$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft File: pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json) Hash identifier: 1GiwLRyVeQNEvliU3SOOssB/UKumbx2NbehG+jlm0sg= Subject key identifier: 37:1B:FC:96:69:87:F5:07:87:C4:66:85:75:7A:65:2E:BD:65:5F:E8 Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft Manifest number: 0405 Signing time: Sat 05 Apr 2025 00:34:59 +0000 Manifest this update: Sat 05 Apr 2025 00:34:59 +0000 Manifest next update: Sat 12 Apr 2025 00:34:59 +0000 Files and hashes: 1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: 5gqfDVO+fOdsAS4n0e+d3KAeeTKo40l14DIFdel/qBo=) 2: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: lIplJdaPasT2KYwLM0CqR2rgchRbxFw1QkPzOjcDDzQ=) 3: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: I/KKCOrgm9HCsHD4UXCBhGaL/wAB3+JEfU4a1X3HO+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC75C Validity Not Before: Apr 5 00:34:59 2025 GMT Not After : Apr 12 00:34:59 2025 GMT Subject: CN=67f07ab3-5c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:b2:0e:ee:69:ff:e7:bb:88:45:ab:33:69: b7:8a:c9:ed:41:7c:4a:26:a6:1d:95:13:8a:a0:fc: 15:82:79:83:69:bf:33:7d:89:be:82:1b:69:fc:a6: 25:84:47:b1:20:b5:d7:6c:1c:e1:a2:be:e3:b7:4a: 57:18:0f:2a:fe:84:95:30:62:97:4e:db:3f:c1:8b: 59:b7:e7:f6:63:1b:e2:a2:0d:49:d1:c5:c3:0e:de: 72:e3:c3:4f:0a:65:15:4f:9d:a6:94:23:76:7a:ff: 6f:5d:d4:34:16:96:25:99:d8:e9:6e:b5:49:25:69: f6:e6:31:4a:51:af:63:db:8d:65:5e:0d:cd:86:41: 3e:32:3f:95:54:6a:fd:fa:0a:0c:5e:9d:75:ad:bb: ea:dc:ff:d1:b8:ed:b8:61:db:25:65:e3:63:63:95: 86:37:ed:86:af:2d:ff:72:ae:c4:9b:75:5a:e5:39: 12:16:3b:69:56:c7:e4:ec:ba:37:60:64:bf:cc:8a: 3d:d7:3d:54:d0:0b:85:73:f8:40:d8:91:25:32:b8: 91:20:db:cd:3f:28:92:e9:3b:d7:16:0b:53:6a:4f: f9:01:f8:36:04:ae:d9:06:c6:69:a1:16:37:1a:5e: 76:7f:9c:c9:c2:52:f5:ca:1e:c4:51:7a:ea:0e:11: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:FC:96:69:87:F5:07:87:C4:66:85:75:7A:65:2E:BD:65:5F:E8 X509v3 Authority Key Identifier: keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:15:c9:bd:08:4c:7b:84:f5:84:1f:8f:a3:28:4c:0c:60: ca:34:e6:42:f0:11:1d:d3:0c:7c:4f:c8:db:50:b3:58:ec:58: 98:2f:3e:1f:9e:50:db:86:bc:d6:61:cf:41:e1:f7:13:32:43: 9c:dd:07:fe:67:64:c0:19:50:0e:15:18:cd:20:8d:dd:b6:fd: 6a:b0:79:23:6b:cb:3a:3c:8b:e7:79:67:41:ac:5a:3c:9c:7b: da:39:8d:29:17:d5:d6:63:06:4d:9d:ee:6a:80:cd:90:0b:64: 52:8b:2f:34:ae:2f:65:81:1f:6f:fd:94:c5:28:5c:5b:c1:90: cf:34:ae:31:5a:a5:b0:c9:25:d2:fc:92:77:ef:61:52:91:16: a8:93:e6:13:23:c4:37:65:0b:13:e9:0f:56:48:fb:63:4e:65: e4:52:a3:1e:49:c3:50:5c:89:50:37:7e:4c:39:53:78:f1:9d: 4b:6a:40:e1:11:c4:ee:da:b8:7c:6b:67:c8:88:c0:68:14:7f: 23:f1:4c:0e:56:e0:ef:96:99:e1:78:45:b5:79:62:24:39:be: a6:11:bc:fe:ee:16:35:09:8d:6e:79:10:81:b4:4d:d4:a6:81: 17:a2:c9:91:24:1b:74:11:01:25:fb:02:34:ee:54:21:78:36: ab:a2:a1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE N0E2Njg1QzYwHhcNMjUwNDA1MDAzNDU5WhcNMjUwNDEyMDAzNDU5WjAYMRYwFAYD VQQDEw02N2YwN2FiMy01YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtGyDu5p/+e7iEWrM2m3isntQXxKJqYdlROKoPwVgnmDab8zfYm+ghtp/KYl hEexILXXbBzhor7jt0pXGA8q/oSVMGKXTts/wYtZt+f2Yxviog1J0cXDDt5y48NP CmUVT52mlCN2ev9vXdQ0FpYlmdjpbrVJJWn25jFKUa9j241lXg3NhkE+Mj+VVGr9 +goMXp11rbvq3P/RuO24YdslZeNjY5WGN+2Gry3/cq7Em3Va5TkSFjtpVsfk7Lo3 YGS/zIo91z1U0AuFc/hA2JElMriRINvNPyiS6TvXFgtTak/5Afg2BK7ZBsZpoRY3 Gl52f5zJwlL1yh7EUXrqDhGOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcb/JZp h/UHh8RmhXV6ZS69ZV/oMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4 NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzc1Qy9BQ0FDMzlCRTY4NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJC M25URFAyOXpiRnJYcG1oY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRohXJvQhMe4T1hB+PoyhMDGDKNOZC8BEd0wx8T8jbULNY7FiYLz4f nlDbhrzWYc9B4fcTMkOc3Qf+Z2TAGVAOFRjNII3dtv1qsHkja8s6PIvneWdBrFo8 nHvaOY0pF9XWYwZNne5qgM2QC2RSiy80ri9lgR9v/ZTFKFxbwZDPNK4xWqWwySXS /JJ372FSkRaok+YTI8Q3ZQsT6Q9WSPtjTmXkUqMeScNQXIlQN35MOVN48Z1LakDh EcTu2rh8a2fIiMBoFH8j8UwOVuDvlpnheEW1eWIkOb6mEbz+7hY1CY1ueRCBtE3U poEXosmRJBt0EQEl+wI07lQheDaroqHu -----END CERTIFICATE-----Generated at Sun Apr 6 01:19:40 2025 by rpki-client