$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: 2XT0wPz6N6p+eenf1YN+KqaBW/ZDY4/EOSXs0K6sdZk= Subject key identifier: 68:7B:F3:EE:8A:29:31:00:75:82:A4:5B:A5:CA:93:5A:74:71:41:7E Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0226 Signing time: Fri 11 Apr 2025 01:55:15 +0000 Manifest this update: Fri 11 Apr 2025 01:55:15 +0000 Manifest next update: Fri 18 Apr 2025 01:55:15 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: oxIh5qOD5TnA08tedY+lPnJXy+ztzQ1rTdeMDK6r3nA=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Apr 11 01:55:15 2025 GMT Not After : Apr 18 01:55:15 2025 GMT Subject: CN=67f87683-3163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:44:7d:e2:f8:f0:2b:fd:fb:88:4e:63:da: 02:d9:00:30:b5:53:c2:1d:97:14:51:a5:41:17:b0: ee:10:c0:9d:d0:69:ce:cf:66:9c:a2:84:91:99:17: 5f:1b:a3:33:9a:65:14:cc:6e:58:75:b3:53:77:17: 54:70:6b:a2:21:8b:61:6d:5f:8c:e5:6c:62:54:80: c5:63:71:3b:3d:0d:8e:e3:00:9f:dc:25:1a:e5:ec: 1b:0b:ad:5f:23:ac:3e:6c:22:76:16:2c:bf:21:28: f4:b9:71:cc:43:14:aa:3e:a9:74:bc:10:f4:f0:9c: 20:59:49:76:ae:99:40:23:1f:2a:6a:0f:7b:d8:ee: dc:e3:c1:98:7a:03:d6:c9:46:80:c5:64:c3:88:84: 59:50:6c:9e:d6:41:76:e7:a9:4a:be:65:65:a2:97: 49:bb:ba:10:ad:b1:f3:63:7d:93:2b:8c:f2:70:38: ae:89:7e:b0:39:02:c5:dc:6e:06:79:94:b4:85:f1: 95:14:9d:18:c0:48:56:5e:d8:27:d9:ea:cf:f2:e1: 9d:91:16:4a:be:8b:45:ba:9e:90:af:b8:65:3b:ee: e8:74:6f:95:fe:2a:c7:fa:d4:7d:81:f8:40:9b:41: f3:39:df:b5:de:2d:cc:77:0d:1f:86:7a:53:04:b1: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:F3:EE:8A:29:31:00:75:82:A4:5B:A5:CA:93:5A:74:71:41:7E X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:85:48:e8:18:37:61:2e:c1:f5:17:cb:8a:e1:30:9d:9e:cd: b6:2b:85:39:08:d5:e0:19:1e:6e:1a:2b:12:07:6a:ff:36:33: 93:0b:91:26:03:7a:b5:36:d2:92:e6:a4:bc:18:ff:d7:1b:50: f5:9b:f3:53:d7:00:a6:3f:a9:f0:fe:93:7c:89:a8:9d:34:e5: 32:cd:59:52:20:69:98:51:b5:06:c3:b7:48:32:51:1d:28:5c: 5b:ca:93:62:b6:3d:d9:9c:53:d6:8e:06:10:85:25:0d:73:fa: 9e:c7:58:09:d9:e0:4a:97:5e:78:b3:e7:b9:47:9b:f5:41:33: 6e:9f:24:d1:4a:5b:7f:8b:49:10:99:0d:a5:12:4f:5f:ab:06: e6:dd:26:ed:af:b1:d0:1a:ed:ac:e8:b2:ef:fd:f1:d2:f9:91: 13:ef:fe:34:51:80:6c:5a:b6:33:a7:e9:0a:20:15:a1:88:b1: 23:26:5a:b2:dd:fa:d1:5d:b1:6e:d7:09:43:e4:dd:c1:30:7f: c2:9b:58:95:cb:33:a4:20:82:64:b8:dd:f3:67:e3:5f:4f:eb: 6c:1e:37:c2:fc:14:17:68:9a:44:62:ec:29:0d:8f:24:32:d0: ca:75:e5:0a:f2:c0:f9:24:ca:c7:77:d9:02:90:28:50:1a:f4: e2:21:ac:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwNDExMDE1NTE1WhcNMjUwNDE4MDE1NTE1WjAYMRYwFAYD VQQDEw02N2Y4NzY4My0zMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV9EfeL48Cv9+4hOY9oC2QAwtVPCHZcUUaVBF7DuEMCd0GnOz2acooSRmRdf G6MzmmUUzG5YdbNTdxdUcGuiIYthbV+M5WxiVIDFY3E7PQ2O4wCf3CUa5ewbC61f I6w+bCJ2Fiy/ISj0uXHMQxSqPql0vBD08JwgWUl2rplAIx8qag972O7c48GYegPW yUaAxWTDiIRZUGye1kF256lKvmVlopdJu7oQrbHzY32TK4zycDiuiX6wOQLF3G4G eZS0hfGVFJ0YwEhWXtgn2erP8uGdkRZKvotFup6Qr7hlO+7odG+V/irH+tR9gfhA m0HzOd+13i3Mdw0fhnpTBLEaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh78+6K KTEAdYKkW6XKk1p0cUF+MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCthUjoGDdhLsH1F8uK4TCdns22K4U5CNXgGR5uGisSB2r/NjOTC5Em A3q1NtKS5qS8GP/XG1D1m/NT1wCmP6nw/pN8iaidNOUyzVlSIGmYUbUGw7dIMlEd KFxbypNitj3ZnFPWjgYQhSUNc/qex1gJ2eBKl154s+e5R5v1QTNunyTRSlt/i0kQ mQ2lEk9fqwbm3Sbtr7HQGu2s6LLv/fHS+ZET7/40UYBsWrYzp+kKIBWhiLEjJlqy 3frRXbFu1wlD5N3BMH/Cm1iVyzOkIIJkuN3zZ+NfT+tsHjfC/BQXaJpEYuwpDY8k MtDKdeUK8sD5JMrHd9kCkChQGvTiIaxz -----END CERTIFICATE-----Generated at Sat Apr 12 22:23:59 2025 by rpki-client