$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: t17XLOXLUcgZ1/Wm8hnimFOBE6ojj1Uwwisk3HAE5lw= Subject key identifier: D4:2E:08:89:28:2A:E8:0C:45:A1:C0:49:BD:29:29:C3:2C:A4:C0:A6 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0DE9 Signing time: Fri 30 May 2025 18:03:49 +0000 Manifest this update: Fri 30 May 2025 18:03:48 +0000 Manifest next update: Fri 06 Jun 2025 18:03:48 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: /IIlknKf+yIWk6nG0+CRbg9D2mW8QHWhYerWow/17dI=) 2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 4v+rsnRLFBgrun/uIoRgYYIQkVKTxUpRVf++DCzZXn4=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: May 30 18:03:48 2025 GMT Not After : Jun 6 18:03:48 2025 GMT Subject: CN=6839f304-f4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:31:9b:00:75:8d:69:6d:9f:4f:f7:1b:fe: cc:ac:d5:85:9c:43:76:f6:5f:5c:b2:de:c2:b0:27: f5:f4:8c:9b:5b:94:12:f2:db:46:18:00:6d:65:88: c5:a5:e1:af:df:8f:a6:d4:a8:a3:b7:79:e2:4c:36: 58:55:5c:35:b0:ae:ae:b7:65:b4:7d:f4:12:0d:f2: fe:80:ec:2f:27:fc:b5:d5:dc:91:55:18:ac:3e:a2: 00:cf:27:3b:e8:33:14:89:69:85:f3:94:ea:59:26: ad:19:26:cc:57:fb:93:92:25:12:18:d7:51:9d:52: 0a:3e:3a:6e:17:bf:84:66:24:5e:40:bb:a1:14:07: ab:9d:ca:a1:25:ee:c9:2b:3a:e0:4e:e5:30:28:78: a3:39:14:e8:fb:05:af:43:84:51:0d:dc:d3:80:b7: b1:12:01:76:f6:a1:35:ac:9d:12:51:6d:9b:fe:63: 68:f8:4a:5b:56:29:05:7b:02:18:6c:24:4e:1f:a5: bc:e4:16:26:98:36:d1:89:0e:7d:cc:c6:b9:fa:a8: 90:01:1e:87:f0:88:b7:65:04:c0:a6:0d:bc:06:93: d5:56:58:ba:e4:54:45:f2:16:33:36:5b:8f:48:a3: 98:12:a8:2b:ef:7d:fb:65:bd:00:c6:e3:37:88:07: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2E:08:89:28:2A:E8:0C:45:A1:C0:49:BD:29:29:C3:2C:A4:C0:A6 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cf:38:0e:e1:8d:55:0d:7f:1f:c2:e7:1b:94:97:57:2c:71: 22:e7:c8:b7:4a:1e:a7:93:fa:d9:51:3e:f5:f0:0b:b4:d6:48: 7f:56:b2:d9:05:12:4c:bf:1e:8e:42:f5:4a:63:66:00:83:77: 73:2f:13:c3:52:ad:0f:fb:9b:e9:6c:2c:1d:91:b3:64:83:7f: a0:c1:78:a7:f9:3b:6f:20:c9:e3:9a:7b:46:a8:c7:46:02:77: cd:bb:a7:ac:79:83:00:d0:82:a1:85:20:7b:63:24:15:48:58: 6b:e1:db:9e:68:67:9c:5a:d7:1d:22:65:ef:76:61:cd:b5:15: 7d:4b:90:d1:01:0a:d2:b9:d5:e0:32:3e:11:79:c7:cf:fe:74: 33:d7:28:b2:e6:da:b2:f0:44:65:18:1a:78:a1:9d:4f:9d:d5: b5:91:6b:c4:ad:39:04:4f:09:cd:cb:47:ae:a0:9e:5a:12:74: a4:0e:b0:51:db:99:a1:a5:54:3a:31:5c:ad:eb:36:dc:4f:2f: 9b:9a:9b:bb:15:64:e3:3b:09:8a:9f:3e:15:76:08:0a:68:52: fd:4c:0b:dc:48:13:fb:d9:3f:ed:95:a9:25:96:16:fe:34:20: ed:95:6d:f5:36:ff:cf:f0:5c:ce:16:87:32:6e:4c:ee:d8:a1: 41:f0:cf:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNTMwMTgwMzQ4WhcNMjUwNjA2MTgwMzQ4WjAYMRYwFAYD VQQDEw02ODM5ZjMwNC1mNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXkxmwB1jWltn0/3G/7MrNWFnEN29l9cst7CsCf19IybW5QS8ttGGABtZYjF peGv34+m1Kijt3niTDZYVVw1sK6ut2W0ffQSDfL+gOwvJ/y11dyRVRisPqIAzyc7 6DMUiWmF85TqWSatGSbMV/uTkiUSGNdRnVIKPjpuF7+EZiReQLuhFAerncqhJe7J KzrgTuUwKHijORTo+wWvQ4RRDdzTgLexEgF29qE1rJ0SUW2b/mNo+EpbVikFewIY bCROH6W85BYmmDbRiQ59zMa5+qiQAR6H8Ii3ZQTApg28BpPVVli65FRF8hYzNluP SKOYEqgr7337Zb0AxuM3iAccQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQuCIko KugMRaHASb0pKcMspMCmMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqzzgO4Y1VDX8fwucblJdXLHEi58i3Sh6nk/rZUT718Au01kh/VrLZ BRJMvx6OQvVKY2YAg3dzLxPDUq0P+5vpbCwdkbNkg3+gwXin+TtvIMnjmntGqMdG AnfNu6eseYMA0IKhhSB7YyQVSFhr4dueaGecWtcdImXvdmHNtRV9S5DRAQrSudXg Mj4RecfP/nQz1yiy5tqy8ERlGBp4oZ1PndW1kWvErTkETwnNy0euoJ5aEnSkDrBR 25mhpVQ6MVyt6zbcTy+bmpu7FWTjOwmKnz4VdggKaFL9TAvcSBP72T/tlakllhb+ NCDtlW31Nv/P8FzOFocybkzu2KFB8M9P -----END CERTIFICATE-----Generated at Sat May 31 17:32:48 2025 by rpki-client