$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: NzeCrO+ImEANkIx75GOYpIIhglZA2iNafapNk6yHx9g= Subject key identifier: 3A:FF:D3:99:C3:10:54:32:5F:03:CA:72:69:1C:43:3D:D0:43:63:7A Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 017F Signing time: Sat 31 May 2025 03:27:40 +0000 Manifest this update: Sat 31 May 2025 03:27:40 +0000 Manifest next update: Sat 07 Jun 2025 03:27:40 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: w3TBHVkLfiB2/w5uIhs39guP1LBoMi0SYjiYyA8tQg8=) 2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: e0njY5XzEF4ErGMr0YeVgmDBWLHo1AgDUgiIRsmRwsA=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: May 31 03:27:40 2025 GMT Not After : Jun 7 03:27:40 2025 GMT Subject: CN=683a772c-1bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:fc:eb:4b:63:67:a9:e4:9f:5b:bf:ca:62: 95:52:e8:22:49:a2:5f:16:d4:ae:6e:a0:de:e7:75: ed:92:66:d8:c1:d2:ab:7f:d6:b2:bc:d1:fe:cf:fd: c0:ca:56:62:07:2a:5f:b8:99:2f:b1:6b:89:fa:85: 65:5b:de:56:9b:ef:41:3b:c9:55:ca:ee:d7:4f:06: f7:01:c5:12:df:4e:a6:9b:db:d8:32:1a:5f:c0:53: 20:cd:51:bb:cb:14:0d:7b:77:4a:87:19:82:e0:e2: 81:c3:81:15:dc:fe:b0:d5:b6:77:d9:a9:bf:f2:3e: 32:65:02:ed:fe:25:b3:02:06:f4:9f:3c:88:a8:b9: 25:69:7b:cb:e6:a8:64:ca:54:dc:7c:d7:83:ac:d4: bd:86:a6:33:a1:0d:f3:e8:83:9b:cf:01:cd:1a:47: 86:cb:0a:d2:d0:1e:62:a3:a2:db:62:83:7e:38:ae: 94:39:d6:11:26:9b:98:85:de:7f:96:36:ac:13:a8: 24:1b:76:6f:91:85:38:ed:b1:86:cd:cf:30:41:5e: 00:ed:a4:20:30:4d:b6:bf:6f:2a:82:47:cf:9a:72: af:41:36:af:12:96:e2:64:b2:3d:36:40:7b:9b:77: 58:a2:56:cb:28:bf:b0:15:bb:a9:39:44:b4:e7:36: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:D3:99:C3:10:54:32:5F:03:CA:72:69:1C:43:3D:D0:43:63:7A X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fa:c1:05:60:6f:07:cb:7d:76:a0:9c:f8:fd:c6:f5:61:8f: 09:d2:b2:bd:06:c2:fc:bb:4d:bb:66:47:90:33:da:25:45:d7: ae:40:a1:56:98:34:e0:fc:10:6b:25:14:b9:6e:b8:8d:97:b5: 10:b8:f6:7c:2f:d7:d4:cc:22:4a:45:83:43:3e:0e:c6:04:33: e3:62:be:41:8f:3d:bf:87:f7:83:45:5a:7f:7c:b3:e5:94:46: 51:a3:05:b9:9c:ee:99:6a:70:88:ec:1f:dc:a0:7b:6e:af:a0: cf:71:24:70:ab:5f:0c:90:2a:4c:5c:2d:47:66:27:00:22:42: a4:5a:d7:67:1f:33:95:25:32:94:e4:73:3b:5a:40:18:2d:a7: 02:a4:df:0e:1b:67:62:68:61:1b:50:b2:2d:4e:39:a2:2f:f3: 84:df:58:1b:49:cf:44:2e:e1:d5:79:dc:d0:a1:f9:f9:e1:44: 18:52:cd:03:47:a9:c2:1b:2f:68:9c:79:d4:d6:ad:e6:95:47: 0b:63:f5:91:74:d2:12:18:11:af:2e:01:8b:17:ce:67:11:3d: b0:5c:67:0c:79:0b:6c:4a:3a:bd:c9:29:78:87:a1:cb:d8:56: 62:dc:fd:85:94:d4:3e:e0:7f:cc:61:38:53:2b:d1:b9:9d:8e: 30:ab:d4:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwNTMxMDMyNzQwWhcNMjUwNjA3MDMyNzQwWjAYMRYwFAYD VQQDEw02ODNhNzcyYy0xYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16X860tjZ6nkn1u/ymKVUugiSaJfFtSubqDe53XtkmbYwdKrf9ayvNH+z/3A ylZiBypfuJkvsWuJ+oVlW95Wm+9BO8lVyu7XTwb3AcUS306mm9vYMhpfwFMgzVG7 yxQNe3dKhxmC4OKBw4EV3P6w1bZ32am/8j4yZQLt/iWzAgb0nzyIqLklaXvL5qhk ylTcfNeDrNS9hqYzoQ3z6IObzwHNGkeGywrS0B5io6LbYoN+OK6UOdYRJpuYhd5/ ljasE6gkG3ZvkYU47bGGzc8wQV4A7aQgME22v28qgkfPmnKvQTavEpbiZLI9NkB7 m3dYolbLKL+wFbupOUS05zYcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr/05nD EFQyXwPKcmkcQz3QQ2N6MB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+sEFYG8Hy312oJz4/cb1YY8J0rK9BsL8u027ZkeQM9olRdeuQKFW mDTg/BBrJRS5briNl7UQuPZ8L9fUzCJKRYNDPg7GBDPjYr5Bjz2/h/eDRVp/fLPl lEZRowW5nO6ZanCI7B/coHtur6DPcSRwq18MkCpMXC1HZicAIkKkWtdnHzOVJTKU 5HM7WkAYLacCpN8OG2diaGEbULItTjmiL/OE31gbSc9ELuHVedzQofn54UQYUs0D R6nCGy9onHnU1q3mlUcLY/WRdNISGBGvLgGLF85nET2wXGcMeQtsSjq9ySl4h6HL 2FZi3P2FlNQ+4H/MYThTK9G5nY4wq9S/ -----END CERTIFICATE-----Generated at Sat May 31 17:42:34 2025 by rpki-client