$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft File: pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json) Hash identifier: t2JPyoNaO0UfHcfA4eBTidgwAvGaJpg/4uyinf20E1w= Subject key identifier: 92:17:AA:53:1C:39:C7:92:C1:18:81:8B:E3:B8:5A:11:94:DF:15:E0 Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft Manifest number: 040F Signing time: Fri 25 Apr 2025 00:13:15 +0000 Manifest this update: Fri 25 Apr 2025 00:13:14 +0000 Manifest next update: Fri 02 May 2025 00:13:14 +0000 Files and hashes: 1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: IR4MJMRTGCpakyn8vsL+r59BNnxOlzukiSo3e4kkQMI=) 2: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: lIplJdaPasT2KYwLM0CqR2rgchRbxFw1QkPzOjcDDzQ=) 3: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: I/KKCOrgm9HCsHD4UXCBhGaL/wAB3+JEfU4a1X3HO+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Validity Not Before: Apr 25 00:13:14 2025 GMT Not After : May 2 00:13:14 2025 GMT Subject: CN=680ad39b-b31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:16:ab:58:51:02:90:1f:3e:01:ca:69:3d: f9:59:a0:7e:9b:b7:23:37:25:5e:03:a2:87:34:5a: eb:0f:c8:34:39:9c:d1:7d:a0:f4:7d:9d:0f:7b:d8: ad:0a:ca:9c:94:9b:ce:54:93:04:9f:f8:29:1a:94: 86:cd:3a:29:66:0f:fe:3d:67:fe:0e:e1:c7:53:fa: 6e:b8:d0:7b:3a:ae:cd:cd:1a:f9:26:29:41:2c:79: 04:50:da:a9:a0:a9:bb:b6:d5:b2:4b:ed:1f:51:76: 87:8e:f4:0c:3f:1a:05:f1:96:b5:4c:1a:cc:bc:3e: e5:f5:d3:13:13:1c:f3:a5:84:ed:4a:48:97:39:5e: 37:ff:7e:bc:f8:30:6e:7e:53:da:a8:59:5d:c2:99: b6:09:c6:97:cc:02:e8:15:b4:c5:82:c2:cd:40:06: 3b:79:18:ab:00:a9:31:32:60:22:93:3f:66:f1:8e: 30:9b:78:2a:82:62:a8:4f:fa:ed:88:bd:1c:3f:3e: 3f:e4:6e:ad:7a:4a:aa:4f:aa:c7:36:c6:c1:44:ed: 6b:30:28:1b:bc:90:2d:94:75:fb:6c:c5:67:10:62: 66:3f:d4:a3:fd:cb:e7:ad:7f:94:28:e8:89:12:0e: e9:3e:8f:34:e1:e0:48:12:c3:0a:b2:e4:5f:aa:49: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:17:AA:53:1C:39:C7:92:C1:18:81:8B:E3:B8:5A:11:94:DF:15:E0 X509v3 Authority Key Identifier: keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e7:9f:c5:da:1a:e1:18:59:5c:ed:89:57:94:e8:f9:cc:8c: b9:2d:38:77:09:1b:10:77:87:18:0b:fc:55:f8:cb:76:61:b4: 91:6f:df:e4:76:d4:e7:af:47:4e:8a:05:e5:92:88:a4:97:21: a2:47:53:cd:89:78:18:a4:67:64:8f:d0:bd:06:ef:bb:f3:aa: b7:7e:6c:19:07:f0:6d:25:78:23:23:c4:ab:15:a1:75:9c:bf: 62:46:77:0d:fd:89:b6:f4:a9:3f:88:f1:bc:fb:56:01:c0:13: b6:82:59:00:29:7d:69:c6:d4:f0:c9:ac:22:cc:60:fa:31:82: 72:6c:ce:ee:46:da:1a:5e:ee:31:92:e6:2e:fb:91:4e:38:f4: 95:f6:7f:b0:0e:74:13:4c:b6:22:fc:81:69:aa:bb:7c:e2:62: 94:0b:3c:bc:d9:36:16:ca:90:f7:c6:94:d6:28:a8:f5:3c:95: aa:0f:ae:25:9d:76:68:d5:f4:61:c7:5a:e5:c1:ed:cf:aa:96: 89:a3:b6:cd:af:07:21:35:59:30:26:96:a5:b1:60:e5:8b:e8: 91:cd:49:87:44:87:78:f2:4a:74:a1:35:1e:b0:d5:3f:bb:fa: 51:c2:e9:95:f1:59:f1:0a:54:b7:fe:dc:37:26:cf:58:3d:cd: 02:4b:8d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE N0E2Njg1QzYwHhcNMjUwNDI1MDAxMzE0WhcNMjUwNTAyMDAxMzE0WjAYMRYwFAYD VQQDEw02ODBhZDM5Yi1iMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLoWq1hRApAfPgHKaT35WaB+m7cjNyVeA6KHNFrrD8g0OZzRfaD0fZ0Pe9it CsqclJvOVJMEn/gpGpSGzTopZg/+PWf+DuHHU/puuNB7Oq7NzRr5JilBLHkEUNqp oKm7ttWyS+0fUXaHjvQMPxoF8Za1TBrMvD7l9dMTExzzpYTtSkiXOV43/368+DBu flPaqFldwpm2CcaXzALoFbTFgsLNQAY7eRirAKkxMmAikz9m8Y4wm3gqgmKoT/rt iL0cPz4/5G6tekqqT6rHNsbBRO1rMCgbvJAtlHX7bMVnEGJmP9Sj/cvnrX+UKOiJ Eg7pPo804eBIEsMKsuRfqklpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIXqlMc OceSwRiBi+O4WhGU3xXgMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4 NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzc1Qy9BQ0FDMzlCRTY4NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJC M25URFAyOXpiRnJYcG1oY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh55/F2hrhGFlc7YlXlOj5zIy5LTh3CRsQd4cYC/xV+Mt2YbSRb9/k dtTnr0dOigXlkoiklyGiR1PNiXgYpGdkj9C9Bu+786q3fmwZB/BtJXgjI8SrFaF1 nL9iRncN/Ym29Kk/iPG8+1YBwBO2glkAKX1pxtTwyawizGD6MYJybM7uRtoaXu4x kuYu+5FOOPSV9n+wDnQTTLYi/IFpqrt84mKUCzy82TYWypD3xpTWKKj1PJWqD64l nXZo1fRhx1rlwe3PqpaJo7bNrwchNVkwJpalsWDli+iRzUmHRId48kp0oTUesNU/ u/pRwumV8VnxClS3/tw3Js9YPc0CS40f -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:53 2025 by rpki-client