$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: hxp+8c3bvL0yCf+P8H661yPKdsBe9h25eVnnKCvr2BU= Subject key identifier: 22:AA:BE:B0:63:E7:38:43:58:63:02:33:48:8E:3B:BD:14:18:E5:ED Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0BDE Signing time: Fri 30 May 2025 19:04:51 +0000 Manifest this update: Fri 30 May 2025 19:04:50 +0000 Manifest next update: Fri 06 Jun 2025 19:04:50 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: kM0xQBJcadhGZPD46AvrMaUhgRhvl8gKq4WhnhA+/qg=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 30 19:04:50 2025 GMT Not After : Jun 6 19:04:50 2025 GMT Subject: CN=683a0152-849b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:a4:2c:fe:47:cb:1a:c4:3b:21:77:6f:f7: 1f:a2:c3:23:42:d2:f7:ae:fb:b2:c7:c6:d4:fe:27: 76:fd:e9:a2:90:45:04:e2:b7:b3:3b:b1:c3:4c:1c: 69:53:6c:96:67:c9:45:36:f7:4e:39:ad:6b:9c:a9: fb:41:b1:17:f1:4a:e2:d2:ea:26:e9:f9:14:db:dd: 85:d7:ca:bc:df:fa:37:14:86:10:09:16:ab:67:21: 82:29:78:24:4c:73:7a:01:35:6b:bf:c1:d4:a4:bd: 81:be:45:41:e4:d2:b2:39:29:f3:f9:d1:07:f4:68: 34:ac:46:b0:03:2c:5d:15:b9:7a:6e:9a:83:86:1c: eb:7e:25:8c:ce:e8:e6:48:25:40:53:aa:41:2d:76: 7a:57:83:bc:0d:55:3a:88:5e:ee:b9:a1:6a:b6:89: 94:47:1a:8e:ab:82:a6:ec:47:35:97:63:98:dd:ae: 4f:2f:49:12:2e:4c:72:1a:62:10:c1:d4:76:8e:e7: d5:93:d8:0d:e7:6f:1f:ab:63:f1:d4:5c:1b:1d:57: f4:c6:e1:fe:e2:38:d4:10:3e:32:5c:82:32:63:1f: 0b:8c:fc:af:43:b9:cb:7b:e4:60:04:5a:7b:60:c7: 35:0d:f4:60:1b:80:99:af:ed:19:af:87:e2:e6:21: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:BE:B0:63:E7:38:43:58:63:02:33:48:8E:3B:BD:14:18:E5:ED X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:4d:66:a3:9b:60:65:52:1d:9e:70:75:ed:da:fc:59:d4: d7:c8:1a:86:e1:01:99:41:23:3c:df:d6:28:20:de:c8:4b:ed: ce:ef:35:02:88:89:9f:3d:a8:b8:99:cb:25:ad:ed:2f:9f:81: ff:ff:74:81:d7:9a:13:2b:11:a4:9e:a5:99:5e:81:5e:57:f8: 2b:57:c2:df:aa:26:1b:05:4f:ec:34:c5:62:bc:70:24:69:16: ae:8e:c7:b0:c2:c7:05:ac:a3:3c:4b:39:2f:21:f3:98:90:40: 6f:68:e6:06:f3:cc:6c:8c:a4:e5:48:a2:57:8f:c8:f9:d1:07: 85:46:bd:28:62:9d:46:ad:61:4a:a2:4e:7b:08:91:a0:9b:9c: 31:ac:ed:04:1e:17:3d:3f:8c:e2:f5:7e:d7:9c:2e:d4:7b:26: 77:ec:bf:8e:10:01:c6:45:19:51:18:d4:b6:7b:61:2b:fa:49: 19:b4:0f:7f:37:44:ad:4f:a6:68:47:8d:9f:26:80:74:9b:dc: 64:dc:81:05:0a:b0:5f:42:38:d1:c2:52:33:a5:da:c8:8d:74: b4:7d:4e:1d:81:46:c6:28:6b:5f:45:ed:14:4e:17:4e:5e:92: fe:9c:23:bc:60:77:20:24:7f:60:56:4b:0a:68:86:f1:62:ff: b1:f6:b2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUwNTMwMTkwNDUwWhcNMjUwNjA2MTkwNDUwWjAYMRYwFAYD VQQDEw02ODNhMDE1Mi04NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTykLP5HyxrEOyF3b/cfosMjQtL3rvuyx8bU/id2/emikEUE4rezO7HDTBxp U2yWZ8lFNvdOOa1rnKn7QbEX8Uri0uom6fkU292F18q83/o3FIYQCRarZyGCKXgk THN6ATVrv8HUpL2BvkVB5NKyOSnz+dEH9Gg0rEawAyxdFbl6bpqDhhzrfiWMzujm SCVAU6pBLXZ6V4O8DVU6iF7uuaFqtomURxqOq4Km7Ec1l2OY3a5PL0kSLkxyGmIQ wdR2jufVk9gN528fq2Px1FwbHVf0xuH+4jjUED4yXIIyYx8LjPyvQ7nLe+RgBFp7 YMc1DfRgG4CZr+0Zr4fi5iFAmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKqvrBj 5zhDWGMCM0iOO70UGOXtMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOE1mo5tgZVIdnnB17dr8WdTXyBqG4QGZQSM839YoIN7IS+3O7zUC iImfPai4mcslre0vn4H//3SB15oTKxGknqWZXoFeV/grV8LfqiYbBU/sNMVivHAk aRaujsewwscFrKM8SzkvIfOYkEBvaOYG88xsjKTlSKJXj8j50QeFRr0oYp1GrWFK ok57CJGgm5wxrO0EHhc9P4zi9X7XnC7UeyZ37L+OEAHGRRlRGNS2e2Er+kkZtA9/ N0StT6ZoR42fJoB0m9xk3IEFCrBfQjjRwlIzpdrIjXS0fU4dgUbGKGtfRe0UThdO XpL+nCO8YHcgJH9gVksKaIbxYv+x9rIq -----END CERTIFICATE-----Generated at Sat May 31 17:37:48 2025 by rpki-client