$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: t8OyCcyHpIs+iwU4cxRcxvzbOUO4x3ZmJmL9peiBHSw= Subject key identifier: AE:E9:9C:DC:92:E1:E0:4C:7F:67:24:73:B8:D6:98:A9:94:68:CA:30 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: 01C3 Signing time: Tue 17 Jun 2025 02:11:15 +0000 Manifest this update: Tue 17 Jun 2025 02:11:14 +0000 Manifest next update: Tue 24 Jun 2025 02:11:14 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: vo7FCZAczpFWz5SUjfkV/zPw7lR+KikdcQzHvuCYwCU=) 2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: 0cSwyQIrwsLrX5HCGrd1L+L8tXaOyusCzdo4wFfko7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Jun 17 02:11:14 2025 GMT Not After : Jun 24 02:11:14 2025 GMT Subject: CN=6850cec3-5ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:d0:4e:be:f4:73:3f:5c:d2:98:90:4b:1a: ce:9a:c5:1a:f6:8e:66:b0:52:96:a6:e6:6c:08:ae: cb:18:c8:8d:1d:d7:de:6c:29:70:93:31:96:71:13: 76:02:a3:a6:f1:44:62:d1:63:7d:ef:c9:ae:29:9f: fa:dd:ec:60:e0:ec:63:bd:e8:bd:5e:97:49:ae:7b: fc:f3:d3:d9:54:3d:28:74:7f:63:d9:a9:04:c5:0b: da:64:c7:9c:fe:b7:58:d9:ba:ac:71:65:03:c8:93: 2a:b7:48:a6:4d:1c:7e:ce:d5:3b:6f:cc:60:aa:d9: 80:d3:11:c2:4d:ce:be:a6:3a:bf:a7:95:6a:1d:da: a8:5a:3d:3f:0d:2f:d3:d0:be:15:d4:1b:fe:85:54: a8:c6:7d:91:56:c2:63:17:c4:13:31:cb:31:d3:9f: 10:4c:6e:fd:8b:64:ff:d6:7b:47:35:33:99:70:97: 10:bb:9e:b5:e7:52:1b:35:20:28:9a:fb:45:bc:5c: 40:ef:9c:f6:77:a5:75:c9:03:1f:99:e2:d0:46:a5: ca:e8:4e:6a:e6:ba:c9:c3:b1:79:b8:9b:03:87:43: c3:ca:65:88:f4:2b:7c:eb:79:21:67:35:13:ac:30: 64:13:31:94:0c:35:9d:64:bf:fc:ef:42:8b:64:69: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E9:9C:DC:92:E1:E0:4C:7F:67:24:73:B8:D6:98:A9:94:68:CA:30 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:82:51:de:de:ec:2f:d2:a4:4b:f1:34:e6:17:aa:b9:59: 66:33:59:c5:d2:1b:c8:49:60:5a:14:ad:06:74:00:f8:92:52: 93:27:b4:ef:ad:53:0e:25:11:4c:ab:3b:87:a4:13:22:f5:3f: 3b:b3:48:6c:ba:c9:35:05:03:f1:15:e9:f5:16:a6:db:89:30: d1:fb:ad:b9:ee:cb:c5:b0:6c:ae:79:43:b2:04:04:89:03:58: 1c:2a:ff:a4:05:ac:67:13:04:af:20:2b:2a:1d:40:c3:57:3e: 14:76:2f:45:7b:b4:ec:43:c5:cc:cd:58:f9:ec:a9:01:37:34: 6c:c4:47:83:9f:01:ed:17:68:66:81:d5:c0:ea:69:42:31:34: c5:0c:ea:bb:58:b6:84:d9:d3:f4:04:3e:b5:6b:79:4c:f8:d5: 72:ea:15:17:a1:90:6c:ef:4b:e6:05:68:be:3a:99:c6:1e:14: a0:8c:23:d2:73:a0:99:b5:39:7a:5a:04:99:cd:e3:71:02:a9: 84:01:d8:5d:ae:b7:00:81:f9:19:a5:c4:d2:97:c3:c9:a9:76: c3:59:1f:a0:8d:9b:2a:27:02:d5:6e:c1:13:b7:1f:fa:42:82: 16:09:9d:5c:ea:e2:35:af:f3:e0:b3:b4:da:35:70:b5:c9:87: 4b:52:e0:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjUwNjE3MDIxMTE0WhcNMjUwNjI0MDIxMTE0WjAYMRYwFAYD VQQDEw02ODUwY2VjMy01YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tjQTr70cz9c0piQSxrOmsUa9o5msFKWpuZsCK7LGMiNHdfebClwkzGWcRN2 AqOm8URi0WN978muKZ/63exg4Oxjvei9XpdJrnv889PZVD0odH9j2akExQvaZMec /rdY2bqscWUDyJMqt0imTRx+ztU7b8xgqtmA0xHCTc6+pjq/p5VqHdqoWj0/DS/T 0L4V1Bv+hVSoxn2RVsJjF8QTMcsx058QTG79i2T/1ntHNTOZcJcQu56151IbNSAo mvtFvFxA75z2d6V1yQMfmeLQRqXK6E5q5rrJw7F5uJsDh0PDymWI9Ct863khZzUT rDBkEzGUDDWdZL/870KLZGn0dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7pnNyS 4eBMf2ckc7jWmKmUaMowMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOcIJR3t7sL9KkS/E05hequVlmM1nF0hvISWBaFK0GdAD4klKTJ7Tv rVMOJRFMqzuHpBMi9T87s0hsusk1BQPxFen1FqbbiTDR+6257svFsGyueUOyBASJ A1gcKv+kBaxnEwSvICsqHUDDVz4Udi9Fe7TsQ8XMzVj57KkBNzRsxEeDnwHtF2hm gdXA6mlCMTTFDOq7WLaE2dP0BD61a3lM+NVy6hUXoZBs70vmBWi+OpnGHhSgjCPS c6CZtTl6WgSZzeNxAqmEAdhdrrcAgfkZpcTSl8PJqXbDWR+gjZsqJwLVbsETtx/6 QoIWCZ1c6uI1r/Pgs7TaNXC1yYdLUuD5 -----END CERTIFICATE-----Generated at Wed Jun 18 02:27:44 2025 by rpki-client