$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: WyjWKnZMP9VyLkZ0Wx+xkeewxwvVgAKVtqT/+fj+L0E= Subject key identifier: E8:F0:78:23:5C:2B:49:AA:CF:1C:B4:30:E3:50:20:F0:81:C9:33:71 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C0B Signing time: Fri 04 Apr 2025 18:44:26 +0000 Manifest this update: Fri 04 Apr 2025 18:44:25 +0000 Manifest next update: Fri 11 Apr 2025 18:44:25 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: HLonblgCZSjHfr9uk8D0gf0j2q4rfJn+lzfoANCviYo=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: PM+7yjNUW+0HCriKrnBjjl10/XxF9A80OLBaAQvg4eE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: GI0D4c+i8GztSKiMIzM0FDwwnqFG6gghVhxe7Xvgsdw=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: 1s/7qjoQVEcC3QQ1Qup7SEEfGC2IOmSmzbw/kmobCm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70 Validity Not Before: Apr 4 18:44:25 2025 GMT Not After : Apr 11 18:44:25 2025 GMT Subject: CN=67f02889-a7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:94:a1:21:f4:56:89:80:10:66:19:f4:31: 87:20:88:61:8b:81:aa:a9:6f:ab:87:3c:8c:20:7f: 76:e3:a3:b8:ae:d2:05:9a:34:47:ed:f8:d6:c6:57: 4b:dd:e6:5e:5d:23:ed:e9:70:5c:79:cc:25:99:be: ed:b8:a7:84:ed:ad:3b:96:13:8c:9a:cf:24:91:54: 37:4c:78:09:56:ff:4a:cf:f0:f6:de:f9:4f:9e:15: 6a:da:95:75:9b:8a:dd:9b:62:5e:c6:cb:2f:55:2c: 7c:bb:0f:ec:4b:c5:e5:ed:9d:42:e0:9a:57:f8:87: e1:6b:c1:bd:26:99:e1:5e:fc:f6:92:98:f7:e6:8a: 78:68:e6:63:40:b1:6a:3b:98:f7:27:08:fb:c1:6d: 47:53:39:35:50:38:24:23:1b:f0:a5:2c:35:66:87: fd:01:5d:66:91:b4:b9:69:04:80:e2:10:0e:d9:c1: a1:4c:f2:00:d4:fd:8e:52:5c:0e:76:48:7f:e9:cc: 7b:2e:6d:da:02:20:d6:8b:e2:7b:94:12:4b:78:15: d4:b8:d3:c0:96:e8:3d:f3:1c:13:f1:b3:00:0e:8d: fc:77:bf:a5:5a:f4:2a:a7:d0:39:43:ec:5a:5b:19: 6f:f5:81:ee:eb:7a:cd:ab:44:52:22:fa:47:a7:70: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F0:78:23:5C:2B:49:AA:CF:1C:B4:30:E3:50:20:F0:81:C9:33:71 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:33:10:7e:75:42:b1:7f:9f:5d:71:27:78:6b:6d:d6:0f:5b: a3:bc:00:2d:2b:0f:c0:2e:07:2c:14:d3:5e:b4:8b:08:67:d9: 97:4d:d0:d7:89:67:a8:7f:f0:ac:05:2f:c4:85:a3:9f:5e:a3: 63:f1:12:19:56:c7:31:30:2c:00:31:e6:ca:e3:6e:53:8f:3b: c4:3f:be:eb:a1:73:04:03:b3:18:1a:ea:d3:8b:45:ff:47:8a: 55:c0:0e:ef:48:f9:79:4f:3f:8a:25:dc:ca:07:97:84:36:d0: 62:a5:2e:ce:6a:b1:3a:90:78:08:5e:00:48:1a:e8:12:9a:68: 07:32:dc:96:14:a3:f7:e8:eb:c7:40:15:ae:a0:55:b0:d8:47: b2:ef:c2:3b:66:ec:cc:b6:58:8e:c5:94:b6:74:2f:8a:93:30: 4e:be:b3:54:53:8e:e8:2d:12:c8:ee:6f:cc:2a:ac:ea:86:4e: e4:53:1e:93:20:31:38:a3:ff:9b:10:96:94:a0:cf:db:c8:9a: 29:e1:6b:51:db:e7:32:a6:51:7f:b2:59:1d:fd:9d:3f:c0:f8: e0:a0:43:71:c2:82:e4:9b:86:7a:d5:72:24:e3:2c:a8:c7:6c: 3c:6f:33:bd:8a:ba:24:91:c8:23:ba:66:5a:e2:26:df:3f:dd: 12:3a:77:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNDA0MTg0NDI1WhcNMjUwNDExMTg0NDI1WjAYMRYwFAYD VQQDEw02N2YwMjg4OS1hN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw6UoSH0VomAEGYZ9DGHIIhhi4GqqW+rhzyMIH9246O4rtIFmjRH7fjWxldL 3eZeXSPt6XBcecwlmb7tuKeE7a07lhOMms8kkVQ3THgJVv9Kz/D23vlPnhVq2pV1 m4rdm2JexssvVSx8uw/sS8Xl7Z1C4JpX+Ifha8G9JpnhXvz2kpj35op4aOZjQLFq O5j3Jwj7wW1HUzk1UDgkIxvwpSw1Zof9AV1mkbS5aQSA4hAO2cGhTPIA1P2OUlwO dkh/6cx7Lm3aAiDWi+J7lBJLeBXUuNPAlug98xwT8bMADo38d7+lWvQqp9A5Q+xa Wxlv9YHu63rNq0RSIvpHp3DARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjweCNc K0mqzxy0MONQIPCByTNxMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaMxB+dUKxf59dcSd4a23WD1ujvAAtKw/ALgcsFNNetIsIZ9mXTdDX iWeof/CsBS/EhaOfXqNj8RIZVscxMCwAMebK425TjzvEP77roXMEA7MYGurTi0X/ R4pVwA7vSPl5Tz+KJdzKB5eENtBipS7OarE6kHgIXgBIGugSmmgHMtyWFKP36OvH QBWuoFWw2Eey78I7ZuzMtliOxZS2dC+KkzBOvrNUU47oLRLI7m/MKqzqhk7kUx6T IDE4o/+bEJaUoM/byJop4WtR2+cyplF/slkd/Z0/wPjgoENxwoLkm4Z61XIk4yyo x2w8bzO9irokkcgjumZa4ibfP90SOnfB -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:44 2025 by rpki-client