$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft File: Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json) Hash identifier: Qs0BLv02Q1iQoPbX14fphqkK89UKygdTMAt9YUdM8ds= Subject key identifier: AE:2C:92:BC:5F:11:25:1A:5D:BB:8A:1F:C7:23:EE:90:D7:24:7F:3A Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Certificate serial: 19CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft Manifest number: 19B5 Signing time: Mon 14 Apr 2025 16:23:52 +0000 Manifest this update: Mon 14 Apr 2025 16:23:52 +0000 Manifest next update: Mon 21 Apr 2025 16:23:52 +0000 Files and hashes: 1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: N6/kn369UDrN4xfZPnNZTIKhERajroiCMctqthc4MzU=) 2: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (hash: 9+3UyD1Q20e2zV38LX7bdeMBcGdkBg9w+aGhhPmiSEQ=) 3: 1AC872EC2C9611EF84447F23C4F9AE02.roa (hash: rN5yihShhKdLjzPd/w3ifbi99zxrtnFDkYTWJsfuvtE=) 4: CDD1E222775711EF95F9762FC4F9AE02.roa (hash: LmTJ1lQGy1Mj6ugXjLYPPR+nI+hGGbLoo3EtkR/Iu6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6603 (0x19cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Validity Not Before: Apr 14 16:23:52 2025 GMT Not After : Apr 21 16:23:52 2025 GMT Subject: CN=67fd3698-c0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:fe:80:0c:64:ce:82:8a:f7:d5:4d:ec:8b: 49:35:3b:e3:f4:d9:95:85:44:eb:0a:78:f9:11:ea: 61:3f:d0:46:d6:49:c0:d8:8f:22:10:24:ef:a0:e3: 49:32:c3:50:15:66:b9:8a:dd:d2:6d:b6:ef:a7:8f: ca:09:a7:02:a7:e5:65:b7:bc:f3:56:e7:11:2e:d9: 40:55:e0:99:b3:f3:47:23:d3:c4:29:ae:ef:72:d4: 20:46:87:a3:a1:5b:79:c2:71:13:96:4e:36:13:da: 89:24:de:fa:d3:c3:9d:7f:4a:f0:cc:93:d0:7a:1a: e9:71:fa:01:6e:62:cf:c5:e4:de:4e:3f:02:16:6b: e7:5c:44:d3:de:82:76:6a:f3:80:d1:f6:79:da:39: 26:d6:30:15:3b:cc:af:73:3e:c8:7a:cd:29:4e:81: fe:d4:5a:b7:87:e0:1c:a9:4e:8b:4d:7d:ad:d0:14: ae:fd:87:3b:79:62:59:c7:fc:21:44:c9:83:fe:0b: c4:53:2f:f9:18:32:7a:3b:f1:55:3a:c9:62:b1:70: 35:58:65:2e:af:a0:05:d3:d6:ea:5f:f8:c8:bf:6b: 91:59:78:09:39:08:9a:2a:a2:6f:ed:7d:76:b5:0a: 04:0e:16:59:67:76:ae:99:d7:85:17:55:eb:8c:2e: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:92:BC:5F:11:25:1A:5D:BB:8A:1F:C7:23:EE:90:D7:24:7F:3A X509v3 Authority Key Identifier: keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:88:74:7a:fe:8b:54:f5:7a:67:29:c2:d6:1d:ff:90:b7: 40:eb:d5:88:48:85:27:8b:28:c3:85:c0:1d:2e:68:b9:73:03: 68:00:01:61:a5:3a:33:2e:4c:3d:c6:76:6c:c5:cc:1f:f3:df: ab:59:aa:c9:28:ce:b2:bd:ec:39:e1:a6:70:9f:79:42:1f:ad: 97:14:c0:7b:13:1b:a2:2e:f9:c0:2b:f3:33:11:d7:9b:2d:f0: 75:a6:6d:b7:e8:03:f0:7c:1f:40:3c:fe:d5:58:f9:c6:6b:12: 7c:25:18:af:58:f6:16:2c:73:92:3d:98:69:43:0f:c3:8d:37: 40:39:28:5f:1a:5b:d6:c9:de:4a:4c:f4:67:0d:bf:6a:70:e5: 6b:3b:4a:df:0e:03:89:26:79:2f:11:40:7a:1a:ea:a7:3c:de: 25:5e:72:93:99:dd:55:8d:53:dc:05:e1:dc:9b:f8:5a:e2:c2: 40:d0:ab:0b:b1:86:36:69:36:78:67:0d:78:b3:3d:68:f9:f2: 41:f9:04:32:2b:e9:09:6f:76:8f:bf:81:b4:d5:36:22:4c:43: c3:01:39:24:66:e7:d0:98:14:2c:26:50:3a:c1:8e:53:c7:89: 41:ae:27:5b:cb:76:09:98:b8:11:99:a6:bf:42:e1:ab:ba:db: 4f:1a:99:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyQUUxMTAvBgNVBAUTKDREQUE3NzZGODc5MjgwMEY0MkI4OTc4MEYzMkQ5RTcz Mjc2MTU1RDQwHhcNMjUwNDE0MTYyMzUyWhcNMjUwNDIxMTYyMzUyWjAYMRYwFAYD VQQDEw02N2ZkMzY5OC1jMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C7+gAxkzoKK99VN7ItJNTvj9NmVhUTrCnj5EephP9BG1knA2I8iECTvoONJ MsNQFWa5it3Sbbbvp4/KCacCp+Vlt7zzVucRLtlAVeCZs/NHI9PEKa7vctQgRoej oVt5wnETlk42E9qJJN7608Odf0rwzJPQehrpcfoBbmLPxeTeTj8CFmvnXETT3oJ2 avOA0fZ52jkm1jAVO8yvcz7Ies0pToH+1Fq3h+AcqU6LTX2t0BSu/Yc7eWJZx/wh RMmD/gvEUy/5GDJ6O/FVOslisXA1WGUur6AF09bqX/jIv2uRWXgJOQiaKqJv7X12 tQoEDhZZZ3aumdeFF1XrjC44AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4skrxf ESUaXbuKH8cj7pDXJH86MB8GA1UdIwQYMBaAFE2qd2+HkoAPQriXgPMtnnMnYVXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTJBRS8zMzZFRjY3NjYw RTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dBOUN1SmVBOHkyZWN5ZGhW ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RhcDNiNGVTZ0E5Q3VKZUE4eTJlY3lkaFZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTJBRS8zMzZFRjY3NjYwRTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dB OUN1SmVBOHkyZWN5ZGhWZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzMIh0ev6LVPV6ZynC1h3/kLdA69WISIUniyjDhcAdLmi5cwNoAAFh pTozLkw9xnZsxcwf89+rWarJKM6yvew54aZwn3lCH62XFMB7ExuiLvnAK/MzEdeb LfB1pm236APwfB9APP7VWPnGaxJ8JRivWPYWLHOSPZhpQw/DjTdAOShfGlvWyd5K TPRnDb9qcOVrO0rfDgOJJnkvEUB6GuqnPN4lXnKTmd1VjVPcBeHcm/ha4sJA0KsL sYY2aTZ4Zw14sz1o+fJB+QQyK+kJb3aPv4G01TYiTEPDATkkZufQmBQsJlA6wY5T x4lBridby3YJmLgRmaa/QuGruttPGpmG -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:07 2025 by rpki-client