$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: p9N402AUioarExEmeO9dhriwJsEgMU1xBEAPaKtX4Kg= Subject key identifier: 0F:A3:1D:65:C8:65:F4:71:AD:6D:3A:C5:5E:1A:0F:10:DD:08:83:98 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0B83 Signing time: Fri 30 May 2025 19:24:26 +0000 Manifest this update: Fri 30 May 2025 19:24:25 +0000 Manifest next update: Fri 06 Jun 2025 19:24:25 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: +R4EkNfMaPwqX27Bk81a2aX5iqYNzJIfZQWrjSi8RyM=) 2: 91B6D40E3ADF11F0A7390D6CC4F9AE02.roa (hash: d4z0p4h3x7tVFY8/avXde7BOff0lUsjcaR2qhErnPW0=) 3: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: n7ECEgJWD1UiJxWXsx1TUuP1fEtG6N+ZQzF/LAl7eCg=) 4: 7A35195A0A1811F0ADFE8D2DC4F9AE02.roa (hash: kzCmoo+IjhlPEf88D9nrDgIHNSfXTuGVVGf2u6U7d4w=) 5: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: pXS3ULi3ginDl77te4ltHgefmxNNqQdIdLlWLdgZ/tE=) 6: 926610D63ADF11F0A7390D6CC4F9AE02.roa (hash: dCfaICrFdOJZxnEtAaS+GJcKKbmMKGNmoIwCKcqibu0=) 7: 4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa (hash: 0+sKDOBipHkQz4nFhrXYbndaiKHptrj+HuFFMm1OOrQ=) 8: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (hash: zOSU8HWzTX62npxk0Z0KI/TANc0CI5bXMVq+SzVjDCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: May 30 19:24:25 2025 GMT Not After : Jun 6 19:24:25 2025 GMT Subject: CN=683a05ea-5cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:fe:39:4e:ff:f2:d9:54:ef:5d:69:b1:4d: a6:f9:21:eb:26:70:b5:0a:4a:21:7a:27:3e:e3:9b: 39:86:b4:1d:23:b0:cb:30:d7:bb:00:51:45:7d:21: 9c:53:48:43:d4:03:3c:de:3b:32:39:41:8b:91:9c: ad:1a:aa:0a:69:68:5c:94:67:f9:b5:08:4f:29:8e: d3:86:79:f3:7c:71:6a:d5:19:82:83:fc:92:d4:1a: c1:f4:0e:c1:60:54:c5:29:ec:65:33:65:02:82:03: c5:ec:ea:ae:a2:8d:b9:f1:32:93:41:e6:b4:f3:c8: 4c:f1:4f:57:e5:05:da:32:52:20:8b:e6:bd:fc:f0: de:a6:e4:08:50:12:68:99:34:8d:4c:c0:a9:ae:e1: a9:7e:cf:40:c8:9e:9a:42:40:b0:4b:cd:8a:17:86: f8:be:4e:70:91:7c:a1:5f:0a:63:6b:02:1a:ab:fb: 47:c5:b4:c8:85:90:6d:20:f7:d0:3d:64:93:9e:d0: 4b:f9:0e:f6:49:71:3e:0a:3c:55:08:a4:b2:3d:b8: e4:9f:2c:ea:30:e2:6b:e8:d5:87:53:82:2f:39:81: 26:5f:fe:bf:98:be:db:47:8c:8e:3c:3b:74:66:2f: b0:cc:3b:d9:2a:8a:95:3b:5f:46:a5:cf:46:f4:da: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:1D:65:C8:65:F4:71:AD:6D:3A:C5:5E:1A:0F:10:DD:08:83:98 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:b5:db:33:51:93:c5:9b:9a:74:87:e7:9b:48:1e:24:d5: 0b:22:e8:88:a2:f4:de:21:d9:bb:6f:02:ce:06:eb:86:fb:ba: 53:5e:c5:ef:23:6e:26:64:59:9b:32:bf:21:61:a5:99:44:9e: a5:bf:f6:d4:50:d9:03:19:da:5b:81:32:8e:04:e5:bb:a4:f0: e7:54:88:15:bb:b7:58:51:68:0c:14:d1:e7:db:39:96:99:f8: 3a:92:b5:5d:6f:76:3b:58:5a:b5:9d:bc:81:e7:03:22:9c:6f: 43:4f:53:3d:05:bf:ad:93:6e:14:dd:3a:fb:e6:06:c5:00:bf: c8:ea:60:ea:f1:0c:34:1f:9a:f9:bd:47:fe:92:45:47:99:c6: 45:f5:bb:fb:e6:f0:56:93:3e:93:5d:3c:a3:94:00:cb:f9:86: 52:40:04:0a:2d:31:96:d7:4b:59:d2:3f:36:29:0c:e3:de:b9: 51:53:5e:7a:19:36:26:17:60:73:0d:68:3c:e1:bd:ec:3d:2d: 00:b5:70:31:dd:0e:fc:fa:1e:43:01:dc:3d:fa:7f:c3:29:17: 4a:4f:67:67:63:1f:46:55:8a:d1:46:1b:dc:85:d2:5b:df:81: dd:4c:b1:80:b9:cc:3d:bf:bf:9f:98:85:a5:82:cc:32:5e:1b: 10:19:19:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNTMwMTkyNDI1WhcNMjUwNjA2MTkyNDI1WjAYMRYwFAYD VQQDEw02ODNhMDVlYS01Y2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7P+OU7/8tlU711psU2m+SHrJnC1Ckoheic+45s5hrQdI7DLMNe7AFFFfSGc U0hD1AM83jsyOUGLkZytGqoKaWhclGf5tQhPKY7ThnnzfHFq1RmCg/yS1BrB9A7B YFTFKexlM2UCggPF7Oquoo258TKTQea088hM8U9X5QXaMlIgi+a9/PDepuQIUBJo mTSNTMCpruGpfs9AyJ6aQkCwS82KF4b4vk5wkXyhXwpjawIaq/tHxbTIhZBtIPfQ PWSTntBL+Q72SXE+CjxVCKSyPbjknyzqMOJr6NWHU4IvOYEmX/6/mL7bR4yOPDt0 Zi+wzDvZKoqVO19Gpc9G9NpkYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+jHWXI ZfRxrW06xV4aDxDdCIOYMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT47XbM1GTxZuadIfnm0geJNULIuiIovTeIdm7bwLOBuuG+7pTXsXv I24mZFmbMr8hYaWZRJ6lv/bUUNkDGdpbgTKOBOW7pPDnVIgVu7dYUWgMFNHn2zmW mfg6krVdb3Y7WFq1nbyB5wMinG9DT1M9Bb+tk24U3Tr75gbFAL/I6mDq8Qw0H5r5 vUf+kkVHmcZF9bv75vBWkz6TXTyjlADL+YZSQAQKLTGW10tZ0j82KQzj3rlRU156 GTYmF2BzDWg84b3sPS0AtXAx3Q78+h5DAdw9+n/DKRdKT2dnYx9GVYrRRhvchdJb 34HdTLGAucw9v7+fmIWlgswyXhsQGRkZ -----END CERTIFICATE-----Generated at Sat May 31 16:44:51 2025 by rpki-client