$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: f23c/AQtdfyitDrzSYsGU4SF4/bGGhaGlti74UzFjmM= Subject key identifier: 61:67:8A:7C:3F:57:E2:D6:20:BA:D3:D9:90:6B:2C:B3:8E:F6:6F:D2 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 1076 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0E48 Signing time: Fri 28 Mar 2025 19:18:54 +0000 Manifest this update: Fri 28 Mar 2025 19:18:54 +0000 Manifest next update: Fri 04 Apr 2025 19:18:54 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: jqJsNWFeqU+qzHJVwkXSP6LCDHA7WMlbh7DZociqXUw=) 2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: zHzWpn3mnsOfvTNZTI8jar+PLrByMmMa5fTBk5pULgI=) 3: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: IX+LKV7VvPnEWznfRdlyFlyrqBtHLlGXeTIU3OeySck=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: rp15KoHPh9KPJUHupa2yc5uH/WLKjcA8xJBwyfWBGDI=) 5: 98C09866F53911EF8CC5C33AC4F9AE02.roa (hash: aKyawlMZ4Qq+wbgdOVEXMIljXe8a6bRthkUFF11RbxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4214 (0x1076) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0 Validity Not Before: Mar 28 19:18:54 2025 GMT Not After : Apr 4 19:18:54 2025 GMT Subject: CN=67e6f61e-62ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:f5:ea:65:ad:94:8d:73:3f:40:02:04:56: 36:70:53:19:92:b8:1b:ae:8f:6a:6d:4e:e8:49:82: d8:09:61:8f:47:f5:1b:3f:b4:a2:70:d3:40:2f:4b: 71:5f:d1:b3:06:a2:35:b3:4f:18:26:7c:f4:0d:c7: d3:91:8e:1f:ad:db:da:1c:69:1f:b1:b4:ea:2e:5e: ed:3f:09:ff:32:a8:9d:35:51:c3:7a:90:0f:90:30: 5e:fd:72:f4:2e:e2:2a:92:43:31:af:f6:79:67:e5: 2d:61:8c:f5:e3:86:43:4f:be:ef:05:c0:2f:77:13: 95:a7:8a:13:8f:31:52:18:d9:94:99:1c:00:ee:eb: 23:5a:36:63:69:3d:a6:3e:c9:2b:52:a6:d9:10:32: 61:e3:c1:ba:f8:2e:c4:78:b7:a0:ae:b1:da:10:e9: 1a:63:75:d4:e1:41:30:17:73:9f:55:56:47:7f:4c: ab:f1:fa:18:d1:5e:0f:a7:1a:6b:c5:b1:1b:ba:3c: c2:f4:5b:74:31:31:72:07:87:d6:c2:99:95:4d:87: ab:4d:ee:63:a6:a0:ab:4e:52:40:21:36:75:de:12: af:e0:1c:94:47:f4:c5:7e:00:2d:b5:05:e1:95:63: 78:f9:f3:53:a1:b2:b1:fe:52:a1:6f:0e:4b:2d:92: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:8A:7C:3F:57:E2:D6:20:BA:D3:D9:90:6B:2C:B3:8E:F6:6F:D2 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:43:11:67:4d:65:fc:89:f1:79:d8:cc:c7:0f:c2:b9:12:20: 19:a9:a3:d4:81:2c:2a:1d:ce:a0:7c:9b:e1:ae:73:d2:3d:1b: b9:a7:c4:eb:4d:bf:c6:3c:7c:27:61:5f:07:bd:60:20:d2:1e: ba:8b:df:8b:ef:74:3b:0a:1b:d5:53:df:78:04:48:cc:a7:32: 50:a4:94:32:77:bc:79:0b:43:5f:01:74:25:38:37:e6:4d:1f: d1:13:56:1b:0d:b9:88:51:bc:20:3e:84:98:b1:c2:89:c8:78: 37:79:87:5f:9a:d5:2c:c7:2d:5c:28:3a:c0:11:e4:4b:4a:2a: 40:58:ac:74:55:05:88:6b:7c:a8:c8:91:0c:98:73:60:53:aa: b0:4f:d4:25:87:c2:1c:66:ef:fc:52:c8:e7:97:58:97:65:0f: 68:8a:0f:0f:7e:c5:e6:17:7f:3a:c0:c5:e4:97:fe:ef:4c:85: 4f:04:11:0f:3a:50:c6:49:71:cb:21:6c:af:fc:40:48:a9:5a: 8c:4e:63:73:b5:bf:29:c8:40:93:ec:61:30:af:43:27:ca:7a: f2:98:d4:b3:8d:a9:81:ae:e8:fe:f1:fe:e3:cb:74:ef:f2:3d: 7c:f7:de:a5:35:56:e2:c4:5a:d0:1f:89:8c:0c:90:ea:6d:97: af:80:6d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUwMzI4MTkxODU0WhcNMjUwNDA0MTkxODU0WjAYMRYwFAYD VQQDEw02N2U2ZjYxZS02MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pH16mWtlI1zP0ACBFY2cFMZkrgbro9qbU7oSYLYCWGPR/UbP7SicNNAL0tx X9GzBqI1s08YJnz0DcfTkY4frdvaHGkfsbTqLl7tPwn/MqidNVHDepAPkDBe/XL0 LuIqkkMxr/Z5Z+UtYYz144ZDT77vBcAvdxOVp4oTjzFSGNmUmRwA7usjWjZjaT2m PskrUqbZEDJh48G6+C7EeLegrrHaEOkaY3XU4UEwF3OfVVZHf0yr8foY0V4Ppxpr xbEbujzC9Ft0MTFyB4fWwpmVTYerTe5jpqCrTlJAITZ13hKv4ByUR/TFfgAttQXh lWN4+fNTobKx/lKhbw5LLZLl+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFninw/ V+LWILrT2ZBrLLOO9m/SMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQxFnTWX8ifF52MzHD8K5EiAZqaPUgSwqHc6gfJvhrnPSPRu5p8Tr Tb/GPHwnYV8HvWAg0h66i9+L73Q7ChvVU994BEjMpzJQpJQyd7x5C0NfAXQlODfm TR/RE1YbDbmIUbwgPoSYscKJyHg3eYdfmtUsxy1cKDrAEeRLSipAWKx0VQWIa3yo yJEMmHNgU6qwT9Qlh8IcZu/8Usjnl1iXZQ9oig8PfsXmF386wMXkl/7vTIVPBBEP OlDGSXHLIWyv/EBIqVqMTmNztb8pyECT7GEwr0MnynrymNSzjamBruj+8f7jy3Tv 8j18996lNVbixFrQH4mMDJDqbZevgG3L -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:00 2025 by rpki-client