$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: fJ8vveDjSLbIQOOlDKUB+3heVaLfJQ1qOuTLJ9uzy0Q= Subject key identifier: DE:E9:25:5A:6A:C0:A3:A9:E4:53:8D:FB:A0:D7:95:1F:72:3F:4B:EA Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 023E Signing time: Sat 31 May 2025 02:04:21 +0000 Manifest this update: Sat 31 May 2025 02:04:21 +0000 Manifest next update: Sat 07 Jun 2025 02:04:21 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: WiPFatEuuQQX0nKmfRIgOufu131f/umuxsQ9ZwZeMgc=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: May 31 02:04:21 2025 GMT Not After : Jun 7 02:04:21 2025 GMT Subject: CN=683a63a5-2f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:04:a4:9a:22:29:22:e0:7d:bc:7a:30:47: 9a:1a:a3:ac:c6:c4:68:8d:a7:6d:c5:cb:d9:4c:b9: 48:55:b0:c7:21:d9:eb:91:4f:ed:f0:59:38:7e:87: 01:aa:f7:54:56:e0:51:73:9e:92:59:08:56:23:ca: d7:16:54:70:f0:9c:bc:58:4f:07:e1:08:3e:62:47: 92:a0:45:d2:c2:83:c9:67:10:57:70:ca:42:44:fc: 2c:16:b9:32:c2:e4:bf:23:f8:82:55:85:45:45:1b: a6:c8:96:a7:b0:6a:6a:e5:51:0c:56:f2:4a:19:e8: 17:e7:8e:eb:d6:fe:d6:19:e0:78:7e:6d:92:3d:58: 67:2f:c8:cb:81:5a:2b:f0:32:c7:ae:d4:42:aa:f5: 49:c3:17:fa:66:2a:06:40:f8:46:84:41:d2:52:d4: ee:75:e7:99:c4:d9:d8:b3:92:2e:83:ce:24:50:9c: 52:12:9d:19:7a:10:17:4d:32:d3:30:8b:21:af:b2: 25:c2:15:5f:c6:a0:d9:9b:7e:83:d0:9e:4b:92:f5: b0:25:e9:02:32:7f:af:2d:41:a7:f6:9d:00:b2:cb: dc:f3:57:3c:4e:e7:83:22:a3:5a:fb:6d:8f:49:37: b4:4c:0c:c9:51:10:40:45:c4:ef:35:b6:a2:44:ee: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:25:5A:6A:C0:A3:A9:E4:53:8D:FB:A0:D7:95:1F:72:3F:4B:EA X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ff:75:d8:ab:06:eb:d8:db:1f:6d:3e:07:d8:b5:e0:d3:42: 60:4f:9f:74:08:ce:b6:b0:06:5f:b6:ee:7c:f0:71:6e:36:90: f8:64:ec:5c:3b:cf:29:ac:7c:49:26:16:ab:3c:57:93:ec:2e: 60:eb:f4:2a:34:41:72:89:09:2b:21:18:3c:a6:77:16:f0:37: de:3b:52:88:54:8f:36:a6:d0:d0:d1:df:db:8d:3b:cf:71:96: c8:65:8e:f6:fd:97:ac:1f:39:7d:5f:14:8f:0f:d1:63:20:e4: 0c:de:40:97:80:fe:fd:8a:8f:54:4d:76:6b:22:76:30:6a:59: 08:e1:6e:6b:6f:6d:f0:e6:d4:9b:5e:3e:fa:f0:97:0a:df:38: 62:e1:51:aa:01:9a:eb:6c:9a:fd:00:6c:72:c5:87:a1:64:2b: c3:02:70:2b:70:7e:ae:29:7a:d3:00:5f:fb:30:bd:28:5e:5e: 4c:4a:4e:83:6a:75:26:ca:90:d1:73:b2:23:0e:ce:79:f1:9d: eb:a4:54:f6:a9:74:eb:23:f7:2e:dd:52:0c:c4:01:44:87:a9: 63:11:7d:2d:a9:37:fe:a4:f9:96:44:6e:06:e5:9c:10:73:2e: b1:c2:a5:00:a5:4f:9f:52:61:91:8f:2d:1b:d7:cf:43:7a:78: f6:78:27:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUwNTMxMDIwNDIxWhcNMjUwNjA3MDIwNDIxWjAYMRYwFAYD VQQDEw02ODNhNjNhNS0yZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vAEpJoiKSLgfbx6MEeaGqOsxsRojadtxcvZTLlIVbDHIdnrkU/t8Fk4focB qvdUVuBRc56SWQhWI8rXFlRw8Jy8WE8H4Qg+YkeSoEXSwoPJZxBXcMpCRPwsFrky wuS/I/iCVYVFRRumyJansGpq5VEMVvJKGegX547r1v7WGeB4fm2SPVhnL8jLgVor 8DLHrtRCqvVJwxf6ZioGQPhGhEHSUtTudeeZxNnYs5Iug84kUJxSEp0ZehAXTTLT MIshr7IlwhVfxqDZm36D0J5LkvWwJekCMn+vLUGn9p0Assvc81c8TueDIqNa+22P STe0TAzJURBARcTvNbaiRO6ZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7pJVpq wKOp5FON+6DXlR9yP0vqMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd/3XYqwbr2NsfbT4H2LXg00JgT590CM62sAZftu588HFuNpD4ZOxc O88prHxJJharPFeT7C5g6/QqNEFyiQkrIRg8pncW8DfeO1KIVI82ptDQ0d/bjTvP cZbIZY72/ZesHzl9XxSPD9FjIOQM3kCXgP79io9UTXZrInYwalkI4W5rb23w5tSb Xj768JcK3zhi4VGqAZrrbJr9AGxyxYehZCvDAnArcH6uKXrTAF/7ML0oXl5MSk6D anUmypDRc7IjDs558Z3rpFT2qXTrI/cu3VIMxAFEh6ljEX0tqTf+pPmWRG4G5ZwQ cy6xwqUApU+fUmGRjy0b189Denj2eCeZ -----END CERTIFICATE-----Generated at Sat May 31 15:18:05 2025 by rpki-client