$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: 7zcYWDEpBxNSvoCaW7N5Aa3ChKhaCAIxqFu+64voUbg= Subject key identifier: 72:D0:7C:E4:5F:41:22:5C:75:FA:4D:EF:A2:10:B3:FB:A5:5D:E3:CC Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 01F0 Signing time: Sat 31 May 2025 02:15:37 +0000 Manifest this update: Sat 31 May 2025 02:15:37 +0000 Manifest next update: Sat 07 Jun 2025 02:15:37 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: JOMxeqyoRhfy7Y7ccU6CNIMCShVdbH7PFSGEgKGAHB8=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: May 31 02:15:37 2025 GMT Not After : Jun 7 02:15:37 2025 GMT Subject: CN=683a6649-a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:a8:81:56:c4:10:a7:16:07:b4:9d:e4:53: 41:67:c2:a5:cb:08:b6:08:8a:1d:e4:18:94:79:b7: 7d:f9:2f:cf:2e:1d:45:f1:b7:87:9b:b2:25:95:65: 14:3b:98:ac:bf:d3:5a:98:f9:7e:de:eb:a9:bf:dd: 84:aa:f6:44:14:98:60:c5:c5:42:ac:43:6c:ea:b3: a5:8b:4e:1b:3a:23:6d:68:1b:ee:6e:00:65:7a:5f: 7d:75:15:26:41:5e:ff:20:0c:eb:7c:61:78:a9:24: ae:96:70:78:29:24:1a:16:d6:86:6d:3a:c4:b2:8f: a5:47:f5:69:c8:ea:73:23:12:93:4e:96:26:a7:b2: c1:47:fd:ee:c0:4f:29:7f:5e:af:80:26:d8:ec:72: 14:71:cc:ed:2a:a3:e0:19:9f:8b:36:36:f2:85:7a: b6:7c:be:bb:5f:be:46:63:71:4c:17:51:e9:e6:3f: 81:c8:09:d1:6f:5d:1c:c5:67:bd:01:d4:19:9e:bc: 86:8b:b4:35:d7:bd:99:c7:ff:fa:de:2a:16:d4:87: 9c:3f:2c:a1:58:5b:88:2b:d9:61:8f:23:5c:03:7e: 66:df:6f:69:98:bd:ed:c4:32:e1:c6:ac:d4:d5:ca: 0f:a1:d4:36:aa:ca:09:d4:8b:6e:ad:86:da:88:bd: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:7C:E4:5F:41:22:5C:75:FA:4D:EF:A2:10:B3:FB:A5:5D:E3:CC X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:83:bc:33:9a:4b:7c:b4:fb:f1:9e:8f:5a:10:e3:d2:63:29: 9c:40:29:3e:46:d1:1a:87:53:10:22:8f:7a:0e:c0:8d:1e:9d: 75:ad:a1:22:b4:69:d2:29:c1:fa:85:bd:bf:79:4f:dc:cc:a2: 5f:e5:8e:ba:ca:9e:92:4d:89:aa:b7:64:20:17:33:0a:bd:71: c3:e7:2d:d1:80:e0:01:0c:f5:6f:49:ab:e5:88:25:68:00:98: 45:51:d6:ec:eb:94:29:bd:09:8a:d5:c1:c5:fe:4e:f8:ab:7a: 18:7c:dc:61:23:25:55:b6:c7:4f:68:bb:46:05:eb:31:5e:79: 87:e1:4d:37:80:35:19:c7:e1:ea:2d:81:75:f4:3a:92:45:78: f5:5d:cb:45:40:fa:94:ba:d4:b8:85:d1:66:21:63:dc:e9:5a: 58:c1:e5:30:13:90:51:72:71:3b:1a:c0:f6:8a:bd:f6:e0:fa: 5e:d5:de:5b:5e:2a:6f:13:78:0a:0c:69:43:ce:43:d8:70:5d: c6:6e:2b:96:d9:84:0f:7a:90:05:27:09:83:f7:64:37:8d:72: 7c:c8:a8:d7:6c:36:d4:bc:89:4c:3b:06:fa:ab:4a:4d:93:cd: 4d:5b:45:eb:8a:1b:55:ad:b5:8d:22:d4:e4:51:b5:43:29:3a: 56:44:e4:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNTMxMDIxNTM3WhcNMjUwNjA3MDIxNTM3WjAYMRYwFAYD VQQDEw02ODNhNjY0OS1hNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pqogVbEEKcWB7Sd5FNBZ8Klywi2CIod5BiUebd9+S/PLh1F8beHm7IllWUU O5isv9NamPl+3uupv92EqvZEFJhgxcVCrENs6rOli04bOiNtaBvubgBlel99dRUm QV7/IAzrfGF4qSSulnB4KSQaFtaGbTrEso+lR/VpyOpzIxKTTpYmp7LBR/3uwE8p f16vgCbY7HIUccztKqPgGZ+LNjbyhXq2fL67X75GY3FMF1Hp5j+ByAnRb10cxWe9 AdQZnryGi7Q1172Zx//63ioW1IecPyyhWFuIK9lhjyNcA35m329pmL3txDLhxqzU 1coPodQ2qsoJ1IturYbaiL3gSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLQfORf QSJcdfpN76IQs/ulXePMMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKg7wzmkt8tPvxno9aEOPSYymcQCk+RtEah1MQIo96DsCNHp11raEi tGnSKcH6hb2/eU/czKJf5Y66yp6STYmqt2QgFzMKvXHD5y3RgOABDPVvSavliCVo AJhFUdbs65QpvQmK1cHF/k74q3oYfNxhIyVVtsdPaLtGBesxXnmH4U03gDUZx+Hq LYF19DqSRXj1XctFQPqUutS4hdFmIWPc6VpYweUwE5BRcnE7GsD2ir324Ppe1d5b XipvE3gKDGlDzkPYcF3GbiuW2YQPepAFJwmD92Q3jXJ8yKjXbDbUvIlMOwb6q0pN k81NW0XrihtVrbWNItTkUbVDKTpWROSB -----END CERTIFICATE-----Generated at Sat May 31 16:52:15 2025 by rpki-client