$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: nlw/gtE9iy+PPWKMQ+zI9vIsvB7ZaIVWQ85+wVRXeDc= Subject key identifier: 51:E3:E3:63:01:FF:40:07:55:10:38:4E:98:08:CC:8C:C1:8E:AD:FC Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A08 Signing time: Thu 24 Apr 2025 19:43:50 +0000 Manifest this update: Thu 24 Apr 2025 19:43:49 +0000 Manifest next update: Thu 01 May 2025 19:43:49 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: dZffJjxLVV2ki2TVLo0ZeTFqxJhSQ96Iyp4llR07OjM=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Apr 24 19:43:49 2025 GMT Not After : May 1 19:43:49 2025 GMT Subject: CN=680a9476-c3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:3c:ed:5e:85:c6:44:6f:8c:06:f9:97:76: 5c:27:61:1c:39:53:cd:0a:cd:01:a7:2a:65:ab:11: 93:73:0f:b5:35:88:86:06:07:92:c4:7e:85:6d:64: c6:d1:95:73:39:b2:0f:8f:12:f1:7d:51:46:4b:08: e2:e0:b3:0c:2d:f5:30:a3:66:d9:9c:b7:00:f7:44: 38:92:96:47:29:30:a6:69:79:45:9c:23:0e:27:cf: 1b:59:ce:1b:b4:a5:46:e0:d0:21:80:78:dd:ce:6a: 8a:8f:91:60:91:2b:d8:85:68:24:62:81:3a:1e:21: ab:99:3e:5d:a4:29:71:0a:3f:2a:01:31:b6:dc:76: e6:65:67:37:48:8e:de:cf:c3:e2:23:3d:1b:49:81: 1f:f0:c8:12:42:da:76:bb:3a:7c:31:fc:14:ed:cf: 59:f9:5f:6a:2d:0e:f7:78:3c:c4:e6:1f:65:e5:a7: 77:48:33:26:a5:b5:d0:63:73:7d:96:aa:fe:39:ca: ae:9c:21:25:b2:58:27:35:b7:93:03:30:b1:3f:28: e5:8f:ff:f4:0f:2c:be:87:5d:bc:95:07:73:0b:a2: 00:c5:38:f5:4b:b4:08:5c:41:4e:c4:7c:f9:6a:a4: 41:de:0b:4e:09:30:c3:56:d7:32:5c:fd:7e:f2:9d: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:E3:63:01:FF:40:07:55:10:38:4E:98:08:CC:8C:C1:8E:AD:FC X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:28:d5:4b:7c:65:e0:40:4b:2d:e9:f4:f7:4c:9a:8a:60:3a: 81:6f:70:a2:59:a9:b9:23:21:d7:59:ef:f8:c3:27:f8:0f:5a: 26:d8:88:05:e4:26:64:e6:31:c5:95:3d:81:7b:7b:7a:fd:d9: 3b:d5:b5:67:3e:b0:f7:da:a6:10:5b:2b:ef:bc:18:a4:00:0f: e7:b2:e3:2c:f2:f1:0c:49:39:e7:17:10:0c:f2:e7:c6:72:6b: 81:f1:d5:39:77:43:ad:e7:b8:ac:c1:16:49:5f:f4:4f:06:80: ab:ef:55:5f:e5:ae:4a:e9:06:65:1a:17:91:1b:56:9c:a6:c2: 8c:65:9d:a8:93:a7:53:e7:63:37:49:4e:ba:b2:e7:4f:13:17: 26:a4:92:5e:bc:09:96:7e:04:89:9c:88:4f:c4:63:00:d0:eb: 36:c4:30:bd:8f:42:66:23:24:71:dc:b1:3d:54:05:86:d3:01: a7:9f:eb:e0:6d:3e:a3:25:0b:5a:db:c7:e8:cd:a4:0c:49:04: 3b:bb:80:b5:dc:5c:eb:82:45:44:05:ac:c6:39:ad:39:52:88: 8e:ee:4c:a6:14:25:94:fa:33:ed:52:de:5b:5b:7c:1d:74:9c: ad:a3:bf:24:df:8d:3a:e1:ab:3a:c6:bd:0e:04:25:f4:9d:71: d3:97:09:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNDI0MTk0MzQ5WhcNMjUwNTAxMTk0MzQ5WjAYMRYwFAYD VQQDEw02ODBhOTQ3Ni1jM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GE87V6FxkRvjAb5l3ZcJ2EcOVPNCs0BpyplqxGTcw+1NYiGBgeSxH6FbWTG 0ZVzObIPjxLxfVFGSwji4LMMLfUwo2bZnLcA90Q4kpZHKTCmaXlFnCMOJ88bWc4b tKVG4NAhgHjdzmqKj5FgkSvYhWgkYoE6HiGrmT5dpClxCj8qATG23HbmZWc3SI7e z8PiIz0bSYEf8MgSQtp2uzp8MfwU7c9Z+V9qLQ73eDzE5h9l5ad3SDMmpbXQY3N9 lqr+OcqunCElslgnNbeTAzCxPyjlj//0Dyy+h128lQdzC6IAxTj1S7QIXEFOxHz5 aqRB3gtOCTDDVtcyXP1+8p2tswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHj42MB /0AHVRA4TpgIzIzBjq38MB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGKNVLfGXgQEst6fT3TJqKYDqBb3CiWam5IyHXWe/4wyf4D1om2IgF 5CZk5jHFlT2Be3t6/dk71bVnPrD32qYQWyvvvBikAA/nsuMs8vEMSTnnFxAM8ufG cmuB8dU5d0Ot57iswRZJX/RPBoCr71Vf5a5K6QZlGheRG1acpsKMZZ2ok6dT52M3 SU66sudPExcmpJJevAmWfgSJnIhPxGMA0Os2xDC9j0JmIyRx3LE9VAWG0wGnn+vg bT6jJQta28fozaQMSQQ7u4C13FzrgkVEBazGOa05UoiO7kymFCWU+jPtUt5bW3wd dJyto78k34064as6xr0OBCX0nXHTlwnC -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:40 2025 by rpki-client