$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: M2vpzMjUz3AsJ3WImt1oMYQO75PhU9bRPDlNKt69vvs= Subject key identifier: D9:03:02:BB:78:69:73:DA:A3:20:3D:63:D5:42:F4:73:78:A9:96:AF Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 06:02:01 +0000 Manifest this update: Fri 25 Apr 2025 06:02:00 +0000 Manifest next update: Fri 02 May 2025 06:02:00 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: ycBl/8IVzY6Z2bspe6VQe0JkpVD7S5AXO6XByf/QMes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: Apr 25 06:02:00 2025 GMT Not After : May 2 06:02:00 2025 GMT Subject: CN=680b2558-fb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:89:2c:5e:31:f5:e4:30:46:65:6f:fd:68: d1:39:9f:de:24:49:bb:c8:fb:1e:68:0c:c4:e3:63: b7:95:6d:9e:87:d9:ae:cb:ee:71:91:4a:de:e9:d0: 11:6d:cc:42:4b:78:b9:01:f5:3a:af:77:af:4d:4f: 35:c7:dc:12:e0:f5:15:21:a6:55:58:fc:a5:92:e3: 06:c7:4b:03:f0:60:4a:88:69:a0:d2:3c:e6:20:5a: 7d:06:95:e2:15:21:f4:0a:0a:c7:d4:74:63:5e:ef: d9:7a:83:fd:e4:70:19:7b:7f:a3:ed:96:a7:6a:32: 72:29:7e:72:47:16:ea:05:a2:a0:ba:93:38:08:30: 8d:ef:9c:09:60:d6:b5:dc:39:f0:fd:69:78:df:dc: 50:74:a2:87:a4:6b:23:3b:e6:92:df:84:d9:d6:4b: d1:85:54:63:6c:44:a3:63:b6:53:be:4b:88:21:92: b4:3a:27:c4:c1:75:4e:65:54:6e:e7:bc:61:6f:2f: 75:e9:e0:8b:6f:95:c5:7c:a5:40:20:dd:a0:ad:2a: 12:c3:a5:45:0c:85:8c:39:82:3b:19:62:81:a1:39: 3c:06:37:01:14:19:ce:72:fb:bc:5b:de:42:7d:58: 81:4d:d9:67:30:d5:4a:9c:39:05:88:29:e6:01:f3: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:02:BB:78:69:73:DA:A3:20:3D:63:D5:42:F4:73:78:A9:96:AF X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:cf:d5:91:59:8f:d9:30:ef:60:c9:16:9a:00:c2:9f:ec:57: 53:78:67:81:70:d5:c3:66:01:c8:e5:e3:f8:f3:f8:f8:f9:50: f9:58:c9:8d:9e:e0:66:72:32:dc:a2:20:c5:b6:3c:3f:86:cb: c8:b0:ad:19:c9:a2:d0:10:da:30:64:f0:b7:ba:09:2e:32:2e: 24:a1:ac:29:ab:f9:ce:69:50:44:48:42:a2:b4:bc:11:92:66: ee:8f:ce:18:f3:73:02:5c:aa:90:f7:ec:49:07:df:22:e2:75: c0:72:7b:d7:d4:34:37:87:25:8b:b6:44:ba:7c:6b:a4:cd:b2: 7f:92:a6:ff:e4:7f:14:a4:9b:41:94:29:b4:37:66:e8:8f:99: eb:cd:86:27:89:cc:74:cf:ab:fa:37:d1:0f:10:00:03:87:3c: 69:98:a4:d3:d2:3b:0e:38:d3:51:b2:0f:4b:27:00:9f:b8:83: 4e:b4:23:d9:62:b4:54:c5:4f:ef:f9:a1:7f:11:22:5a:db:f5: a0:cf:a6:50:3a:1f:59:b6:1f:ad:7a:75:08:70:33:25:95:a4: 1b:5b:ae:50:58:c1:0d:40:88:64:bf:29:41:6e:56:b1:fd:c8: af:25:61:ed:1a:5c:f7:86:1b:73:f0:05:6d:69:16:6f:d5:72: 51:92:79:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoNEYxODI3M0Q4ODU1NkUzQTFENkVEODE3OEI4MDk1MjhE OTkwQTY5MTAeFw0yNTA0MjUwNjAyMDBaFw0yNTA1MDIwNjAyMDBaMBgxFjAUBgNV BAMTDTY4MGIyNTU4LWZiOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfFoksXjH15DBGZW/9aNE5n94kSbvI+x5oDMTjY7eVbZ6H2a7L7nGRSt7p0BFt zEJLeLkB9Tqvd69NTzXH3BLg9RUhplVY/KWS4wbHSwPwYEqIaaDSPOYgWn0GleIV IfQKCsfUdGNe79l6g/3kcBl7f6PtlqdqMnIpfnJHFuoFoqC6kzgIMI3vnAlg1rXc OfD9aXjf3FB0ooekayM75pLfhNnWS9GFVGNsRKNjtlO+S4ghkrQ6J8TBdU5lVG7n vGFvL3Xp4ItvlcV8pUAg3aCtKhLDpUUMhYw5gjsZYoGhOTwGNwEUGc5y+7xb3kJ9 WIFN2Wcw1UqcOQWIKeYB86mlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2QMCu3hp c9qjID1j1UL0c3iplq8wHwYDVR0jBBgwFoAUTxgnPYhVbjodbtgXi4CVKNmQppEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzE1NDc1RDg2OEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHhnblBZaFZiam9kYnRnWGk0Q1ZLTm1RcHBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzE1NDc1RDg2OEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpv ZGJ0Z1hpNENWS05tUXBwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPP1ZFZj9kw72DJFpoAwp/sV1N4Z4Fw1cNmAcjl4/jz+Pj5UPlYyY2e 4GZyMtyiIMW2PD+Gy8iwrRnJotAQ2jBk8Le6CS4yLiShrCmr+c5pUERIQqK0vBGS Zu6PzhjzcwJcqpD37EkH3yLidcBye9fUNDeHJYu2RLp8a6TNsn+Spv/kfxSkm0GU KbQ3ZuiPmevNhieJzHTPq/o30Q8QAAOHPGmYpNPSOw4401GyD0snAJ+4g060I9li tFTFT+/5oX8RIlrb9aDPplA6H1m2H616dQhwMyWVpBtbrlBYwQ1AiGS/KUFuVrH9 yK8lYe0aXPeGG3PwBW1pFm/VclGSeZY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:50 2025 by rpki-client