$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft File: tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json) Hash identifier: zfIYUWTVN31OjuSim+J8FXhcxgbhH6sDAt8h9LBPjV8= Subject key identifier: 6D:01:21:2D:0C:9A:F3:FC:9B:FF:7D:32:E2:94:56:C5:26:ED:9D:B2 Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft Manifest number: 0789 Signing time: Thu 24 Apr 2025 21:12:56 +0000 Manifest this update: Thu 24 Apr 2025 21:12:56 +0000 Manifest next update: Thu 01 May 2025 21:12:56 +0000 Files and hashes: 1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: S4JzRlv3G84xY20T5lRzHD0q69GM6OTykmeGo8XPaMY=) 2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=) 3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Validity Not Before: Apr 24 21:12:56 2025 GMT Not After : May 1 21:12:56 2025 GMT Subject: CN=680aa958-3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:e7:37:5b:a2:c6:22:cc:27:57:44:f0:6c: 53:71:12:03:66:bc:51:83:d1:1f:e6:13:41:28:cb: 7d:74:2b:1c:53:ea:aa:4d:3a:20:81:cf:73:08:9b: 0f:db:01:a5:f5:d8:87:d1:40:bb:5a:52:48:89:af: 4b:9d:de:64:1c:7a:dd:f9:5a:5a:20:1e:ef:1c:9d: 5b:00:92:5d:c3:43:40:c7:d3:37:2c:ec:67:e9:99: 42:34:af:06:21:fe:d1:55:c7:3e:2b:fa:99:e0:3b: 65:cf:25:cc:7a:64:49:e1:76:a1:0a:b3:15:1e:48: 1d:ca:b9:31:1f:77:90:8d:2a:0a:1c:f4:a2:de:d1: 19:04:1a:90:93:cb:13:b0:09:4f:06:9d:3d:0e:f4: db:e6:12:98:4c:34:c2:0e:a3:4c:67:a1:e4:f2:a9: b0:f8:79:b4:c8:4e:ed:bc:61:e6:9a:96:68:b4:45: 7a:05:b8:c4:ee:96:a3:44:40:7c:7d:87:9b:ed:9c: c5:41:46:16:c1:85:19:c5:ae:1e:74:14:44:6c:11: da:e2:6a:75:4a:41:64:4a:79:64:59:63:ce:03:3c: ab:44:51:c8:bd:0c:3b:e4:cf:9f:fb:52:21:66:8e: d8:13:7e:a1:ec:57:0a:76:e9:2d:03:13:68:77:9a: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:01:21:2D:0C:9A:F3:FC:9B:FF:7D:32:E2:94:56:C5:26:ED:9D:B2 X509v3 Authority Key Identifier: keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2b:75:b4:76:e4:b2:ab:c4:a9:1f:91:2a:9a:0a:7d:30:21: 52:f7:62:58:14:dc:02:4a:b9:13:2b:76:66:a9:14:b0:55:77: 3b:87:ad:b5:0b:c0:32:88:e1:d8:e9:dd:d4:81:e1:9e:15:3b: 95:1a:32:1b:4e:92:65:7d:25:7b:97:52:1a:b0:ca:be:6a:5b: c1:98:9b:53:12:51:2e:08:6d:44:45:88:db:af:86:72:bb:0b: ac:91:c9:e0:5d:41:11:9d:10:66:d9:00:be:b8:c0:2e:e4:3c: f6:ce:20:a4:3f:34:01:4b:a3:7c:0b:00:be:e2:ad:60:1d:c1: 5f:3e:d4:08:6b:13:07:8b:9e:5c:56:a9:1d:9c:83:62:03:6c: 36:67:8a:04:78:1c:2b:d7:b9:1a:b2:3c:04:a6:6d:44:78:78: 2b:aa:76:d8:de:ab:76:26:3c:fc:6b:97:e8:40:bf:cc:24:a2: 5a:06:21:1e:88:3b:16:5b:6d:d1:8b:96:df:df:19:9d:9d:09: 74:5f:4b:b8:88:81:e7:b6:55:0b:8d:63:31:72:5d:1e:42:2c: 82:16:41:d0:f9:c3:56:c3:b5:2a:81:7b:d2:1a:d8:63:91:4b: 46:8f:fc:3f:c6:f2:27:32:bd:e1:ce:96:22:f9:51:9f:39:5e: 3a:7b:b0:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx MkNFODVERDQwHhcNMjUwNDI0MjExMjU2WhcNMjUwNTAxMjExMjU2WjAYMRYwFAYD VQQDEw02ODBhYTk1OC0zMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmADnN1uixiLMJ1dE8GxTcRIDZrxRg9Ef5hNBKMt9dCscU+qqTToggc9zCJsP 2wGl9diH0UC7WlJIia9Lnd5kHHrd+VpaIB7vHJ1bAJJdw0NAx9M3LOxn6ZlCNK8G If7RVcc+K/qZ4DtlzyXMemRJ4XahCrMVHkgdyrkxH3eQjSoKHPSi3tEZBBqQk8sT sAlPBp09DvTb5hKYTDTCDqNMZ6Hk8qmw+Hm0yE7tvGHmmpZotEV6BbjE7pajREB8 fYeb7ZzFQUYWwYUZxa4edBREbBHa4mp1SkFkSnlkWWPOAzyrRFHIvQw75M+f+1Ih Zo7YE36h7FcKduktAxNod5oYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0BIS0M mvP8m/99MuKUVsUm7Z2yMB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wNjlBMDZFNjBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25I dF9YN0pzdWU1cVFTem9YZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuK3W0duSyq8SpH5Eqmgp9MCFS92JYFNwCSrkTK3ZmqRSwVXc7h621 C8AyiOHY6d3UgeGeFTuVGjIbTpJlfSV7l1IasMq+alvBmJtTElEuCG1ERYjbr4Zy uwuskcngXUERnRBm2QC+uMAu5Dz2ziCkPzQBS6N8CwC+4q1gHcFfPtQIaxMHi55c VqkdnINiA2w2Z4oEeBwr17kasjwEpm1EeHgrqnbY3qt2Jjz8a5foQL/MJKJaBiEe iDsWW23Ri5bf3xmdnQl0X0u4iIHntlULjWMxcl0eQiyCFkHQ+cNWw7UqgXvSGthj kUtGj/w/xvInMr3hzpYi+VGfOV46e7DR -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:45 2025 by rpki-client