$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: 1bj07C7RBx6k9mGW/Xust+NegXJb7/TnLeGPK7LQwhI= Subject key identifier: 57:95:5F:3B:84:AA:22:A3:6B:05:E9:3A:8D:11:54:3B:B7:74:FB:B2 Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 0314 Signing time: Sat 31 May 2025 01:23:38 +0000 Manifest this update: Sat 31 May 2025 01:23:38 +0000 Manifest next update: Sat 07 Jun 2025 01:23:38 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: ZFBL99yyX9Fa9eHnmXJPogSJRvjSM63Nt9yj/DsbYAU=) 2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=) 3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: May 31 01:23:38 2025 GMT Not After : Jun 7 01:23:38 2025 GMT Subject: CN=683a5a1a-ddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:42:11:14:c1:e1:be:30:16:fd:63:be:3b: c5:05:f9:a1:86:d8:c0:a9:fa:56:34:5e:d9:47:c5: 8b:1c:36:da:72:06:84:0a:16:27:62:01:06:68:5c: ef:b4:01:36:4f:16:de:cd:a4:61:49:58:73:a6:54: 3c:b0:3b:b9:1c:b8:88:fa:fb:b3:f7:a1:87:dd:28: 55:af:f8:95:de:b5:33:02:bc:31:4b:94:6f:e3:39: 56:10:74:08:7c:48:67:11:8f:33:80:d1:f7:0a:7a: 6d:d9:e1:26:ce:27:a0:41:11:1b:d7:9f:9c:35:f2: 8b:8f:26:cd:b2:8d:d5:87:ae:da:42:84:8c:2c:e0: d1:ba:f1:b0:22:77:a1:bf:34:56:9d:80:21:b4:d4: f9:19:07:8c:51:03:c2:4c:a8:80:a8:37:0c:31:b3: 19:18:e5:a7:25:7f:41:71:96:b6:3e:54:30:b2:45: 82:bb:34:f9:34:c6:75:29:12:41:43:91:a9:f1:3f: 35:d6:04:39:87:df:22:ca:02:28:18:5c:95:f4:5d: 19:69:f1:0b:8f:fd:40:84:69:e3:9a:7d:09:94:4a: f1:ae:c5:23:10:2a:44:ee:23:94:f7:c8:5b:a8:f6: 24:a3:04:02:c9:10:ae:7f:bd:4b:6e:ea:63:3e:65: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:95:5F:3B:84:AA:22:A3:6B:05:E9:3A:8D:11:54:3B:B7:74:FB:B2 X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:0d:44:a8:e1:84:1b:05:5a:2a:2c:41:c1:0d:5d:b8:46:d2: 67:81:2e:73:f3:d4:6b:4f:4f:03:70:66:d9:08:55:e7:f8:84: b9:d9:0f:cc:9f:af:47:cd:63:21:48:ed:cc:25:08:5b:a6:26: f3:7d:28:36:49:c8:9c:94:4a:3e:64:41:54:df:41:27:50:e1: 6c:61:51:1d:48:97:b3:c9:8b:50:13:ca:17:c2:f3:b6:7c:7a: 13:78:97:19:95:57:d8:9c:af:43:34:5b:12:61:3e:65:80:8d: 54:e9:16:2d:c3:39:c6:90:d4:8e:7d:fe:c9:af:af:75:a2:97: fc:0b:68:13:83:e5:ed:ad:b7:21:a8:7a:3a:9a:31:51:c7:1b: 6c:1a:02:cf:25:c9:5e:89:78:c7:07:11:cd:02:2b:5c:0c:f2: 1e:d5:9c:7a:ea:34:70:d6:0f:a4:80:ed:d4:93:45:44:ad:38: e8:33:fa:ef:d4:54:e7:c6:29:ea:83:47:6b:c2:ba:73:33:47: b0:89:a4:15:4d:ff:9e:45:a1:3d:63:b2:91:18:bd:42:b5:ef: b0:b9:8f:24:5f:9c:97:33:c3:63:43:1f:08:cf:fa:cf:66:1d: 9d:85:13:fb:c3:bf:59:55:f6:7c:51:bc:9b:ac:37:20:02:62: be:19:fc:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjUwNTMxMDEyMzM4WhcNMjUwNjA3MDEyMzM4WjAYMRYwFAYD VQQDEw02ODNhNWExYS1kZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUBCERTB4b4wFv1jvjvFBfmhhtjAqfpWNF7ZR8WLHDbacgaEChYnYgEGaFzv tAE2TxbezaRhSVhzplQ8sDu5HLiI+vuz96GH3ShVr/iV3rUzArwxS5Rv4zlWEHQI fEhnEY8zgNH3Cnpt2eEmziegQREb15+cNfKLjybNso3Vh67aQoSMLODRuvGwIneh vzRWnYAhtNT5GQeMUQPCTKiAqDcMMbMZGOWnJX9BcZa2PlQwskWCuzT5NMZ1KRJB Q5Gp8T811gQ5h98iygIoGFyV9F0ZafELj/1AhGnjmn0JlErxrsUjECpE7iOU98hb qPYkowQCyRCuf71LbupjPmUkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeVXzuE qiKjawXpOo0RVDu3dPuyMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcDUSo4YQbBVoqLEHBDV24RtJngS5z89RrT08DcGbZCFXn+IS52Q/M n69HzWMhSO3MJQhbpibzfSg2SciclEo+ZEFU30EnUOFsYVEdSJezyYtQE8oXwvO2 fHoTeJcZlVfYnK9DNFsSYT5lgI1U6RYtwznGkNSOff7Jr691opf8C2gTg+Xtrbch qHo6mjFRxxtsGgLPJcleiXjHBxHNAitcDPIe1Zx66jRw1g+kgO3Uk0VErTjoM/rv 1FTnxinqg0drwrpzM0ewiaQVTf+eRaE9Y7KRGL1Cte+wuY8kX5yXM8NjQx8Iz/rP Zh2dhRP7w79ZVfZ8UbybrDcgAmK+Gfyl -----END CERTIFICATE-----Generated at Sat May 31 16:33:11 2025 by rpki-client