$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: oUjs/V7pnru7cEBPtc3lMG+72D+1qtMnlqk7uCOB230= Subject key identifier: 89:C8:18:90:41:38:87:DC:90:B4:CA:82:EB:56:71:D5:75:03:13:26 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 06DD Signing time: Fri 30 May 2025 22:13:41 +0000 Manifest this update: Fri 30 May 2025 22:13:41 +0000 Manifest next update: Fri 06 Jun 2025 22:13:41 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: cw+xxkeT+og7QiWAy5ZZMdxPdOBiilrufLZjjIQ0Fi8=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: May 30 22:13:41 2025 GMT Not After : Jun 6 22:13:41 2025 GMT Subject: CN=683a2d95-460f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:6b:92:ca:ec:56:2b:6b:bb:a8:04:c4:c5: f4:6f:ab:d4:29:84:7d:e1:e9:54:96:96:b3:98:61: 5c:67:b3:b2:64:34:c0:29:4a:13:e2:c7:61:87:3b: 4c:63:a2:b2:22:2e:d0:57:e8:a9:96:8e:a0:ba:b2: b1:85:b3:3a:9e:9f:a6:08:23:78:71:7f:67:df:68: c4:eb:b5:9a:f4:16:09:fa:70:c3:60:93:21:19:4f: 73:81:e4:f4:9d:dd:dc:f9:4b:ca:70:c4:a3:25:5c: 9b:0f:bd:72:51:fe:f4:e7:89:c0:75:0a:9c:31:9d: f9:21:f9:39:16:51:2c:12:dd:b6:e0:5b:5a:45:86: 3e:52:d1:60:7a:eb:0e:13:88:07:c7:cb:59:5d:52: ae:67:65:f4:e6:8f:1f:05:e6:29:b7:b4:3b:32:e4: 3c:d7:1e:78:a3:4e:82:ca:5e:c7:92:47:97:b0:a2: 9b:e0:46:6a:dd:e7:9a:09:cd:e9:8c:7f:10:02:49: 18:5e:af:b5:7b:4d:a8:6b:6e:bf:b4:bf:18:b1:f2: 89:8c:a5:2a:5c:3e:5c:ae:01:62:d6:e3:72:b6:1e: dc:f1:47:5d:af:06:37:bb:7a:66:38:6d:9a:1d:da: a3:61:d4:04:db:ca:4a:e9:2f:25:d9:e0:63:c8:6c: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:18:90:41:38:87:DC:90:B4:CA:82:EB:56:71:D5:75:03:13:26 X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6b:a0:e5:98:9e:f8:9e:66:8a:df:f8:15:4d:c5:f0:cb:7d: f0:34:c1:39:7b:3d:15:bd:52:37:4b:da:f1:bc:3c:ee:b7:b2: ac:15:0a:21:27:90:8f:a4:83:8b:53:ad:84:99:22:0c:f1:03: 55:53:f0:42:c5:0f:5d:af:0f:1f:4c:7d:c7:a8:f9:40:e7:0c: 3a:62:2b:db:51:0c:aa:0b:89:8b:6e:ae:51:a4:55:37:6b:2b: e3:de:0e:70:74:47:cb:e4:79:e7:6a:6b:ed:7d:40:5d:b6:a7: 17:94:af:f4:d2:0e:99:f6:76:2d:71:cd:6c:49:64:e2:ad:07: a3:19:08:b2:44:24:c3:b7:50:18:4c:1d:bf:49:38:a5:e0:1c: b8:6f:78:72:76:81:5f:10:98:1e:4d:31:46:f5:fa:13:85:f9: 45:e6:fe:72:96:fe:d6:dd:5a:93:2f:b1:76:26:74:f9:03:c4: 59:01:49:fa:4e:52:78:ab:ef:22:b4:07:c9:61:5c:08:d0:9d: 10:4e:5d:81:54:0b:e1:d7:eb:11:19:1e:f4:c2:c1:d3:43:b4: 9f:f1:35:32:9c:5b:cc:b6:9b:9c:79:c4:2c:aa:b1:2a:cb:08: 2b:d1:fa:0e:22:4b:16:4b:77:c1:8e:76:0c:7f:fc:e3:7f:11: 77:a2:f9:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUwNTMwMjIxMzQxWhcNMjUwNjA2MjIxMzQxWjAYMRYwFAYD VQQDEw02ODNhMmQ5NS00NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJlrksrsVitru6gExMX0b6vUKYR94elUlpazmGFcZ7OyZDTAKUoT4sdhhztM Y6KyIi7QV+iplo6gurKxhbM6np+mCCN4cX9n32jE67Wa9BYJ+nDDYJMhGU9zgeT0 nd3c+UvKcMSjJVybD71yUf7054nAdQqcMZ35Ifk5FlEsEt224FtaRYY+UtFgeusO E4gHx8tZXVKuZ2X05o8fBeYpt7Q7MuQ81x54o06Cyl7HkkeXsKKb4EZq3eeaCc3p jH8QAkkYXq+1e02oa26/tL8YsfKJjKUqXD5crgFi1uNyth7c8UddrwY3u3pmOG2a HdqjYdQE28pK6S8l2eBjyGzrRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInIGJBB OIfckLTKgutWcdV1AxMmMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBba6DlmJ74nmaK3/gVTcXwy33wNME5ez0VvVI3S9rxvDzut7KsFQoh J5CPpIOLU62EmSIM8QNVU/BCxQ9drw8fTH3HqPlA5ww6YivbUQyqC4mLbq5RpFU3 ayvj3g5wdEfL5HnnamvtfUBdtqcXlK/00g6Z9nYtcc1sSWTirQejGQiyRCTDt1AY TB2/STil4By4b3hydoFfEJgeTTFG9foThflF5v5ylv7W3VqTL7F2JnT5A8RZAUn6 TlJ4q+8itAfJYVwI0J0QTl2BVAvh1+sRGR70wsHTQ7Sf8TUynFvMtpucecQsqrEq ywgr0foOIksWS3fBjnYMf/zjfxF3ovna -----END CERTIFICATE-----Generated at Sat May 31 17:49:42 2025 by rpki-client