$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: GfkLgFZ6NgRg0flnduRlmZAk0d9j8crxvlHiX4e3eK8= Subject key identifier: B2:10:D7:4A:A9:E8:51:9B:F5:61:07:1A:73:2F:AB:DE:F0:AC:9C:73 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C17 Signing time: Thu 24 Apr 2025 18:32:16 +0000 Manifest this update: Thu 24 Apr 2025 18:32:15 +0000 Manifest next update: Thu 01 May 2025 18:32:15 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: jFC/wg1cQOqVj4DLh24ccL61BzJ1/20BQkH1IgbEKWc=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Apr 24 18:32:15 2025 GMT Not After : May 1 18:32:15 2025 GMT Subject: CN=680a83b0-9b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:69:a0:f3:cc:f4:1c:29:66:6b:7b:ea:0c: 88:27:4f:d0:45:81:5e:6e:87:d5:da:23:e0:fd:c6: e9:24:79:48:15:03:3e:90:ca:e1:6c:58:d8:81:95: 3c:2e:3c:af:be:98:ff:4a:e6:8e:5a:7f:0b:1f:f3: ba:53:e5:84:b6:7b:76:bd:f2:6b:58:b8:1a:6a:fc: 34:43:1f:4e:38:13:86:65:8b:c1:41:cf:80:16:ff: 0b:9e:d9:aa:5c:76:e8:31:c1:8c:67:92:09:59:e6: 0e:f0:b9:f3:a8:ab:24:57:59:3f:63:31:cb:25:b1: 41:17:19:ee:29:5a:bc:51:28:dd:fd:b9:d7:ae:e8: d8:cb:28:e3:00:76:84:76:2c:0a:9c:55:75:8b:b2: 90:6e:17:28:12:79:a7:b4:1d:9d:df:e7:84:6c:82: d3:be:41:24:79:c3:4c:86:e0:a9:cc:5c:5f:d9:31: 72:a1:64:57:a7:8a:cd:b1:e5:ca:d0:ed:ba:8e:10: c6:54:d5:c6:fb:51:d0:cc:64:54:b1:cf:b5:b0:82: 8d:6d:10:f6:fd:67:9c:fb:09:5f:94:fb:d8:ed:a5: 7c:5d:4d:e5:6d:36:20:67:1f:f4:df:48:bd:ee:da: 9c:ff:7e:14:3f:33:7d:a9:0e:a0:23:1f:ae:ae:a8: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:D7:4A:A9:E8:51:9B:F5:61:07:1A:73:2F:AB:DE:F0:AC:9C:73 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:66:29:6b:32:c1:50:c5:f0:b5:73:aa:11:73:60:b9:8b:6c: c6:a1:35:00:2a:45:b3:46:7c:c4:48:f7:d9:a7:34:b9:29:ef: 8d:38:e0:8f:ae:23:09:13:09:cc:dc:39:b4:20:0d:38:70:5f: b7:16:ba:b5:0d:41:24:1c:04:b6:e1:57:7f:83:ee:82:4a:a5: 18:f8:48:1a:4e:a8:67:fc:ec:4d:27:89:fa:d9:dd:62:66:5c: 48:6b:87:89:c9:8f:4c:60:bc:85:f8:01:25:0c:d2:66:81:2a: ee:57:3e:5d:38:44:d3:6d:10:66:24:b2:fc:0f:03:b1:ac:87: a9:3c:e1:99:d5:b9:6c:c4:1d:16:96:05:77:b4:b8:61:46:ac: dc:85:12:e4:56:2a:8f:c1:d7:3b:4d:8e:6c:a1:bf:88:65:b4: a3:de:ab:42:6f:3b:55:11:dd:0c:d5:cc:b9:8b:28:d1:94:77: 8d:0c:75:7d:a0:e5:e2:10:5e:e0:41:96:b6:22:c5:60:40:0b: f6:f2:f4:0f:08:fc:30:09:f0:12:7c:8c:2b:bd:d3:5f:77:31: f4:7d:fc:21:c4:8a:3c:a5:93:c6:4e:32:21:59:7b:38:c5:d0: 90:9b:a1:f6:8a:13:15:a5:58:7b:5e:66:9b:b3:8c:03:42:82: 5e:5c:7b:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNDI0MTgzMjE1WhcNMjUwNTAxMTgzMjE1WjAYMRYwFAYD VQQDEw02ODBhODNiMC05YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDZpoPPM9BwpZmt76gyIJ0/QRYFebofV2iPg/cbpJHlIFQM+kMrhbFjYgZU8 Ljyvvpj/SuaOWn8LH/O6U+WEtnt2vfJrWLgaavw0Qx9OOBOGZYvBQc+AFv8Lntmq XHboMcGMZ5IJWeYO8LnzqKskV1k/YzHLJbFBFxnuKVq8USjd/bnXrujYyyjjAHaE diwKnFV1i7KQbhcoEnmntB2d3+eEbILTvkEkecNMhuCpzFxf2TFyoWRXp4rNseXK 0O26jhDGVNXG+1HQzGRUsc+1sIKNbRD2/Wec+wlflPvY7aV8XU3lbTYgZx/030i9 7tqc/34UPzN9qQ6gIx+urqhA+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIQ10qp 6FGb9WEHGnMvq97wrJxzMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwZilrMsFQxfC1c6oRc2C5i2zGoTUAKkWzRnzESPfZpzS5Ke+NOOCP riMJEwnM3Dm0IA04cF+3Frq1DUEkHAS24Vd/g+6CSqUY+EgaTqhn/OxNJ4n62d1i ZlxIa4eJyY9MYLyF+AElDNJmgSruVz5dOETTbRBmJLL8DwOxrIepPOGZ1blsxB0W lgV3tLhhRqzchRLkViqPwdc7TY5sob+IZbSj3qtCbztVEd0M1cy5iyjRlHeNDHV9 oOXiEF7gQZa2IsVgQAv28vQPCPwwCfASfIwrvdNfdzH0ffwhxIo8pZPGTjIhWXs4 xdCQm6H2ihMVpVh7Xmabs4wDQoJeXHv1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:30 2025 by rpki-client