+EY2OF5TiVSVLEum2zwWY29L7ED5BxZv/12 MNoPb6Hw4NcMwpbCJ2o1yNdUfOYX4/sXETl8Z4MGOkJL5YAcgq7j7fM0sEUWz6/U BXkbL3r8poS67lP/RWJHujtHnP8TybGWdu2R3k3x2RXfsv/PoQfeneG9PBlc9au7 H1D5QvDofsYh+dTbh2UT3bTQsDL+5OtDnBqYhEESfGMBtC/CaKlsPw1Oto1KEorT xARdCwEGdsK3LuvYp8COLtoaq3GIhnr2DH2g7QlhVh4/G45Gtrv6BCh6MrIvPc7X j2qmePI8DyAkj3rovu1icsifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuOdYy6H6 P23f+uX8Zmd6l5YLC30wHwYDVR0jBBgwFoAUT191psKYj1i2AwEqjbRFofN9XXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDM0ZCLzcwMTc4MjE2MEJB MTExRjA4RUZFRDIxOUM0RjlBRTAyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDE5MXBzS1lqMWkyQXdFcWpiUkZvZk45WFhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD M0ZCLzcwMTc4MjE2MEJBMTExRjA4RUZFRDIxOUM0RjlBRTAyL1QxOTFwc0tZajFp MkF3RXFqYlJGb2ZOOVhYSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGM6n0yBN42vjrbEOiTnlTZUxzK0kWZNG8aZpTV+pM02mkUzbsYLUS+a h6cyK/Rr9cusbe0SeatDVNfFAtj6uceWcCvZiJjAFTsJQVu6DqhS8c15Xf8I+uWZ iFugYfaD4dK4YYkZiuP465vpfy28hTwO8KGNMnnL7K2wvVLsidpUtm96T0C652w5 ifbmdibhxjh0ZpfgDAErPMt2ERDAN6oDtkyP37J+TCsLdFjOSW8RRrOOWmE0ybv0 IPWQwqFIFRzpHI5iFLk+I6TwzI0JuErJwjSGDTtYpsJbmhTXNy1rr0L238R6J462 4fTXgrtF6yph4k3MctSEvNcz0N8RUw8= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:04 2025 by rpki-client