$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json) Hash identifier: yZ1i5bknVL1xMiyA5jTps0pEGy0z83hb61rV2KQJhZ8= Subject key identifier: D8:29:5B:6F:AB:EB:92:B6:49:95:99:5A:B2:49:59:8C:EB:EF:CC:4A Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft Manifest number: 065C Signing time: Thu 24 Apr 2025 22:14:26 +0000 Manifest this update: Thu 24 Apr 2025 22:14:25 +0000 Manifest next update: Thu 01 May 2025 22:14:25 +0000 Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: luXHu+QSH/vB234BaMxck/cVHwiT1NAfVvkbMEgcyNc=) 2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: wvKmIi2++zbJbE9MCN6birY4f8q7zR7YkJ8AOwoHL0c=) 3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: enNVOzFUB83x7iJjfLJWQJYDSM1EIlchFYs8Y1Lu3uk=) 4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: Apr 24 22:14:25 2025 GMT Not After : May 1 22:14:25 2025 GMT Subject: CN=680ab7c2-356b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2a:68:56:81:c6:9d:80:0a:c3:08:a0:f4:41: 03:67:08:8a:41:5a:04:37:0b:30:bc:8d:a9:4e:7d: 10:38:e6:83:2e:9a:04:25:d0:14:a6:e3:2c:21:66: 05:ec:a8:2b:27:ba:36:12:b0:0f:66:24:6e:52:be: 82:c7:e8:07:7a:fa:ae:63:7c:c6:af:3d:4a:77:85: 2b:95:90:a9:18:7a:a1:85:d9:6c:c0:3f:5b:b7:88: 20:15:44:e0:ec:1c:3a:39:17:e3:9d:03:6b:b8:30: df:7a:43:42:c2:40:f6:3e:ec:ed:85:88:a7:06:b8: eb:d8:fe:65:da:3a:27:5a:f3:1c:7f:f2:dd:fd:8a: 35:c5:c6:9a:43:5a:33:f8:24:ee:06:27:2b:d8:f5: 48:55:c8:29:37:89:3f:88:df:0b:54:c7:c9:00:80: e0:61:8f:af:b4:7d:a1:16:26:0b:64:17:e1:b4:96: 98:8f:d7:b3:79:99:28:2d:f1:ed:f4:6b:01:1d:86: 6b:73:30:9d:91:05:17:89:75:4b:e5:ff:56:02:05: 4f:b6:be:8c:c9:35:2e:ea:e1:a6:08:69:b4:34:88: a8:44:77:b6:4a:4f:6f:ad:64:d3:ec:b6:77:8f:42: 05:33:ec:35:72:04:0c:9a:d9:f6:a4:3a:a4:bd:99: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:5B:6F:AB:EB:92:B6:49:95:99:5A:B2:49:59:8C:EB:EF:CC:4A X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:89:33:ce:3c:d6:4c:30:b7:77:92:19:83:26:fc:a6:a8:f3: 4a:0a:74:19:5e:3c:b4:fa:06:50:7c:73:fc:e6:05:82:7c:4e: 9a:92:a6:c7:20:65:25:f5:7f:bb:fb:5f:c3:7d:c9:71:4c:e5: 81:d9:91:e3:f8:1a:b9:c2:11:13:3a:71:14:68:77:c1:51:35: 61:03:ae:ed:b7:cb:2d:d6:64:8d:a6:a9:d4:bc:52:96:6b:0a: 92:19:00:fc:a2:b8:a0:79:1c:88:e3:d5:77:8f:0c:22:aa:e5: 4f:76:49:f1:86:95:cd:5b:69:e6:03:67:77:72:f7:39:9c:10: 16:99:e5:4e:ba:b2:9f:62:54:b5:97:f2:ad:db:5c:f0:43:b4: 74:e1:ff:71:a0:1b:33:47:17:3b:7d:3b:07:f8:1d:da:ae:ec: 01:5d:1b:fb:85:d3:38:c9:2b:54:19:cf:6a:87:c9:26:b9:a8: ec:f4:8a:42:75:b6:91:3f:46:90:7a:2c:7a:80:2f:3b:e1:70: ed:7b:95:ce:c7:f4:ae:fe:7f:86:c0:9c:e9:f2:92:70:47:b0: d3:cb:22:9d:f2:ea:8d:94:54:2b:31:d5:de:72:63:75:aa:92: de:1b:65:40:bf:e8:a9:2a:94:95:3b:16:79:16:9f:69:f6:ee: 4f:49:8f:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjUwNDI0MjIxNDI1WhcNMjUwNTAxMjIxNDI1WjAYMRYwFAYD VQQDEw02ODBhYjdjMi0zNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CpoVoHGnYAKwwig9EEDZwiKQVoENwswvI2pTn0QOOaDLpoEJdAUpuMsIWYF 7KgrJ7o2ErAPZiRuUr6Cx+gHevquY3zGrz1Kd4UrlZCpGHqhhdlswD9bt4ggFUTg 7Bw6ORfjnQNruDDfekNCwkD2PuzthYinBrjr2P5l2jonWvMcf/Ld/Yo1xcaaQ1oz +CTuBicr2PVIVcgpN4k/iN8LVMfJAIDgYY+vtH2hFiYLZBfhtJaYj9ezeZkoLfHt 9GsBHYZrczCdkQUXiXVL5f9WAgVPtr6MyTUu6uGmCGm0NIioRHe2Sk9vrWTT7LZ3 j0IFM+w1cgQMmtn2pDqkvZk0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgpW2+r 65K2SZWZWrJJWYzr78xKMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5 UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCiTPOPNZMMLd3khmDJvymqPNKCnQZXjy0+gZQfHP85gWCfE6akqbH IGUl9X+7+1/DfclxTOWB2ZHj+Bq5whETOnEUaHfBUTVhA67tt8st1mSNpqnUvFKW awqSGQD8origeRyI49V3jwwiquVPdknxhpXNW2nmA2d3cvc5nBAWmeVOurKfYlS1 l/Kt21zwQ7R04f9xoBszRxc7fTsH+B3aruwBXRv7hdM4yStUGc9qh8kmuajs9IpC dbaRP0aQeix6gC874XDte5XOx/Su/n+GwJzp8pJwR7DTyyKd8uqNlFQrMdXecmN1 qpLeG2VAv+ipKpSVOxZ5Fp9p9u5PSY8Z -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:44 2025 by rpki-client