$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: uhWpL/RFZXMZWScK8tEQuQe71pOTgAwqWsMIhmcjvyw= Subject key identifier: 2D:5A:0A:A9:78:E9:DC:E8:0E:0C:B2:27:44:D8:CA:95:30:82:9E:7E Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 06CC Signing time: Thu 24 Apr 2025 21:52:20 +0000 Manifest this update: Thu 24 Apr 2025 21:52:20 +0000 Manifest next update: Thu 01 May 2025 21:52:20 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: HLGIvKz2VogkxkoOW8760N/5vJJ0aWUP4j4mDxAiP08=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Apr 24 21:52:20 2025 GMT Not After : May 1 21:52:20 2025 GMT Subject: CN=680ab294-70ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:c0:90:dc:34:2c:df:d6:18:f2:95:61:84: c2:1a:f0:22:85:8a:fe:2d:8c:76:6d:7b:31:ce:1b: ee:25:b9:cd:29:7a:6a:c1:b6:b2:df:00:7c:f0:f1: a0:41:09:55:68:43:9d:71:a4:e0:ba:dc:df:24:a2: ac:24:d9:f3:53:11:ad:19:c5:5f:7c:24:ef:00:d0: a9:ea:72:ed:48:f1:d5:c7:04:8e:d0:4b:5f:85:58: de:5b:16:b1:fb:fe:13:e0:33:32:4e:d4:9f:6c:02: c4:e9:eb:e1:35:43:c9:41:3f:e4:90:3a:5b:9e:1e: 87:92:58:89:93:22:a8:b3:50:93:1f:21:98:01:19: 83:be:46:72:9a:4f:9c:4b:31:87:d3:a3:88:cb:ee: 24:a8:7d:81:39:db:b4:60:64:b4:b9:dc:45:18:f9: dc:8c:ba:e3:f9:16:9e:e4:24:4a:8d:51:ca:02:8e: 9e:57:8c:f0:dd:0d:6e:95:5a:f0:44:9c:d7:f3:17: 1c:68:b0:f4:23:36:17:4c:2d:78:cf:52:e3:1f:42: 9f:90:85:ad:40:49:59:35:ce:72:1f:b6:70:e6:98: 51:6d:b4:85:ef:cb:c8:ab:82:73:39:83:20:a4:61: 18:81:76:ef:48:1f:43:14:de:b4:b2:f8:44:0c:9d: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:0A:A9:78:E9:DC:E8:0E:0C:B2:27:44:D8:CA:95:30:82:9E:7E X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:82:d7:27:e6:d6:24:bb:d1:28:10:b2:5c:26:f5:7e:8b: 68:b8:aa:5d:10:5b:78:3c:fd:c3:96:ba:3e:ab:15:ad:8e:99: 50:76:72:d5:6d:e7:30:ac:bb:1d:16:95:b0:0d:8f:0a:87:13: 1c:e6:e4:c7:b7:24:fc:1c:4d:9b:ba:7a:92:f0:92:50:08:38: c4:05:40:57:57:2e:00:9c:d0:9c:04:12:16:84:d6:db:0a:85: 07:2a:d8:c3:10:f3:8a:59:26:87:45:1f:ff:c8:07:ab:a1:9e: 40:4e:a2:1a:b5:be:a0:67:b3:5e:00:9b:a8:d2:54:65:ed:83: 95:60:e2:e3:9c:6a:c0:e2:9d:7e:95:0c:9c:12:3d:73:4b:9b: 96:0d:25:07:19:98:5e:6a:7e:44:cc:60:4c:ad:a7:53:d2:af: 61:11:a6:3a:09:a4:7a:e3:ca:d3:99:7a:84:1c:b2:60:82:c6: f2:5d:41:9d:6e:2f:b6:d3:a4:88:1b:c6:c9:25:5b:c7:6f:f7: f4:00:9c:8f:f6:69:86:95:52:88:ae:ab:68:a2:74:f0:d5:21: 54:31:d9:2e:e2:c8:a4:58:a4:52:6b:ea:92:af:36:b3:52:31: d9:9b:5f:a5:59:14:8d:a0:e3:be:01:b1:c6:d8:8c:5a:c0:44: 4c:be:ed:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUwNDI0MjE1MjIwWhcNMjUwNTAxMjE1MjIwWjAYMRYwFAYD VQQDEw02ODBhYjI5NC03MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02rAkNw0LN/WGPKVYYTCGvAihYr+LYx2bXsxzhvuJbnNKXpqwbay3wB88PGg QQlVaEOdcaTgutzfJKKsJNnzUxGtGcVffCTvANCp6nLtSPHVxwSO0EtfhVjeWxax +/4T4DMyTtSfbALE6evhNUPJQT/kkDpbnh6HkliJkyKos1CTHyGYARmDvkZymk+c SzGH06OIy+4kqH2BOdu0YGS0udxFGPncjLrj+Rae5CRKjVHKAo6eV4zw3Q1ulVrw RJzX8xccaLD0IzYXTC14z1LjH0KfkIWtQElZNc5yH7Zw5phRbbSF78vIq4JzOYMg pGEYgXbvSB9DFN60svhEDJ1CWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1aCql4 6dzoDgyyJ0TYypUwgp5+MB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMoLXJ+bWJLvRKBCyXCb1fotouKpdEFt4PP3Dlro+qxWtjplQdnLV becwrLsdFpWwDY8KhxMc5uTHtyT8HE2bunqS8JJQCDjEBUBXVy4AnNCcBBIWhNbb CoUHKtjDEPOKWSaHRR//yAeroZ5ATqIatb6gZ7NeAJuo0lRl7YOVYOLjnGrA4p1+ lQycEj1zS5uWDSUHGZhean5EzGBMradT0q9hEaY6CaR648rTmXqEHLJggsbyXUGd bi+206SIG8bJJVvHb/f0AJyP9mmGlVKIrqtoonTw1SFUMdku4sikWKRSa+qSrzaz UjHZm1+lWRSNoOO+AbHG2IxawERMvu14 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:41 2025 by rpki-client