$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: pE5M6XhSNIJpPIPlet9EUbNu5akiLJsBFxZolu5DO6s= Subject key identifier: E2:23:26:86:99:25:20:B0:B6:C2:23:D9:7D:C2:9E:31:05:A4:A1:0F Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01B0 Signing time: Tue 03 Jun 2025 02:57:14 +0000 Manifest this update: Tue 03 Jun 2025 02:57:13 +0000 Manifest next update: Tue 10 Jun 2025 02:57:13 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: wk5QIfT+31sbY9tv9RXtsGTDNTKSxM72QhTS3KfkGZs=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Jun 3 02:57:13 2025 GMT Not After : Jun 10 02:57:13 2025 GMT Subject: CN=683e6489-7b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:e0:50:e4:17:b7:0b:a7:8f:b1:df:b3:ef: 3a:43:7c:bb:0c:da:c3:3a:57:e6:15:11:ea:3e:51: cc:78:bf:84:e8:83:97:92:25:e3:5f:d4:94:25:29: 84:cd:a2:bd:4b:c0:fd:e7:1f:8a:9f:c3:68:c9:73: f8:66:ed:c7:ac:99:78:1b:d7:96:f3:01:01:ca:37: 6a:41:80:3b:c9:7b:e5:62:bf:d5:87:46:a1:0a:af: aa:ae:28:23:ee:00:21:af:98:a6:03:3e:07:b8:d9: 92:3c:e6:bf:49:19:e8:cb:21:b6:b6:f2:c9:ee:14: 6b:b1:2f:d2:63:f7:a9:89:d2:c8:7d:ab:9c:3f:14: 2a:9f:a2:fc:b0:62:41:e5:d1:80:9a:7f:97:4e:36: 91:cc:2a:d4:b3:99:8e:74:e2:c0:ce:b6:00:ec:6d: 6f:cb:8e:10:c9:f0:f8:4b:9e:64:ab:29:9a:0a:00: e3:80:ef:26:55:2d:d8:8d:64:92:f4:32:5a:ed:a2: bb:d0:7b:ec:10:be:4c:35:ab:ff:7f:9a:98:15:5c: 9e:7e:c0:ca:75:06:75:03:8b:30:36:68:a7:8e:41: 2d:5b:14:fb:b8:80:8e:54:5a:39:6a:c1:22:2e:61: bc:88:ce:d0:26:49:48:4b:09:94:a9:7b:75:1a:68: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:26:86:99:25:20:B0:B6:C2:23:D9:7D:C2:9E:31:05:A4:A1:0F X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:89:44:c4:4d:79:b9:5c:5a:ca:5d:7b:d8:2f:ec:9a:a2:55: 73:0e:11:8c:1a:ad:fa:c3:02:1e:49:e1:0d:3e:df:d7:7b:90: 0d:97:b5:d1:d5:51:4f:09:a4:f2:3d:9d:c5:27:20:64:c9:b1: 83:6d:c3:ae:25:c6:19:38:58:2e:0c:4f:c7:24:86:c5:90:9d: 30:0d:b3:27:b7:f8:02:49:90:26:0e:4a:90:a4:4d:dc:6d:a6: 71:aa:2d:29:bd:31:55:d3:82:1a:aa:1c:62:8c:87:92:ea:03: 09:f8:40:00:07:3d:c6:d7:08:a5:09:3f:3c:0e:9b:1f:05:07: fe:62:e1:95:fc:1a:f4:a6:5e:42:c6:da:06:dc:d8:b7:f8:26: 3e:a4:cf:2b:64:21:3d:36:8a:24:01:f8:30:cf:e9:d7:8d:1b: d3:23:05:f2:02:43:28:73:42:b8:cf:c5:36:48:b2:28:ea:50: 2d:e7:9e:63:f1:3b:35:df:df:1d:93:d5:68:47:61:5f:a7:95: eb:67:eb:28:f1:09:88:02:77:7a:49:ae:a5:63:dd:ef:88:ec: f2:39:48:9c:f2:7f:95:c9:43:55:5f:04:54:6f:11:ea:f3:af: e5:b6:77:01:48:cb:54:df:05:aa:ea:0c:b5:7f:fb:39:26:f9: 97:d3:17:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNjAzMDI1NzEzWhcNMjUwNjEwMDI1NzEzWjAYMRYwFAYD VQQDEw02ODNlNjQ4OS03YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjHgUOQXtwunj7Hfs+86Q3y7DNrDOlfmFRHqPlHMeL+E6IOXkiXjX9SUJSmE zaK9S8D95x+Kn8NoyXP4Zu3HrJl4G9eW8wEByjdqQYA7yXvlYr/Vh0ahCq+qrigj 7gAhr5imAz4HuNmSPOa/SRnoyyG2tvLJ7hRrsS/SY/epidLIfaucPxQqn6L8sGJB 5dGAmn+XTjaRzCrUs5mOdOLAzrYA7G1vy44QyfD4S55kqymaCgDjgO8mVS3YjWSS 9DJa7aK70HvsEL5MNav/f5qYFVyefsDKdQZ1A4swNminjkEtWxT7uICOVFo5asEi LmG8iM7QJklISwmUqXt1GmhVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIjJoaZ JSCwtsIj2X3CnjEFpKEPMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAiUTETXm5XFrKXXvYL+yaolVzDhGMGq36wwIeSeENPt/Xe5ANl7XR 1VFPCaTyPZ3FJyBkybGDbcOuJcYZOFguDE/HJIbFkJ0wDbMnt/gCSZAmDkqQpE3c baZxqi0pvTFV04IaqhxijIeS6gMJ+EAABz3G1wilCT88DpsfBQf+YuGV/Br0pl5C xtoG3Ni3+CY+pM8rZCE9NookAfgwz+nXjRvTIwXyAkMoc0K4z8U2SLIo6lAt555j 8Ts1398dk9VoR2Ffp5XrZ+so8QmIAnd6Sa6lY93viOzyOUic8n+VyUNVXwRUbxHq 86/ltncBSMtU3wWq6gy1f/s5JvmX0xdA -----END CERTIFICATE-----Generated at Wed Jun 4 00:14:14 2025 by rpki-client