$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: MeLxCSbLYj5R3FAhgQVKn/qF5IXHEFqWQRizZRKsrWo= Subject key identifier: 12:E2:10:9D:A4:AC:71:E5:CD:A8:4F:94:88:8B:BB:60:CE:50:82:EF Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 05FB Signing time: Fri 28 Mar 2025 23:14:28 +0000 Manifest this update: Fri 28 Mar 2025 23:14:28 +0000 Manifest next update: Fri 04 Apr 2025 23:14:28 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: x7mPcDjmhfwyZ+cdcheS8iUXwstsSupVHEWymTEvmVk=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4 Validity Not Before: Mar 28 23:14:28 2025 GMT Not After : Apr 4 23:14:28 2025 GMT Subject: CN=67e72d54-821e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:ea:43:83:76:98:90:9d:47:5f:56:92:c4: 2b:1b:52:fd:45:b5:77:78:9a:e6:92:e2:9d:bd:58: 30:a7:e8:47:84:d0:2d:9f:d5:19:6a:7d:db:ed:be: 21:1d:36:e2:41:1d:0f:e9:7b:ee:1a:9e:5b:34:94: 4f:96:1e:06:f8:45:99:70:5e:96:08:76:ad:08:cd: 38:46:76:79:3a:e2:67:94:e2:04:35:b1:0a:cd:12: c8:cb:2d:5a:b8:da:c3:64:4c:c1:14:9a:f7:11:26: f1:09:5c:a8:8b:f9:f0:65:ea:20:a7:bf:9f:7b:64: d2:04:cb:ce:53:05:eb:6e:01:21:45:b7:ee:dc:11: 2a:a7:2a:9e:83:c1:e7:fa:7c:4d:ec:06:3d:67:07: 60:40:6b:f2:27:ce:d6:af:6b:3c:fc:ff:7d:cc:47: 7b:22:7e:bc:db:df:59:6f:c1:f8:af:47:71:55:db: 2c:da:37:f3:86:4c:d3:91:ef:c4:b8:6d:4f:e0:9e: c3:8c:ae:c7:25:d4:45:3b:e6:23:3c:a4:f3:e2:e6: ed:f6:0d:97:b1:79:5a:87:c2:6a:e4:e5:90:b9:05: b3:6e:7c:21:46:0d:fc:40:12:f0:60:fa:26:b3:fc: 15:7e:ee:35:69:00:d6:ad:24:e1:c9:8a:52:b4:5c: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E2:10:9D:A4:AC:71:E5:CD:A8:4F:94:88:8B:BB:60:CE:50:82:EF X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:fb:0b:9d:b2:fb:ea:26:b3:ac:bf:e5:30:c4:d5:c3:cc:57: 87:2a:d1:9f:be:db:c6:be:44:06:38:ec:29:5a:9a:b5:42:e6: 12:52:bd:38:79:b4:eb:33:ec:dc:3a:a1:b5:b7:a7:46:2c:b4: 72:a4:f7:9d:bd:be:43:0a:af:b0:28:ec:83:2c:6c:95:cd:d4: d6:eb:82:00:db:6a:51:4b:f2:1a:0a:c9:61:36:bc:0d:19:56: 95:9c:2a:82:c3:39:e5:28:61:4c:10:7f:6a:f7:86:1b:ee:e6: fd:75:06:cb:87:25:a9:2b:4f:c9:64:d0:a0:13:62:4c:ee:70: aa:05:04:8e:70:fb:3d:85:03:44:fb:97:5b:4b:e6:e4:ed:60: 3c:e6:1a:4d:f3:58:84:9d:b8:6d:5b:34:b7:20:25:1a:17:44: 21:a0:04:d3:bf:f5:5e:60:f5:f8:fa:7b:73:ee:78:98:13:ec: 73:01:de:e3:b6:b1:92:81:08:79:51:ea:67:b8:0d:14:f3:ec: b9:2b:12:d9:b6:ea:15:91:69:9f:05:c0:35:db:03:7a:9e:e5: c4:39:b4:98:9a:10:42:63:38:55:1b:1c:e8:c3:4c:35:6b:3e: cc:41:4a:9c:b9:ba:2e:eb:cc:4f:fd:9a:1c:0a:4b:87:6d:c2: ea:c0:29:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwMzI4MjMxNDI4WhcNMjUwNDA0MjMxNDI4WjAYMRYwFAYD VQQDEw02N2U3MmQ1NC04MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4jqQ4N2mJCdR19WksQrG1L9RbV3eJrmkuKdvVgwp+hHhNAtn9UZan3b7b4h HTbiQR0P6XvuGp5bNJRPlh4G+EWZcF6WCHatCM04RnZ5OuJnlOIENbEKzRLIyy1a uNrDZEzBFJr3ESbxCVyoi/nwZeogp7+fe2TSBMvOUwXrbgEhRbfu3BEqpyqeg8Hn +nxN7AY9ZwdgQGvyJ87Wr2s8/P99zEd7In68299Zb8H4r0dxVdss2jfzhkzTke/E uG1P4J7DjK7HJdRFO+YjPKTz4ubt9g2XsXlah8Jq5OWQuQWzbnwhRg38QBLwYPom s/wVfu41aQDWrSThyYpStFxrZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLiEJ2k rHHlzahPlIiLu2DOUILvMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ+wudsvvqJrOsv+UwxNXDzFeHKtGfvtvGvkQGOOwpWpq1QuYSUr04 ebTrM+zcOqG1t6dGLLRypPedvb5DCq+wKOyDLGyVzdTW64IA22pRS/IaCslhNrwN GVaVnCqCwznlKGFMEH9q94Yb7ub9dQbLhyWpK0/JZNCgE2JM7nCqBQSOcPs9hQNE +5dbS+bk7WA85hpN81iEnbhtWzS3ICUaF0QhoATTv/VeYPX4+ntz7niYE+xzAd7j trGSgQh5UepnuA0U8+y5KxLZtuoVkWmfBcA12wN6nuXEObSYmhBCYzhVGxzow0w1 az7MQUqcubou68xP/ZocCkuHbcLqwCn7 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:06 2025 by rpki-client