$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: 2wSgqS4jbCdotOla2uCEjLR5S6gtYbp3LsAQtNxxZ5c= Subject key identifier: 38:0D:94:CA:50:8C:7C:D1:D9:AF:76:CA:82:B6:4A:5D:9A:80:ED:3A Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 1862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 1851 Signing time: Sat 31 May 2025 16:27:46 +0000 Manifest this update: Sat 31 May 2025 16:27:46 +0000 Manifest next update: Sat 07 Jun 2025 16:27:46 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: 7yTeX58kpgv2tAHhX9SrUvzYlbtPKYPnoqfkz8MUajM=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: May 31 16:27:46 2025 GMT Not After : Jun 7 16:27:46 2025 GMT Subject: CN=683b2e02-ad5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:f4:c5:0f:92:27:5b:b5:64:16:20:ed:62: 8b:f1:0b:3c:37:9d:ca:db:fb:4a:69:38:75:b2:c7: 8d:6b:5f:4e:42:a7:8e:ff:ba:16:ae:1d:cd:22:ac: 4d:71:0c:18:75:ed:b6:77:d9:af:63:65:e3:c6:b6: 24:88:aa:0a:0a:d9:10:a6:6b:dc:ea:ed:5f:23:6e: 68:99:40:1f:b1:40:f8:50:d8:87:cd:ed:b8:88:85: 18:04:5a:3a:39:20:7a:e0:54:b9:95:60:98:31:00: 35:82:e2:af:19:48:2b:b2:f9:fd:ff:36:db:f4:0d: 5d:3c:22:18:c1:95:0f:e1:1d:2f:83:2f:72:06:58: f3:85:98:78:a5:80:0a:59:a7:bd:12:0e:3b:12:36: 5a:10:f0:a9:54:7e:2f:ef:c4:b7:8b:f6:10:61:b0: d1:26:f4:24:29:40:fc:d7:f2:0f:d3:f9:e0:b8:07: 32:7e:09:7c:f6:25:97:64:3a:57:e1:18:89:47:fd: c4:c6:d0:0c:50:15:fe:19:79:bf:3e:11:1d:42:a3: 4d:83:9f:fd:d9:74:04:04:64:c1:79:fb:2a:02:02: a4:2f:76:10:cc:fa:84:2a:b5:9a:6f:94:13:b8:fe: 55:c7:0d:27:db:08:b0:4e:fc:5e:0e:8d:b7:57:06: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:94:CA:50:8C:7C:D1:D9:AF:76:CA:82:B6:4A:5D:9A:80:ED:3A X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f8:6d:40:15:d0:0c:f4:44:90:b2:79:70:a0:a0:9c:26:55: 96:f7:93:36:ab:4a:46:00:54:a6:fa:ca:88:79:a7:cd:28:44: 09:30:3e:de:0c:45:cf:e9:ae:2e:0b:e2:a8:d7:76:19:c3:9b: 9d:f9:4b:88:b9:c9:68:d1:96:d0:6b:37:02:e8:85:c4:33:2d: da:b2:af:3d:76:4b:e9:a7:ef:a1:77:c9:02:07:e2:f1:f4:01: 7a:8f:79:f4:73:e8:26:c8:82:ef:18:7c:cb:ea:8a:3f:dc:3e: f8:ff:87:b1:78:72:bb:d5:a0:44:e7:7a:8a:7c:90:22:96:3e: 28:94:96:7a:c7:a2:68:6a:a9:7e:3c:87:70:c6:79:97:94:b0: 31:fb:3d:27:ca:20:87:d8:ee:32:47:a6:3b:ae:96:3a:2f:fd: cd:0c:d0:46:96:d6:a5:82:2f:3f:c0:62:c7:5c:ea:4b:d3:b6: 14:f5:fa:76:78:ea:5e:b8:e3:26:e0:fe:9c:d3:dd:30:0a:ae: 43:41:fb:33:27:49:3f:ee:9a:dc:b9:52:35:44:66:01:1b:5a: 4b:a8:61:c7:60:d8:0b:18:4c:2d:74:cd:d5:52:a0:a2:4a:19: 4d:3a:58:bd:7a:50:cb:d4:49:1a:d3:ab:1f:dc:c1:1d:d3:71: 43:5c:cc:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUwNTMxMTYyNzQ2WhcNMjUwNjA3MTYyNzQ2WjAYMRYwFAYD VQQDEw02ODNiMmUwMi1hZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8r0xQ+SJ1u1ZBYg7WKL8Qs8N53K2/tKaTh1sseNa19OQqeO/7oWrh3NIqxN cQwYde22d9mvY2XjxrYkiKoKCtkQpmvc6u1fI25omUAfsUD4UNiHze24iIUYBFo6 OSB64FS5lWCYMQA1guKvGUgrsvn9/zbb9A1dPCIYwZUP4R0vgy9yBljzhZh4pYAK Wae9Eg47EjZaEPCpVH4v78S3i/YQYbDRJvQkKUD81/IP0/nguAcyfgl89iWXZDpX 4RiJR/3ExtAMUBX+GXm/PhEdQqNNg5/92XQEBGTBefsqAgKkL3YQzPqEKrWab5QT uP5Vxw0n2wiwTvxeDo23VwYqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgNlMpQ jHzR2a92yoK2Sl2agO06MB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE+G1AFdAM9ESQsnlwoKCcJlWW95M2q0pGAFSm+sqIeafNKEQJMD7e DEXP6a4uC+Ko13YZw5ud+UuIuclo0ZbQazcC6IXEMy3asq89dkvpp++hd8kCB+Lx 9AF6j3n0c+gmyILvGHzL6oo/3D74/4exeHK71aBE53qKfJAilj4olJZ6x6Joaql+ PIdwxnmXlLAx+z0nyiCH2O4yR6Y7rpY6L/3NDNBGltalgi8/wGLHXOpL07YU9fp2 eOpeuOMm4P6c090wCq5DQfszJ0k/7prcuVI1RGYBG1pLqGHHYNgLGEwtdM3VUqCi ShlNOli9elDL1Eka06sf3MEd03FDXMwa -----END CERTIFICATE-----Generated at Sat May 31 17:54:52 2025 by rpki-client