$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: BZiUFtJXtmYkvPpbmmgIn5T9VnuUAyvZTCMn2LB7P44= Subject key identifier: DF:FB:74:1B:DC:48:79:A4:1D:CC:56:59:1B:94:1F:45:41:E6:04:76 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 348D Signing time: Thu 10 Apr 2025 14:31:28 +0000 Manifest this update: Thu 10 Apr 2025 14:31:27 +0000 Manifest next update: Thu 17 Apr 2025 14:31:27 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: uTuSm/Y+4+cc3ZcnnL1lNZ/F9m35wk83kYpfMbn2OPI=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB Validity Not Before: Apr 10 14:31:27 2025 GMT Not After : Apr 17 14:31:27 2025 GMT Subject: CN=67f7d63f-1373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:92:5d:64:7a:50:0c:1c:19:ce:e3:7c:ff: 7a:5b:37:e8:32:f7:4c:4b:78:d3:18:ab:88:01:09: e2:ce:26:06:eb:37:43:4b:5d:20:3f:4a:64:e3:38: a6:d9:42:0f:28:32:dc:30:6c:b8:a3:92:b7:1d:3e: a2:fc:de:f2:8c:80:91:18:e6:94:50:a8:e6:42:ca: 9f:2a:d4:e6:5e:9a:bc:2c:2c:d1:4b:fb:7e:5e:6e: f9:e2:f4:87:75:6b:65:25:6b:41:e7:70:1d:8a:b1: 00:1e:48:3b:39:a7:67:9f:03:89:9d:d9:38:bd:f1: c0:4b:44:38:22:63:02:9e:7e:5c:00:0e:94:e4:eb: ba:ce:75:a6:c9:c3:30:09:ef:57:97:e6:a3:ad:97: 7c:e7:16:57:9d:62:03:07:40:6a:f3:a4:17:44:bb: 3d:ce:00:82:17:e8:e5:8d:67:bc:01:db:ab:6d:21: 64:6f:2a:2c:a5:bb:b2:f9:c8:c2:aa:fd:a3:07:5a: a8:61:9f:c2:50:b4:68:66:0e:ad:3b:10:c8:44:01: 87:b1:bd:77:c0:f4:c5:49:46:bd:97:5f:06:0a:7b: b3:ce:49:16:17:b9:c9:74:2c:c7:9f:25:04:c9:ba: 65:ca:d4:61:10:34:82:2d:c6:cb:b5:1e:75:fa:d0: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FB:74:1B:DC:48:79:A4:1D:CC:56:59:1B:94:1F:45:41:E6:04:76 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1f:7f:12:4e:97:c3:ec:42:bd:ea:73:2a:0a:3d:f0:d8:aa: 15:fc:0d:a2:fd:76:c9:fa:77:5f:a4:d0:9f:19:88:cd:d3:3d: 4d:33:56:d4:40:35:8a:72:40:77:a2:ed:cb:1c:c4:35:c3:f6: b0:ec:66:4f:f3:a7:29:5b:d2:51:07:bc:4e:8e:c3:15:cb:36: e3:80:b3:b1:d2:73:cf:42:2b:c6:66:1b:d6:47:d5:9f:7e:ef: 80:08:85:5c:8b:35:25:fe:44:1f:1b:37:7d:f2:49:df:a5:2c: 95:ba:90:c9:2b:0e:1e:22:df:bc:f7:33:3e:18:33:1d:ce:52: 6f:ad:48:f2:96:ed:f5:c0:06:e2:24:57:3c:9b:0a:84:66:23: 43:22:0a:79:62:2a:b9:b8:0f:42:ab:7d:18:2f:56:99:8d:32: 95:65:ce:54:c9:cb:cb:60:d3:6f:14:10:5e:c8:e3:26:18:3d: 81:ec:82:c1:ae:ba:04:74:9b:bb:41:0b:cc:1f:9d:31:4b:ca: 88:ec:39:99:e3:e5:87:cc:52:ef:29:7c:81:af:97:8d:87:8f: 71:b2:10:aa:20:60:26:65:42:20:12:0a:12:43:0d:0f:ac:98: e0:f9:db:24:d2:f2:bc:04:a6:03:d9:30:b9:0d:a0:cf:6e:a7: ff:99:4f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUwNDEwMTQzMTI3WhcNMjUwNDE3MTQzMTI3WjAYMRYwFAYD VQQDEw02N2Y3ZDYzZi0xMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXmSXWR6UAwcGc7jfP96WzfoMvdMS3jTGKuIAQniziYG6zdDS10gP0pk4zim 2UIPKDLcMGy4o5K3HT6i/N7yjICRGOaUUKjmQsqfKtTmXpq8LCzRS/t+Xm754vSH dWtlJWtB53AdirEAHkg7OadnnwOJndk4vfHAS0Q4ImMCnn5cAA6U5Ou6znWmycMw Ce9Xl+ajrZd85xZXnWIDB0Bq86QXRLs9zgCCF+jljWe8AdurbSFkbyospbuy+cjC qv2jB1qoYZ/CULRoZg6tOxDIRAGHsb13wPTFSUa9l18GCnuzzkkWF7nJdCzHnyUE ybplytRhEDSCLcbLtR51+tAoaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/7dBvc SHmkHcxWWRuUH0VB5gR2MB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdH38STpfD7EK96nMqCj3w2KoV/A2i/XbJ+ndfpNCfGYjN0z1NM1bU QDWKckB3ou3LHMQ1w/aw7GZP86cpW9JRB7xOjsMVyzbjgLOx0nPPQivGZhvWR9Wf fu+ACIVcizUl/kQfGzd98knfpSyVupDJKw4eIt+89zM+GDMdzlJvrUjylu31wAbi JFc8mwqEZiNDIgp5Yiq5uA9Cq30YL1aZjTKVZc5UycvLYNNvFBBeyOMmGD2B7ILB rroEdJu7QQvMH50xS8qI7DmZ4+WHzFLvKXyBr5eNh49xshCqIGAmZUIgEgoSQw0P rJjg+dsk0vK8BKYD2TC5DaDPbqf/mU+n -----END CERTIFICATE-----Generated at Thu Apr 10 19:36:17 2025 by rpki-client