$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: t+Q9Qx0C7p9/wqlfnpWDYzHVgyOz5vYrTRLRT909rcA= Subject key identifier: 7C:02:1F:C9:0F:6D:F2:1C:03:4E:EC:52:2F:10:91:DA:A3:B8:3D:F7 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 0634 Signing time: Fri 30 May 2025 22:55:02 +0000 Manifest this update: Fri 30 May 2025 22:55:01 +0000 Manifest next update: Fri 06 Jun 2025 22:55:01 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: MgqpdVKSjT0aW7x3g2XEOSuI6ZKvIiQXIkk/ZCSvInQ=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: May 30 22:55:01 2025 GMT Not After : Jun 6 22:55:01 2025 GMT Subject: CN=683a3745-6bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:a0:db:06:b6:6a:7e:af:5e:2d:61:b2:24: 89:64:26:79:06:17:39:c9:13:e0:59:f3:6c:58:a7: 28:3b:91:cc:9d:ad:c3:bd:84:62:7f:33:90:18:fd: da:68:5e:c0:aa:3d:52:af:76:35:76:fb:88:fb:d1: 94:d9:94:73:73:a7:a1:fe:71:55:90:c2:55:47:94: 50:45:d2:13:fd:00:b1:1e:fe:a7:34:da:cf:1a:67: 94:bc:ab:9f:1a:ba:52:97:0e:5d:8f:b1:53:d8:a7: d9:9d:50:7a:b8:87:f3:4b:ef:26:02:16:99:70:27: 49:15:3e:60:24:18:8a:ad:a8:a5:a0:47:2b:ce:2d: 44:50:52:27:85:72:f2:f2:2d:a5:31:85:7f:8d:5a: a8:30:3b:7f:f8:e5:11:d7:71:c6:06:09:b8:68:43: b4:e5:6c:00:09:df:21:2d:59:8f:cd:eb:b5:81:e8: 11:16:d3:db:26:24:1f:e0:58:c0:70:a6:c7:ba:84: 24:23:35:da:86:b1:f0:57:63:99:4a:e9:ea:89:5c: 52:36:41:59:dd:12:b1:48:03:f6:b3:21:7e:39:11: a6:ac:d1:ff:b8:88:72:1f:f8:8f:56:32:f6:bd:73: f1:3c:ee:ec:7f:ce:6b:97:63:ff:0f:7c:1b:d4:4c: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:02:1F:C9:0F:6D:F2:1C:03:4E:EC:52:2F:10:91:DA:A3:B8:3D:F7 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:87:a6:31:4e:a8:15:97:c3:3a:72:bf:f4:a2:71:11:cf:6b: c7:81:2d:ac:53:85:2f:1f:0c:83:aa:07:d8:ee:be:dc:9e:c2: 4e:32:97:b6:09:57:0c:cd:93:ad:94:25:52:2c:a7:d0:c8:99: 7c:20:7a:b1:d3:37:06:f1:19:2d:e2:d0:1b:15:1d:ff:ba:4d: 62:9e:d4:a4:d7:e3:00:02:0f:e8:ac:99:86:d1:08:5b:a7:f7: e3:12:82:b3:9a:3f:5c:05:1a:c7:84:1b:31:b3:7e:7c:ac:0a: 55:ba:7e:11:6d:f2:18:4b:f3:0a:04:91:b5:f0:59:6d:1f:28: 16:e3:c2:e7:4a:a6:55:a4:4c:1b:29:c8:2e:89:ec:e6:cf:85: bb:03:ea:ca:c5:9c:d2:07:87:ad:07:d4:d6:af:93:b7:0d:3e: a9:f9:71:a5:69:f5:0e:55:e1:44:79:fe:50:96:c9:48:15:c8: 35:dd:5f:97:c4:82:65:b4:10:f2:08:70:e8:2c:be:4a:74:f4: 9b:5e:84:cf:ce:5f:2c:23:67:a4:e4:0a:56:38:b2:52:84:8f: 00:be:55:0e:c5:cb:95:0d:36:87:0c:f3:8e:a9:29:c1:10:c6: e4:7c:7f:d8:88:c3:3b:d3:7d:47:29:ab:35:54:f2:6d:a6:e7: 25:59:78:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwNTMwMjI1NTAxWhcNMjUwNjA2MjI1NTAxWjAYMRYwFAYD VQQDEw02ODNhMzc0NS02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+qg2wa2an6vXi1hsiSJZCZ5Bhc5yRPgWfNsWKcoO5HMna3DvYRifzOQGP3a aF7Aqj1Sr3Y1dvuI+9GU2ZRzc6eh/nFVkMJVR5RQRdIT/QCxHv6nNNrPGmeUvKuf GrpSlw5dj7FT2KfZnVB6uIfzS+8mAhaZcCdJFT5gJBiKrailoEcrzi1EUFInhXLy 8i2lMYV/jVqoMDt/+OUR13HGBgm4aEO05WwACd8hLVmPzeu1gegRFtPbJiQf4FjA cKbHuoQkIzXahrHwV2OZSunqiVxSNkFZ3RKxSAP2syF+ORGmrNH/uIhyH/iPVjL2 vXPxPO7sf85rl2P/D3wb1EwlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwCH8kP bfIcA07sUi8QkdqjuD33MB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMh6YxTqgVl8M6cr/0onERz2vHgS2sU4UvHwyDqgfY7r7cnsJOMpe2 CVcMzZOtlCVSLKfQyJl8IHqx0zcG8Rkt4tAbFR3/uk1intSk1+MAAg/orJmG0Qhb p/fjEoKzmj9cBRrHhBsxs358rApVun4RbfIYS/MKBJG18FltHygW48LnSqZVpEwb Kcguiezmz4W7A+rKxZzSB4etB9TWr5O3DT6p+XGlafUOVeFEef5QlslIFcg13V+X xIJltBDyCHDoLL5KdPSbXoTPzl8sI2ek5ApWOLJShI8AvlUOxcuVDTaHDPOOqSnB EMbkfH/YiMM7031HKas1VPJtpuclWXi8 -----END CERTIFICATE-----Generated at Sat May 31 17:46:31 2025 by rpki-client