$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: +2P8OlBd995HvKZVTbyofKHmyHHKO/GEPf9eSyrcT8o= Subject key identifier: F5:E7:C3:4B:3F:56:17:44:6E:51:B3:F2:9F:A1:8B:3D:8E:B8:13:7B Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 0623 Signing time: Thu 24 Apr 2025 22:33:22 +0000 Manifest this update: Thu 24 Apr 2025 22:33:21 +0000 Manifest next update: Thu 01 May 2025 22:33:21 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: zshI2evrwJ3TX+WcOiRo9IuDJ1ssFm6FhkIoDBU9Bk4=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Apr 24 22:33:21 2025 GMT Not After : May 1 22:33:21 2025 GMT Subject: CN=680abc31-f107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:5d:a2:e8:85:08:15:4e:f7:fb:21:a0:e7: 0a:b3:01:45:9b:b7:d5:03:b7:89:7f:f7:d0:17:33: 6f:63:6e:fc:e5:f5:2d:dd:ed:00:7d:31:81:22:55: ce:37:d5:97:cc:76:5c:45:78:9a:e5:0a:1b:3c:a4: d3:0f:d4:cb:7d:9b:45:21:a4:5b:4f:39:bf:46:cf: 78:b0:cf:11:90:19:cf:79:91:64:71:66:f2:6e:54: 02:05:da:e6:59:db:e9:37:38:9d:50:3b:61:5b:77: eb:92:f3:6f:37:fd:b0:68:e5:09:9e:43:2a:fb:2d: d2:cb:03:db:c2:0f:6f:10:97:4d:9d:3f:59:cc:b7: fe:82:d6:e9:5c:72:56:31:dd:66:c0:94:7b:4a:f8: d4:54:d0:80:c4:0e:26:65:d3:c3:ed:d3:25:37:71: 33:3b:9c:59:0e:19:f7:9a:a6:0b:eb:ec:56:4e:fc: e3:ba:b1:62:84:f8:44:58:fa:60:e9:76:68:6e:f8: 01:79:3a:8d:77:c1:20:31:8d:ff:8b:76:d3:f8:cf: fc:5e:3c:aa:ad:7c:bc:28:d6:88:6a:68:b2:cb:14: a2:48:29:1b:6a:bc:e6:ea:32:59:5c:4f:e4:ef:5f: bd:e9:95:a8:f4:ce:99:18:98:a9:76:7a:f6:dc:e9: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:C3:4B:3F:56:17:44:6E:51:B3:F2:9F:A1:8B:3D:8E:B8:13:7B X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e8:43:ea:13:43:71:bc:6e:30:90:a9:96:f8:93:1b:23:f4: 35:33:7e:3a:7d:f5:5f:eb:b4:7a:40:5e:77:c6:c2:35:2d:bb: ff:9a:98:8a:d6:5e:a0:51:36:7c:56:92:03:60:cd:ee:ae:45: 62:c1:f4:32:37:24:2c:36:29:89:2a:18:c7:96:b9:2a:27:0e: df:c7:7c:46:df:8d:9a:ff:f0:0a:1f:7f:00:d8:7c:3b:fa:d1: b1:fe:64:a5:05:1c:8b:59:28:1e:f2:16:52:b1:b1:f2:87:01: 43:f8:d0:8f:99:52:b8:30:0f:7c:32:ac:9d:3e:8b:0b:5b:bf: 70:a4:53:49:4e:43:c9:f4:d3:50:a0:75:71:ea:b2:48:e0:28: a3:9f:70:c0:c9:89:ee:23:1a:8b:3e:af:b1:2b:d7:f4:37:c4: ec:02:d1:80:a0:21:3c:f0:38:28:97:e5:9f:c5:d3:9e:25:b5: a7:1d:84:6b:b6:22:28:1d:b3:26:aa:d1:74:ba:c5:b4:8c:64: 1d:d8:18:7a:ef:ef:48:c3:3f:4d:65:02:31:11:05:bc:cc:67: 62:12:f5:58:a7:71:06:0c:6b:15:80:cc:b7:79:c2:22:93:e4: 6b:3f:76:9c:35:3c:f3:67:ba:3d:d0:0c:c1:69:da:81:27:aa: c9:ec:15:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwNDI0MjIzMzIxWhcNMjUwNTAxMjIzMzIxWjAYMRYwFAYD VQQDEw02ODBhYmMzMS1mMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwldouiFCBVO9/shoOcKswFFm7fVA7eJf/fQFzNvY2785fUt3e0AfTGBIlXO N9WXzHZcRXia5QobPKTTD9TLfZtFIaRbTzm/Rs94sM8RkBnPeZFkcWbyblQCBdrm WdvpNzidUDthW3frkvNvN/2waOUJnkMq+y3SywPbwg9vEJdNnT9ZzLf+gtbpXHJW Md1mwJR7SvjUVNCAxA4mZdPD7dMlN3EzO5xZDhn3mqYL6+xWTvzjurFihPhEWPpg 6XZobvgBeTqNd8EgMY3/i3bT+M/8XjyqrXy8KNaIamiyyxSiSCkbarzm6jJZXE/k 71+96ZWo9M6ZGJipdnr23OmH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXnw0s/ VhdEblGz8p+hiz2OuBN7MB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ6EPqE0NxvG4wkKmW+JMbI/Q1M346ffVf67R6QF53xsI1Lbv/mpiK 1l6gUTZ8VpIDYM3urkViwfQyNyQsNimJKhjHlrkqJw7fx3xG342a//AKH38A2Hw7 +tGx/mSlBRyLWSge8hZSsbHyhwFD+NCPmVK4MA98MqydPosLW79wpFNJTkPJ9NNQ oHVx6rJI4Cijn3DAyYnuIxqLPq+xK9f0N8TsAtGAoCE88Dgol+WfxdOeJbWnHYRr tiIoHbMmqtF0usW0jGQd2Bh67+9Iwz9NZQIxEQW8zGdiEvVYp3EGDGsVgMy3ecIi k+RrP3acNTzzZ7o90AzBadqBJ6rJ7BU0 -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:23 2025 by rpki-client