$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: 5+nmzhh+OWkS7Y0mCt33V70AZBw2UxcSdp2pQY7UkE8= Subject key identifier: 31:B2:A6:10:A4:92:36:E4:C1:F5:AB:C8:70:0D:36:1A:2A:FB:01:C0 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C28 Signing time: Fri 30 May 2025 18:46:06 +0000 Manifest this update: Fri 30 May 2025 18:46:05 +0000 Manifest next update: Fri 06 Jun 2025 18:46:05 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: QOqgJs7V3Tp5lS57Kn0HHF5jX8w5k1MVdL5P/IBS2bo=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: May 30 18:46:05 2025 GMT Not After : Jun 6 18:46:05 2025 GMT Subject: CN=6839fcee-4465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:01:a6:e1:d8:c9:d0:b5:81:8f:69:2a:fd: 7e:71:cc:83:c7:b6:23:3c:7a:0a:c2:1a:ff:23:7b: c4:22:ff:6d:20:da:94:8c:cc:a8:da:ab:7d:da:e0: da:f2:ff:7d:fb:cf:e1:2d:e2:6e:88:cd:76:2c:5e: c9:30:c8:c4:d1:7a:69:d8:3b:f5:3e:a9:85:dd:5e: 71:5a:83:4b:9a:8e:d9:a2:b0:9d:3d:63:7a:1f:aa: 31:f3:f0:5f:f6:9a:af:7b:9b:30:0e:a6:f3:4a:86: a6:02:11:63:c8:2a:30:b7:56:a7:72:c5:52:7d:2f: c3:e9:3a:b9:ee:63:f8:85:45:90:ab:01:75:dd:c2: b5:57:05:9d:d3:2e:cd:de:a5:c7:1c:0b:33:0b:7d: 64:56:5a:e2:9d:0e:03:e2:72:dd:2f:d3:22:66:56: 73:f7:9a:1c:04:f9:09:de:b4:79:e0:62:63:65:59: 8c:78:58:c7:4b:3f:61:54:cb:b2:d5:e7:51:73:ef: a9:2c:20:67:3d:a7:aa:a5:4c:c5:a2:3e:45:42:7a: f6:56:bf:7f:df:db:93:97:e4:d8:07:20:49:c5:11: 3c:e4:e3:df:30:2c:62:b3:70:f8:11:ed:d9:e1:dd: 7c:cd:05:d7:88:c5:63:a7:10:dd:d1:0d:80:fc:ab: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B2:A6:10:A4:92:36:E4:C1:F5:AB:C8:70:0D:36:1A:2A:FB:01:C0 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a6:fc:34:08:ab:91:d5:74:a1:6d:dc:24:84:84:42:a6:f6: 04:2a:f9:99:94:bd:10:c3:35:4d:e9:e2:5d:ca:bd:4b:68:36: 29:56:18:ed:0d:6b:4d:db:3e:8a:19:5e:30:76:34:e4:ff:66: 43:bb:f2:21:60:0f:c7:63:4b:aa:92:9d:71:fe:02:43:95:ee: 4f:9d:58:ed:58:be:d1:1d:48:9b:27:de:e3:35:2d:94:ba:4a: 8c:ae:10:4f:e4:41:db:b2:d4:96:1f:92:82:b3:74:aa:b4:26: a9:97:7b:9c:5c:05:d0:e0:1d:22:46:18:9c:3c:06:a9:f0:49: 5a:13:f1:98:0b:bd:35:9a:23:a1:99:f2:1d:b3:86:ed:22:61: 26:02:14:17:80:c9:5d:a4:5d:4c:30:1e:88:50:66:0c:da:12: 7a:35:38:33:25:09:74:a5:64:58:8d:05:29:6c:1e:57:93:97: 4e:cd:71:92:2a:00:10:a1:bb:69:06:f0:fd:65:5a:8b:00:a9: 02:58:5b:91:12:7a:92:01:93:8f:0b:5f:f3:08:84:a6:ff:f1: c4:9c:3e:d1:6b:d0:63:dc:5d:03:62:70:8d:df:f2:0e:9a:56: ca:c8:54:0e:5d:d1:d2:24:ca:c9:9b:09:21:03:9d:49:69:93: 7a:9d:ba:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNTMwMTg0NjA1WhcNMjUwNjA2MTg0NjA1WjAYMRYwFAYD VQQDEw02ODM5ZmNlZS00NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1gBpuHYydC1gY9pKv1+ccyDx7YjPHoKwhr/I3vEIv9tINqUjMyo2qt92uDa 8v99+8/hLeJuiM12LF7JMMjE0Xpp2Dv1PqmF3V5xWoNLmo7ZorCdPWN6H6ox8/Bf 9pqve5swDqbzSoamAhFjyCowt1ancsVSfS/D6Tq57mP4hUWQqwF13cK1VwWd0y7N 3qXHHAszC31kVlrinQ4D4nLdL9MiZlZz95ocBPkJ3rR54GJjZVmMeFjHSz9hVMuy 1edRc++pLCBnPaeqpUzFoj5FQnr2Vr9/39uTl+TYByBJxRE85OPfMCxis3D4Ee3Z 4d18zQXXiMVjpxDd0Q2A/Ku/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGyphCk kjbkwfWryHANNhoq+wHAMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRpvw0CKuR1XShbdwkhIRCpvYEKvmZlL0QwzVN6eJdyr1LaDYpVhjt DWtN2z6KGV4wdjTk/2ZDu/IhYA/HY0uqkp1x/gJDle5PnVjtWL7RHUibJ97jNS2U ukqMrhBP5EHbstSWH5KCs3SqtCapl3ucXAXQ4B0iRhicPAap8ElaE/GYC701miOh mfIds4btImEmAhQXgMldpF1MMB6IUGYM2hJ6NTgzJQl0pWRYjQUpbB5Xk5dOzXGS KgAQobtpBvD9ZVqLAKkCWFuREnqSAZOPC1/zCISm//HEnD7Ra9Bj3F0DYnCN3/IO mlbKyFQOXdHSJMrJmwkhA51JaZN6nbrO -----END CERTIFICATE-----Generated at Sat May 31 16:35:49 2025 by rpki-client