$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft File: pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json) Hash identifier: i4INVxCRwinh4SRDQaaXSbSQ46A1tLCueKCp03T3sQI= Subject key identifier: C2:45:F4:41:3B:7F:18:50:39:5A:28:D4:61:41:7F:EC:C6:34:CD:FB Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft Manifest number: 0420 Signing time: Sat 31 May 2025 00:35:36 +0000 Manifest this update: Sat 31 May 2025 00:35:36 +0000 Manifest next update: Sat 07 Jun 2025 00:35:36 +0000 Files and hashes: 1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: vPKQOcEa+bdDiNHygmwWZYY7UljpcdOfHjpLXTFtWT0=) 2: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: lIplJdaPasT2KYwLM0CqR2rgchRbxFw1QkPzOjcDDzQ=) 3: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: I/KKCOrgm9HCsHD4UXCBhGaL/wAB3+JEfU4a1X3HO+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6 Validity Not Before: May 31 00:35:36 2025 GMT Not After : Jun 7 00:35:36 2025 GMT Subject: CN=683a4ed8-adaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:0c:92:64:62:33:e9:f9:f7:ce:48:b6:96: c7:a5:9e:cd:35:9b:53:6b:ed:c7:00:46:88:35:ae: 71:4e:5d:b7:e1:b9:1d:0e:93:c8:12:b9:82:b2:40: 12:c5:f7:bc:8a:0c:6e:6a:f5:69:0e:b4:d3:99:95: 56:d1:61:e6:98:57:82:a2:50:94:0b:e5:e5:10:9e: 60:de:84:00:7f:00:21:b8:27:d3:74:0f:3e:88:0e: d0:9c:bb:86:06:f4:ca:f2:01:1b:d2:8e:93:f6:05: fa:35:fe:99:7a:89:ba:8a:70:72:fc:b3:32:3d:de: 3b:30:ae:29:5f:81:29:f3:bb:be:f6:5b:a1:ac:94: 0b:26:90:bb:9a:b0:ba:4f:29:f6:d3:01:fc:d9:4b: ef:b0:0d:ca:66:f1:21:45:f9:e3:1b:13:76:3c:c2: 47:0d:f3:38:8d:3a:ea:8c:3e:eb:1e:08:bc:21:1b: 83:fc:0d:7a:ab:29:2a:12:63:82:44:b3:b3:80:a3: ec:51:fc:8d:23:ef:9e:d2:62:76:17:18:2d:6c:1a: 50:ff:f8:f9:3c:af:13:23:0a:d5:b7:53:ac:4f:2a: 42:b2:b6:91:d0:62:6b:fb:a5:c2:56:74:f4:3b:36: ce:7d:fa:8d:bc:b5:97:8d:9f:75:22:b9:f3:e1:42: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:F4:41:3B:7F:18:50:39:5A:28:D4:61:41:7F:EC:C6:34:CD:FB X509v3 Authority Key Identifier: keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:31:b7:16:74:63:79:bc:bf:7c:7b:9d:d3:4e:fa:33:c2:bb: 7b:cb:09:d1:2d:46:12:7d:9a:45:c9:3e:44:6f:85:96:7b:1c: d1:04:fe:10:c6:b9:6d:76:54:34:4f:65:52:8e:36:5d:f7:31: ad:c0:3e:63:d2:c0:b1:ce:73:48:63:cf:f6:65:06:15:19:c1: 42:84:5a:bd:cb:18:4b:c8:d0:b0:e7:e4:7d:ec:11:24:04:7a: 60:56:50:f9:59:b9:92:16:10:fd:97:5e:2e:c7:1f:38:56:8f: 07:09:15:8f:5c:d2:16:7c:4a:37:c0:16:a2:59:85:8b:95:c4: 0e:e6:15:57:49:34:fb:56:65:f7:61:f4:0e:f2:15:ef:04:47: 12:26:84:ed:95:da:ff:81:6c:ea:18:d3:f7:43:52:2f:06:9d: 54:d6:83:43:fa:bd:91:cf:cf:0a:42:70:72:74:55:3b:8d:11: 15:c0:6d:8b:c9:59:2c:13:f4:40:4e:e9:8a:60:d9:87:a5:a2: bb:b8:f9:45:8b:78:ab:89:ed:4b:e3:4d:0c:2d:0a:a7:19:0f: f4:f1:a9:0f:c0:80:1d:e2:ff:dd:51:72:e0:73:d2:37:66:d9: be:ae:cc:ca:28:9e:d4:3b:97:e6:1d:ee:a9:6a:a3:8b:af:1a: 45:e9:c1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE N0E2Njg1QzYwHhcNMjUwNTMxMDAzNTM2WhcNMjUwNjA3MDAzNTM2WjAYMRYwFAYD VQQDEw02ODNhNGVkOC1hZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOgMkmRiM+n5985ItpbHpZ7NNZtTa+3HAEaINa5xTl234bkdDpPIErmCskAS xfe8igxuavVpDrTTmZVW0WHmmFeColCUC+XlEJ5g3oQAfwAhuCfTdA8+iA7QnLuG BvTK8gEb0o6T9gX6Nf6Zeom6inBy/LMyPd47MK4pX4Ep87u+9luhrJQLJpC7mrC6 Tyn20wH82UvvsA3KZvEhRfnjGxN2PMJHDfM4jTrqjD7rHgi8IRuD/A16qykqEmOC RLOzgKPsUfyNI++e0mJ2FxgtbBpQ//j5PK8TIwrVt1OsTypCsraR0GJr+6XCVnT0 OzbOffqNvLWXjZ91Irnz4UKafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJF9EE7 fxhQOVoo1GFBf+zGNM37MB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4 NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzc1Qy9BQ0FDMzlCRTY4NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJC M25URFAyOXpiRnJYcG1oY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvMbcWdGN5vL98e53TTvozwrt7ywnRLUYSfZpFyT5Eb4WWexzRBP4Q xrltdlQ0T2VSjjZd9zGtwD5j0sCxznNIY8/2ZQYVGcFChFq9yxhLyNCw5+R97BEk BHpgVlD5WbmSFhD9l14uxx84Vo8HCRWPXNIWfEo3wBaiWYWLlcQO5hVXSTT7VmX3 YfQO8hXvBEcSJoTtldr/gWzqGNP3Q1IvBp1U1oND+r2Rz88KQnBydFU7jREVwG2L yVksE/RATumKYNmHpaK7uPlFi3irie1L400MLQqnGQ/08akPwIAd4v/dUXLgc9I3 Ztm+rszKKJ7UO5fmHe6paqOLrxpF6cG8 -----END CERTIFICATE-----Generated at Sat May 31 16:33:04 2025 by rpki-client