$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: FYoh7Kp8/TT0RBisf2FZSurzdshgxm3DtJ4EqCJa7nM= Subject key identifier: 12:EB:E6:A8:04:DD:9C:B8:EC:97:BC:D2:CB:BE:A6:DC:A2:14:71:C2 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 184F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 183E Signing time: Thu 24 Apr 2025 16:32:23 +0000 Manifest this update: Thu 24 Apr 2025 16:32:22 +0000 Manifest next update: Thu 01 May 2025 16:32:22 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: VcQmUaWtRa03qe1AOBfdSr69bjLGuFruhqgg2SMXsKk=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6223 (0x184f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Apr 24 16:32:22 2025 GMT Not After : May 1 16:32:22 2025 GMT Subject: CN=680a6796-c265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:de:e5:c6:79:87:67:45:fd:7b:b3:49:90: 90:fe:b7:e2:a6:78:0c:35:00:50:fd:a6:da:5e:20: 27:88:86:72:72:6c:36:de:c4:fe:22:9b:72:c2:15: e1:cb:93:7d:05:48:ad:8b:f1:88:b9:6b:9a:aa:2a: d4:71:ca:8d:3c:51:3b:bd:f8:5d:fd:61:ac:8b:5a: 55:1d:ee:ec:98:e4:2a:72:2e:51:b2:e6:aa:6d:9d: f1:a7:c0:ee:d3:6a:e9:0e:a9:54:f1:bb:51:c7:36: 92:ac:d0:47:00:9f:f5:18:26:f2:91:25:a7:59:54: d2:d0:6c:98:df:ed:bd:1d:5a:8d:6a:de:ae:ca:e5: 61:01:0a:d0:15:83:13:52:72:ab:d9:d0:85:ca:64: 76:b9:50:3b:4a:b4:b0:4d:63:17:67:84:5f:67:f1: 35:f3:74:4b:a4:4b:82:c3:9e:05:8e:e3:e0:47:ab: 37:5e:ea:62:72:39:9f:ac:09:58:b1:7d:58:4f:d2: 52:fa:fc:71:3b:b7:1d:55:8a:6e:3c:f5:bf:af:70: f6:34:6e:f8:4d:b7:eb:90:47:01:3b:23:53:01:67: 9b:3a:a7:3a:a8:b2:da:b9:2a:18:5a:5a:3f:94:ed: c7:c4:0d:15:30:3e:57:11:70:58:76:ac:34:82:28: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:E6:A8:04:DD:9C:B8:EC:97:BC:D2:CB:BE:A6:DC:A2:14:71:C2 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:84:ff:f9:df:5d:11:a2:2f:6f:62:07:28:4a:a0:3a:ef:d4: d5:06:e7:9b:d4:45:ce:18:52:7b:8d:b8:a7:8e:0d:12:76:7d: 04:b9:99:6d:50:3b:93:41:53:57:04:be:44:fc:34:03:7b:cc: 6b:97:1e:06:b3:4e:f8:3d:00:23:13:4e:c2:d4:7d:26:13:3d: 2a:1f:35:dc:31:63:b5:db:0b:f4:bd:50:5c:ce:66:ba:0b:f7: 75:4b:4e:b3:3a:2c:7d:62:23:df:5c:6d:79:71:a9:cb:88:59: ef:6f:28:c5:e0:9a:7a:20:a2:6b:af:7f:f7:c3:85:b3:e2:34: fc:46:33:6c:dc:ba:59:3d:ef:05:8f:37:9b:d5:3c:3e:40:a2: 54:f6:32:ac:cc:e5:20:d6:d0:7d:90:3f:ca:11:b1:93:61:38: a6:97:ab:6c:6d:22:cd:2b:a6:fc:cf:98:b2:c6:db:43:e1:cc: 28:31:b7:9b:9b:a3:5c:29:97:02:59:a1:d5:5d:20:7d:2d:eb: a2:a8:28:74:15:ee:48:f0:05:42:a5:16:ff:d6:c7:68:4b:77: d4:ef:ad:93:3a:72:f8:dc:fd:e3:13:27:2f:f5:d7:94:5f:2f: 7b:6f:2b:b4:9f:58:d9:dd:02:b0:46:b4:9c:86:85:4e:af:84: bd:73:16:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUwNDI0MTYzMjIyWhcNMjUwNTAxMTYzMjIyWjAYMRYwFAYD VQQDEw02ODBhNjc5Ni1jMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d/e5cZ5h2dF/XuzSZCQ/rfipngMNQBQ/abaXiAniIZycmw23sT+IptywhXh y5N9BUiti/GIuWuaqirUccqNPFE7vfhd/WGsi1pVHe7smOQqci5RsuaqbZ3xp8Du 02rpDqlU8btRxzaSrNBHAJ/1GCbykSWnWVTS0GyY3+29HVqNat6uyuVhAQrQFYMT UnKr2dCFymR2uVA7SrSwTWMXZ4RfZ/E183RLpEuCw54FjuPgR6s3XupicjmfrAlY sX1YT9JS+vxxO7cdVYpuPPW/r3D2NG74TbfrkEcBOyNTAWebOqc6qLLauSoYWlo/ lO3HxA0VMD5XEXBYdqw0gigZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLr5qgE 3Zy47Je80su+ptyiFHHCMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVhP/5310Roi9vYgcoSqA679TVBueb1EXOGFJ7jbinjg0Sdn0EuZlt UDuTQVNXBL5E/DQDe8xrlx4Gs074PQAjE07C1H0mEz0qHzXcMWO12wv0vVBczma6 C/d1S06zOix9YiPfXG15canLiFnvbyjF4Jp6IKJrr3/3w4Wz4jT8RjNs3LpZPe8F jzeb1Tw+QKJU9jKszOUg1tB9kD/KEbGTYTiml6tsbSLNK6b8z5iyxttD4cwoMbeb m6NcKZcCWaHVXSB9LeuiqCh0Fe5I8AVCpRb/1sdoS3fU762TOnL43P3jEycv9deU Xy97byu0n1jZ3QKwRrSchoVOr4S9cxZo -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:43 2025 by rpki-client