$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: 0x77FCIlDTm0xI/0ptITtvETegSfZV/Xd4Uekr1P7Ns= Subject key identifier: 89:63:1B:DB:5E:24:92:B2:81:2B:3A:95:78:9B:F8:C0:9C:9C:2D:1C Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 1084 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0E56 Signing time: Thu 24 Apr 2025 19:01:39 +0000 Manifest this update: Thu 24 Apr 2025 19:01:38 +0000 Manifest next update: Thu 01 May 2025 19:01:38 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: +EsxZuGu+4q0DVv4xJCpjFczgbzpm4aD73RIKiyIoTc=) 2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 3: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) 5: 98C09866F53911EF8CC5C33AC4F9AE02.roa (hash: aKyawlMZ4Qq+wbgdOVEXMIljXe8a6bRthkUFF11RbxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4228 (0x1084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Apr 24 19:01:38 2025 GMT Not After : May 1 19:01:38 2025 GMT Subject: CN=680a8a93-6eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:ad:5d:e1:8e:e9:dc:63:b3:f6:66:b9:14: 49:60:2f:8e:d0:4e:4e:c8:bd:a6:d2:ba:90:95:41: fe:86:34:a5:43:93:cf:32:97:07:61:15:ee:d7:29: 58:bd:8d:84:ba:ba:0d:bf:f0:92:f2:40:b2:7a:30: 70:c0:a2:bb:05:7e:15:f1:78:82:c7:7e:90:62:b4: 53:d9:56:15:74:7f:86:87:04:5d:34:bf:2c:cc:fa: d8:ab:54:7d:dc:23:47:8d:de:e9:25:c3:e2:a3:ed: ea:4c:be:1c:06:46:51:43:ee:f7:70:ac:85:72:8a: 58:a0:2b:cb:69:66:14:ac:52:ac:3a:7a:b2:66:63: ba:b0:64:b1:22:bf:6d:b3:ba:77:e5:7e:e2:73:78: 71:a8:36:20:6a:bc:fd:59:bf:a3:ee:ed:b2:3a:97: 71:6b:9d:af:35:93:9b:0b:b5:8d:c4:a9:9f:dd:ff: 23:80:09:06:8f:b2:a3:1f:89:18:72:3c:e5:89:f1: 24:c5:df:5e:1f:30:86:62:c5:9f:55:4a:d1:77:43: f7:38:fe:3e:4c:66:ab:71:7b:be:85:5d:a5:97:04: ff:7e:d8:32:c1:20:8b:e6:26:42:03:48:1b:95:a0: 44:84:5d:31:8e:2c:36:e7:78:f0:00:8c:71:0e:1a: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:63:1B:DB:5E:24:92:B2:81:2B:3A:95:78:9B:F8:C0:9C:9C:2D:1C X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:63:10:dc:fb:ff:e1:bd:3b:e2:6c:81:ba:2b:19:d9:0c:d0: 40:52:5b:3b:9d:11:b9:9e:ea:d2:77:ff:a8:47:ff:23:39:4b: 14:99:af:eb:75:e4:fe:66:71:09:dd:f3:ec:c6:a4:97:db:23: 65:86:10:33:c7:ca:0f:32:7a:ba:37:c2:0e:e7:af:cf:23:e1: df:e7:19:f4:a7:1a:4a:f5:58:d2:60:2e:88:53:7b:44:54:ae: 1b:40:92:0d:29:70:70:2d:f6:00:a2:40:47:e6:e2:8d:39:c8: 43:de:3b:4e:f4:4b:42:61:3f:a6:8b:dc:51:60:24:36:23:25: 31:a8:06:b3:31:91:b7:ac:da:48:ee:88:0d:e6:6c:8b:d6:0c: 06:66:07:f9:62:69:f3:af:cc:af:d8:93:65:73:43:f0:73:62: 8a:a6:6e:94:37:11:68:da:d3:e3:5b:91:0e:1c:f1:4e:98:d7: da:a5:e6:95:6b:fc:f0:ef:dd:bc:cf:67:97:00:58:04:1d:09: 7e:39:a2:f5:d6:5a:fb:7c:70:52:81:ca:ce:51:6b:07:52:da: ad:d3:59:dd:78:83:a3:3b:8c:a8:73:ba:4f:4e:a6:1e:a2:08: 07:8f:0f:99:d6:39:f5:de:e5:a5:2b:bb:61:cf:d3:72:d5:a6: bb:bd:d1:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUwNDI0MTkwMTM4WhcNMjUwNTAxMTkwMTM4WjAYMRYwFAYD VQQDEw02ODBhOGE5My02ZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YatXeGO6dxjs/ZmuRRJYC+O0E5OyL2m0rqQlUH+hjSlQ5PPMpcHYRXu1ylY vY2EuroNv/CS8kCyejBwwKK7BX4V8XiCx36QYrRT2VYVdH+GhwRdNL8szPrYq1R9 3CNHjd7pJcPio+3qTL4cBkZRQ+73cKyFcopYoCvLaWYUrFKsOnqyZmO6sGSxIr9t s7p35X7ic3hxqDYgarz9Wb+j7u2yOpdxa52vNZObC7WNxKmf3f8jgAkGj7KjH4kY cjzlifEkxd9eHzCGYsWfVUrRd0P3OP4+TGarcXu+hV2llwT/ftgywSCL5iZCA0gb laBEhF0xjiw253jwAIxxDhrbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIljG9te JJKygSs6lXib+MCcnC0cMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwYxDc+//hvTvibIG6KxnZDNBAUls7nRG5nurSd/+oR/8jOUsUma/r deT+ZnEJ3fPsxqSX2yNlhhAzx8oPMnq6N8IO56/PI+Hf5xn0pxpK9VjSYC6IU3tE VK4bQJINKXBwLfYAokBH5uKNOchD3jtO9EtCYT+mi9xRYCQ2IyUxqAazMZG3rNpI 7ogN5myL1gwGZgf5Ymnzr8yv2JNlc0Pwc2KKpm6UNxFo2tPjW5EOHPFOmNfapeaV a/zw7928z2eXAFgEHQl+OaL11lr7fHBSgcrOUWsHUtqt01ndeIOjO4yoc7pPTqYe oggHjw+Z1jn13uWlK7thz9Ny1aa7vdH5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:51 2025 by rpki-client