$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: jLuQ9cRT+P44atOvQYY10U1tKODg0AwGTBDsXavxs5c= Subject key identifier: D2:74:91:2E:0C:2F:E3:3D:3E:18:0F:83:EA:DC:48:F9:F0:73:51:A4 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0DED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0DD8 Signing time: Thu 24 Apr 2025 17:52:23 +0000 Manifest this update: Thu 24 Apr 2025 17:52:23 +0000 Manifest next update: Thu 01 May 2025 17:52:23 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: 7/PtV4+cjz0D6ASzSDbZKDvp8wGBr5ibrBt3oU2yep0=) 2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 4v+rsnRLFBgrun/uIoRgYYIQkVKTxUpRVf++DCzZXn4=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Apr 24 17:52:23 2025 GMT Not After : May 1 17:52:23 2025 GMT Subject: CN=680a7a57-96ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:40:f8:8a:dd:72:eb:99:f6:62:90:29:b1: 04:91:ce:0f:86:7b:6a:db:b1:77:a1:f7:15:eb:d3: 1d:1b:dc:e2:f9:27:5c:8f:0c:c4:63:49:5d:4c:70: 2e:b5:a9:88:f0:0c:04:ff:e3:b1:5e:3f:a1:47:a7: 10:c5:64:4c:d2:69:51:45:01:98:94:0b:fb:a9:a3: d4:20:f0:23:b7:0e:fb:46:af:bf:c5:d2:66:a8:fb: 58:0e:42:5a:d0:56:d6:d8:c6:01:35:56:0f:65:2e: e2:f9:e8:9d:d3:4d:0c:9e:4c:09:0a:34:65:02:82: b9:dd:49:92:8d:b9:8c:d7:e7:39:73:d5:72:6c:71: 62:98:d9:c0:bf:c3:12:d3:3a:5e:d3:8c:72:0e:83: 3d:45:22:bc:76:8b:a0:00:ab:ba:e6:c0:af:42:d5: 6e:08:39:45:aa:89:39:e7:38:0b:3b:6c:86:6d:1e: 8f:c5:bc:12:33:c7:c7:45:5b:88:56:7d:26:18:f5: 0e:63:e6:03:75:53:42:09:14:2f:c0:46:33:34:e2: 85:e2:19:73:4f:d6:a6:c0:b2:fc:9d:80:ef:fb:e1: 69:42:4a:a5:92:4b:68:c8:74:68:07:78:b6:e0:92: d8:1b:22:79:9b:dd:6c:da:99:1f:e5:7f:95:90:b1: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:74:91:2E:0C:2F:E3:3D:3E:18:0F:83:EA:DC:48:F9:F0:73:51:A4 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c9:b3:4a:0e:d2:37:99:49:f0:36:34:ab:f4:27:88:5d:7d: 25:b4:c0:49:23:76:6f:68:0f:7e:8e:05:4a:37:7a:d8:32:e9: b5:80:f4:34:53:93:93:77:54:cd:3a:cb:c3:17:f9:eb:55:29: 6b:d6:7e:23:2e:26:39:32:f9:8d:19:2a:65:fa:98:e7:dd:e4: e7:f5:b6:8e:48:d9:08:c4:87:f8:10:b8:cd:ba:6f:15:14:50: e9:e3:05:6e:0e:f4:b8:37:a9:62:96:34:76:e0:d9:f5:ba:cf: f5:f2:5d:7e:fb:2d:61:01:82:a6:e3:b4:71:7d:81:d4:0d:d0: 37:2f:aa:9f:99:2c:ce:8c:f3:b3:20:f1:94:9d:7e:2e:64:92: 6c:e4:70:cd:56:52:45:7f:63:07:95:99:72:cb:63:b3:15:c2: 64:05:b2:94:d4:1e:6f:bd:8b:87:67:4d:77:34:71:d1:15:32: b6:15:84:2b:68:46:cf:b3:df:9a:1e:40:3d:f5:70:26:51:71: c8:b2:f5:15:f2:51:9e:44:fe:c6:99:b7:3f:75:59:e5:1a:e6: 8d:bc:e4:f3:97:c2:ba:94:48:42:1c:f6:ab:28:00:f5:2c:30: d0:ae:ff:b4:a5:f8:3f:96:51:47:2d:32:7b:d9:25:48:50:99: 7b:06:63:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNDI0MTc1MjIzWhcNMjUwNTAxMTc1MjIzWjAYMRYwFAYD VQQDEw02ODBhN2E1Ny05NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49JA+IrdcuuZ9mKQKbEEkc4Phntq27F3ofcV69MdG9zi+SdcjwzEY0ldTHAu tamI8AwE/+OxXj+hR6cQxWRM0mlRRQGYlAv7qaPUIPAjtw77Rq+/xdJmqPtYDkJa 0FbW2MYBNVYPZS7i+eid000MnkwJCjRlAoK53UmSjbmM1+c5c9VybHFimNnAv8MS 0zpe04xyDoM9RSK8dougAKu65sCvQtVuCDlFqok55zgLO2yGbR6PxbwSM8fHRVuI Vn0mGPUOY+YDdVNCCRQvwEYzNOKF4hlzT9amwLL8nYDv++FpQkqlkktoyHRoB3i2 4JLYGyJ5m91s2pkf5X+VkLEL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ0kS4M L+M9PhgPg+rcSPnwc1GkMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxybNKDtI3mUnwNjSr9CeIXX0ltMBJI3ZvaA9+jgVKN3rYMum1gPQ0 U5OTd1TNOsvDF/nrVSlr1n4jLiY5MvmNGSpl+pjn3eTn9baOSNkIxIf4ELjNum8V FFDp4wVuDvS4N6liljR24Nn1us/18l1++y1hAYKm47RxfYHUDdA3L6qfmSzOjPOz IPGUnX4uZJJs5HDNVlJFf2MHlZlyy2OzFcJkBbKU1B5vvYuHZ013NHHRFTK2FYQr aEbPs9+aHkA99XAmUXHIsvUV8lGeRP7Gmbc/dVnlGuaNvOTzl8K6lEhCHParKAD1 LDDQrv+0pfg/llFHLTJ72SVIUJl7BmNs -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:45 2025 by rpki-client