$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: jHk7f67xO8aRaA6pn2102Pktwgmzz+rFPiYKrRuaZfo= Subject key identifier: EB:CA:82:7D:CD:CE:3A:A9:8C:6B:4C:C3:E6:0A:C6:2E:00:8D:B7:40 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 0192 Signing time: Tue 29 Apr 2025 03:42:52 +0000 Manifest this update: Tue 29 Apr 2025 03:42:52 +0000 Manifest next update: Tue 06 May 2025 03:42:52 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: 7iUMWjAiYj7h+0yaY3oGgIJmiruLgAL6yihxmDJFQZ4=) 2: 7D22B44E249D11EFAC24EF6CC4F9AE02.roa (hash: 5+9jJwjzRyNYN2O27C0xkTXdTv27eYHF2xhj3n4/zw8=) 3: 9772767EB69A11EFBEB6CE0CC4F9AE02.roa (hash: OTItAaxPPemMiPzq6xmShyEDu1glCIdZDgb+Zo6pNyA=) 4: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: H7vSiuNaTY/QVhx1Z+0HnkEM6Adv1NWsmVcvR+Op02o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 03:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Apr 29 03:42:52 2025 GMT Not After : May 6 03:42:52 2025 GMT Subject: CN=68104abc-d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:b2:f7:90:46:82:05:ca:af:be:c7:20:e3: 79:d6:e9:89:93:38:15:f9:2c:05:b3:8c:ef:fd:ad: 83:49:68:7d:df:8b:fd:7c:78:35:d6:dc:de:49:f5: c2:c4:89:b7:6a:8a:00:9a:2a:d9:98:8c:ac:51:2a: 8a:ca:76:a4:d3:64:8d:1a:52:5c:15:a0:96:25:e2: e4:9f:ad:6e:7c:da:33:bf:4a:db:28:de:87:b3:66: c1:06:e9:8b:0c:0f:af:1f:68:64:96:17:32:56:ce: 33:0e:d0:5c:2c:f1:55:b2:1e:6a:07:38:be:b6:1c: de:26:82:eb:9c:86:cb:9a:c9:49:41:b9:59:c9:5d: 00:ce:c1:c2:60:04:eb:13:99:4a:53:d4:4d:05:35: d9:c2:a7:90:79:fe:89:19:d5:68:17:ed:76:88:79: f1:77:01:5c:6b:9c:ab:07:b0:db:e1:03:e5:d7:24: 9e:c7:b3:30:af:50:59:6f:20:80:d6:c6:a2:2c:5f: 1c:8e:16:62:82:b8:55:a1:69:c8:ed:20:9c:b9:4e: 9a:25:71:d3:2f:10:f4:cf:5e:23:81:26:c0:d1:33: 1e:c1:28:83:b3:08:3d:98:cc:0a:b9:6e:89:9e:62: e3:40:b7:c6:bb:88:a3:e1:e4:c9:3b:08:a4:11:8e: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:82:7D:CD:CE:3A:A9:8C:6B:4C:C3:E6:0A:C6:2E:00:8D:B7:40 X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b3:ed:b0:78:83:0a:9d:c6:6f:39:d3:5c:ea:b7:85:d5:db: 12:a6:c7:d3:c4:0e:bc:33:a7:00:3f:ea:5c:bf:90:76:ae:ab: b0:0f:03:c2:b8:14:e6:e6:f7:c8:14:2c:46:15:1a:27:2b:d3: 71:2d:75:53:86:a7:81:42:85:6c:64:8f:50:26:79:07:88:6f: a4:52:0d:1f:03:d4:f4:69:8b:2f:4d:ee:5b:19:3a:2a:5f:66: 99:69:84:20:d5:0d:3a:4b:fa:2a:12:3a:79:0d:12:91:bf:87: a4:61:bc:7b:67:7b:6f:dd:a2:f7:bb:e8:15:a1:52:0d:73:ef: e3:95:15:c5:5f:ec:39:61:40:a3:79:26:32:25:30:40:16:3e: 72:e9:45:bd:dc:b5:59:fa:64:2b:01:a1:a3:07:fd:7a:e1:07: d5:02:06:89:47:bc:0d:db:4f:89:06:ae:74:7e:a2:15:cf:73: 7e:cc:c4:fc:73:03:94:fa:c3:9b:d1:95:49:0b:9b:41:85:be: 4a:c9:a3:68:2e:a7:fa:33:95:c6:61:b7:44:fe:2f:29:aa:aa: 62:36:53:45:30:8a:5e:d9:ad:60:92:85:af:19:ed:86:ac:bc: 10:1f:92:ec:fd:8c:86:66:c2:72:7f:c9:f5:e7:f5:c4:7a:b2: de:7f:00:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjUwNDI5MDM0MjUyWhcNMjUwNTA2MDM0MjUyWjAYMRYwFAYD VQQDEw02ODEwNGFiYy1kOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQay95BGggXKr77HION51umJkzgV+SwFs4zv/a2DSWh934v9fHg11tzeSfXC xIm3aooAmirZmIysUSqKynak02SNGlJcFaCWJeLkn61ufNozv0rbKN6Hs2bBBumL DA+vH2hklhcyVs4zDtBcLPFVsh5qBzi+thzeJoLrnIbLmslJQblZyV0AzsHCYATr E5lKU9RNBTXZwqeQef6JGdVoF+12iHnxdwFca5yrB7Db4QPl1ySex7Mwr1BZbyCA 1saiLF8cjhZigrhVoWnI7SCcuU6aJXHTLxD0z14jgSbA0TMewSiDswg9mMwKuW6J nmLjQLfGu4ij4eTJOwikEY7vHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvKgn3N zjqpjGtMw+YKxi4AjbdAMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNs+2weIMKncZvOdNc6reF1dsSpsfTxA68M6cAP+pcv5B2rquwDwPC uBTm5vfIFCxGFRonK9NxLXVThqeBQoVsZI9QJnkHiG+kUg0fA9T0aYsvTe5bGToq X2aZaYQg1Q06S/oqEjp5DRKRv4ekYbx7Z3tv3aL3u+gVoVINc+/jlRXFX+w5YUCj eSYyJTBAFj5y6UW93LVZ+mQrAaGjB/164QfVAgaJR7wN20+JBq50fqIVz3N+zMT8 cwOU+sOb0ZVJC5tBhb5KyaNoLqf6M5XGYbdE/i8pqqpiNlNFMIpe2a1gkoWvGe2G rLwQH5Ls/YyGZsJyf8n15/XEerLefwBr -----END CERTIFICATE-----Generated at Wed Apr 30 12:26:25 2025 by rpki-client