$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: kKf6/erIpSbLxdBkkzXrHmpikEzsrmH2oPpz6VfVCMw= Subject key identifier: 55:0E:08:3F:A3:62:52:E8:A8:06:B5:E1:C5:AA:44:9D:9C:B8:55:F0 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: 95 Signing time: Fri 25 Apr 2025 05:22:52 +0000 Manifest this update: Fri 25 Apr 2025 05:22:51 +0000 Manifest next update: Fri 02 May 2025 05:22:51 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: rFwKXcK+Z/Bf6sabpbnxUZhMlpVTA1z4X4MNXvRqY4c=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Apr 25 05:22:51 2025 GMT Not After : May 2 05:22:51 2025 GMT Subject: CN=680b1c2b-9770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:0c:d6:80:6e:7a:ec:af:7c:24:04:3d:c9: 03:c3:d3:06:42:ca:91:ff:6b:5e:1e:0d:69:bc:f8: c6:41:9a:ae:9e:6e:4e:e2:ba:dc:5a:c2:16:61:3c: 7f:b3:e9:ff:25:5d:82:ca:55:8a:cc:a5:ea:53:c7: 7d:6a:75:52:79:99:d4:18:64:68:45:49:3b:63:44: dd:a8:2f:24:02:06:a9:fd:2d:ca:1f:e4:1a:ae:79: 78:87:ca:94:d9:e2:2e:4d:87:99:22:30:b1:81:8b: 83:11:2b:75:7d:6b:f2:98:7e:14:2d:4b:af:60:a6: f8:bd:14:6e:8e:04:eb:f3:04:a5:6c:39:6c:e9:fe: 0a:43:3b:ec:36:ba:77:e9:15:fd:97:19:64:25:d7: 4b:1c:ec:65:9b:6b:28:4d:27:7a:20:f1:8a:7f:71: 03:e3:37:bc:3c:fa:9a:89:af:36:a6:13:ae:96:8b: 0f:4d:be:b8:a5:1e:6c:c2:8e:15:f8:d4:66:18:62: 5c:6f:f2:71:63:c3:88:dc:55:d1:c4:4d:60:cd:cd: 4c:37:fd:10:6c:c6:97:79:90:41:97:37:bb:0d:cf: 08:b8:2b:df:f8:d9:a8:89:be:b4:f5:d8:9e:1f:33: eb:d1:ec:7f:75:d5:c0:72:af:1d:dc:eb:30:37:1e: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0E:08:3F:A3:62:52:E8:A8:06:B5:E1:C5:AA:44:9D:9C:B8:55:F0 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6e:a0:c4:44:f1:11:a2:87:6c:bd:43:37:5a:7b:f1:74:6d: 12:8c:78:0d:0e:90:6e:f9:3e:c1:2b:2f:43:1e:b4:fa:ad:8d: ec:50:8b:6f:55:c3:21:06:ec:4d:c8:3b:64:92:9f:cc:4c:fd: 52:f8:37:7c:89:fc:60:51:08:c1:c5:f9:d1:87:e5:87:5a:1f: d4:e4:b9:39:05:24:50:3a:c6:09:8c:06:01:b7:01:ed:58:cf: 13:a9:04:13:f0:3f:07:b1:18:b2:fe:5f:3a:f9:34:ac:0c:a4: 7e:8f:13:c7:df:7e:cc:43:e7:1e:5d:d8:54:99:f5:e5:86:77: d8:1d:7d:7c:e4:45:11:27:12:1a:0d:50:1e:b8:bc:a5:43:7c: 24:bb:28:2f:b2:cf:c6:22:38:26:ee:b5:fc:04:be:a6:00:25: ce:44:81:95:8e:17:af:6a:a3:f7:ac:d3:1b:9d:7b:8f:0a:13: 1c:8c:4d:60:35:b4:7d:ac:f7:60:8f:ee:19:5c:b3:b4:b9:aa: 3c:46:33:8a:eb:1d:74:e5:b6:75:1f:ba:9c:f7:5c:6c:79:61: 6c:64:44:54:47:a0:7e:20:cc:99:0e:7d:e2:5f:10:63:47:2d: 85:76:0b:f0:47:84:d6:e8:72:bb:22:f1:d3:59:49:06:a6:b4: e4:dc:d7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwNDI1MDUyMjUxWhcNMjUwNTAyMDUyMjUxWjAYMRYwFAYD VQQDEw02ODBiMWMyYi05NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHoM1oBueuyvfCQEPckDw9MGQsqR/2teHg1pvPjGQZqunm5O4rrcWsIWYTx/ s+n/JV2CylWKzKXqU8d9anVSeZnUGGRoRUk7Y0TdqC8kAgap/S3KH+Qarnl4h8qU 2eIuTYeZIjCxgYuDESt1fWvymH4ULUuvYKb4vRRujgTr8wSlbDls6f4KQzvsNrp3 6RX9lxlkJddLHOxlm2soTSd6IPGKf3ED4ze8PPqaia82phOulosPTb64pR5swo4V +NRmGGJcb/JxY8OI3FXRxE1gzc1MN/0QbMaXeZBBlze7Dc8IuCvf+Nmoib609die HzPr0ex/ddXAcq8d3OswNx6wPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUOCD+j YlLoqAa14cWqRJ2cuFXwMB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKbqDERPERoodsvUM3WnvxdG0SjHgNDpBu+T7BKy9DHrT6rY3sUItv VcMhBuxNyDtkkp/MTP1S+Dd8ifxgUQjBxfnRh+WHWh/U5Lk5BSRQOsYJjAYBtwHt WM8TqQQT8D8HsRiy/l86+TSsDKR+jxPH337MQ+ceXdhUmfXlhnfYHX185EURJxIa DVAeuLylQ3wkuygvss/GIjgm7rX8BL6mACXORIGVjhevaqP3rNMbnXuPChMcjE1g NbR9rPdgj+4ZXLO0uao8RjOK6x105bZ1H7qc91xseWFsZERUR6B+IMyZDn3iXxBj Ry2FdgvwR4TW6HK7IvHTWUkGprTk3NdZ -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:49 2025 by rpki-client