$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: s972kvw6QV8AODqMK2QpVFaFDPxEU2+9z7jeSMOTMyY= Subject key identifier: 14:A6:F4:F3:73:5B:88:0A:D9:46:D4:C1:28:04:F3:FF:80:30:76:F1 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: A3 Signing time: Sat 31 May 2025 05:46:05 +0000 Manifest this update: Sat 31 May 2025 05:46:04 +0000 Manifest next update: Sat 07 Jun 2025 05:46:04 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: xfmtnl9TlSxl2nIT251VVsRUFP0xCdwrpR68pg6hR2A=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: May 31 05:46:04 2025 GMT Not After : Jun 7 05:46:04 2025 GMT Subject: CN=683a979c-58a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:49:49:a2:ab:be:4c:78:10:11:ae:07:0c: 22:96:e2:65:09:c8:10:0f:08:44:17:86:4f:2c:04: 91:a3:bc:59:9b:b5:03:d4:85:19:7d:97:be:e0:97: 7b:22:3c:ae:eb:fc:80:d0:18:0a:7f:d0:30:ff:5c: 59:b1:21:79:74:3a:af:d6:98:7e:d6:b2:ce:37:d4: b9:ea:5c:fc:d8:97:5d:5a:f6:9f:f4:9a:ed:0c:b7: 66:df:c5:31:3e:27:82:98:1e:45:ce:ca:9d:ca:02: 2b:e8:00:42:f7:50:54:db:0c:36:aa:78:c8:ee:d0: 86:78:ff:b7:5b:46:82:7c:0e:70:b6:ae:eb:2b:98: 5e:50:15:88:ff:b4:e9:a3:4d:72:74:82:a3:28:2b: d9:8f:52:c0:fe:3c:b4:6d:a7:4c:ef:62:38:96:d8: 24:48:e6:58:9b:5c:f8:72:fb:02:8c:a0:60:57:9e: 8c:93:25:c0:f1:29:5f:fa:93:eb:8c:dc:07:3c:2d: 4b:61:9b:f4:6f:da:68:3d:14:30:94:be:41:25:d1: 3f:f0:16:67:3b:b7:7c:6a:ee:ff:75:e7:ad:eb:b4: b1:b6:01:26:82:8e:70:ec:13:6e:35:ce:fb:e8:1c: f7:77:db:21:be:b1:10:a0:ab:99:f0:36:8f:5a:39: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:F4:F3:73:5B:88:0A:D9:46:D4:C1:28:04:F3:FF:80:30:76:F1 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:9a:3b:d9:3d:19:68:55:88:e1:30:69:e0:13:4a:a9:2a: 06:26:b1:e1:ca:80:cc:90:b8:3e:35:f1:a6:de:3a:4d:3e:be: 09:cc:d2:c3:4b:92:3d:43:c4:b4:9e:e1:05:3d:ff:f7:26:fa: 83:ce:5b:d4:fb:7d:72:60:9e:36:03:57:50:ba:b4:ca:64:af: fc:52:1f:ed:f2:7a:15:71:b2:a4:c8:93:ec:e5:7c:81:d6:93: a1:c0:12:d0:39:96:54:29:59:c6:15:bf:33:ca:b4:18:9c:61: 1a:67:6a:33:71:0d:bd:09:d3:5a:be:5a:af:b5:f3:dc:64:70: 12:8a:80:ac:4f:a7:7a:9b:1f:66:24:96:c7:cb:e0:50:16:ce: 56:63:fe:bf:e8:6d:0a:8f:79:28:73:ca:91:b1:f0:fd:25:d6: a5:42:4d:8d:a4:19:b4:9f:13:b7:1c:b6:9a:54:b1:d2:d5:59: 71:e6:18:ca:49:ca:7c:78:24:9f:b5:9d:b3:ba:af:f9:39:24: 35:12:3a:a1:fb:2c:1c:46:6e:58:18:77:81:12:d8:83:75:00: ce:84:2e:b8:0d:e9:80:09:f5:14:da:94:75:04:bb:fc:4f:c1: 14:a5:19:16:95:25:7a:fc:3a:75:6d:63:59:42:91:bb:7c:56: ef:44:e2:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUwNTMxMDU0NjA0WhcNMjUwNjA3MDU0NjA0WjAYMRYwFAYD VQQDEw02ODNhOTc5Yy01OGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A1JSaKrvkx4EBGuBwwiluJlCcgQDwhEF4ZPLASRo7xZm7UD1IUZfZe+4Jd7 Ijyu6/yA0BgKf9Aw/1xZsSF5dDqv1ph+1rLON9S56lz82JddWvaf9JrtDLdm38Ux PieCmB5FzsqdygIr6ABC91BU2ww2qnjI7tCGeP+3W0aCfA5wtq7rK5heUBWI/7Tp o01ydIKjKCvZj1LA/jy0badM72I4ltgkSOZYm1z4cvsCjKBgV56MkyXA8Slf+pPr jNwHPC1LYZv0b9poPRQwlL5BJdE/8BZnO7d8au7/deet67SxtgEmgo5w7BNuNc77 6Bz3d9shvrEQoKuZ8DaPWjnWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSm9PNz W4gK2UbUwSgE8/+AMHbxMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdmpo72T0ZaFWI4TBp4BNKqSoGJrHhyoDMkLg+NfGm3jpNPr4JzNLD S5I9Q8S0nuEFPf/3JvqDzlvU+31yYJ42A1dQurTKZK/8Uh/t8noVcbKkyJPs5XyB 1pOhwBLQOZZUKVnGFb8zyrQYnGEaZ2ozcQ29CdNavlqvtfPcZHASioCsT6d6mx9m JJbHy+BQFs5WY/6/6G0Kj3koc8qRsfD9JdalQk2NpBm0nxO3HLaaVLHS1Vlx5hjK Scp8eCSftZ2zuq/5OSQ1Ejqh+ywcRm5YGHeBEtiDdQDOhC64DemACfUU2pR1BLv8 T8EUpRkWlSV6/Dp1bWNZQpG7fFbvROKh -----END CERTIFICATE-----Generated at Sat May 31 17:42:38 2025 by rpki-client