$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: aUU69KSNzMsrVpBwurOZikzNnSR/AMi88wwTbK+G/WA= Subject key identifier: CA:B5:41:B8:A8:F6:96:62:B8:32:98:A6:9F:AD:77:F6:40:9F:24:F5 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 013A Signing time: Fri 25 Apr 2025 03:31:50 +0000 Manifest this update: Fri 25 Apr 2025 03:31:50 +0000 Manifest next update: Fri 02 May 2025 03:31:50 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: 5xGgZA1jE5HqnDk6Vq1h5/mCjm//fPX2a/XK0B2UYQs=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: RP6wVW/OcAubd0XMOITxdOYRXk34RJNOj+5wyZuhGYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: Apr 25 03:31:50 2025 GMT Not After : May 2 03:31:50 2025 GMT Subject: CN=680b0226-3fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:e1:82:f7:9d:e6:94:b5:fe:21:01:75:95: ea:6a:87:ac:71:06:a1:a5:c4:7d:29:03:25:b5:43: 4b:b8:35:9a:c0:c9:f7:45:8e:40:a0:bf:9e:ba:52: 24:7e:0b:9c:fd:af:ac:e4:c3:46:0f:21:3f:4a:ab: 5d:91:8c:cf:a0:29:ae:5f:3d:90:d5:58:26:14:1f: f3:cd:81:46:18:0c:76:be:c3:e5:f5:ee:68:67:6c: b6:47:b3:71:71:ca:de:98:a7:13:db:79:dd:ea:c1: 9b:c8:bd:27:c6:6f:b6:c7:27:fd:3b:27:98:51:af: 51:08:2c:85:56:ab:44:25:05:7f:42:91:ad:64:ee: a3:ae:7e:04:e4:ca:7c:ae:d0:d3:32:0f:90:e5:2c: 51:87:6b:84:f8:94:2e:4d:89:0d:cc:12:eb:f5:5f: f3:11:d2:b6:66:26:1e:e3:b4:84:f6:6c:a3:34:8c: 96:d1:aa:03:49:da:22:f3:a1:9b:c0:f0:87:fb:d0: 9d:0f:a4:ec:58:34:0e:c0:d7:1a:b7:b8:75:8a:c9: e1:d0:9a:80:1b:b5:ff:8b:fc:49:9f:d6:d7:27:0e: 49:00:54:dd:33:f4:ee:b3:c5:d8:30:36:cf:7c:69: 2a:3c:da:aa:3e:33:d6:be:20:1f:f8:bd:eb:38:bb: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B5:41:B8:A8:F6:96:62:B8:32:98:A6:9F:AD:77:F6:40:9F:24:F5 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:68:a1:38:ab:f2:50:4e:ba:be:5b:ce:b3:93:1a:2b:c5: 2b:50:92:c4:53:c9:8b:1b:26:dc:55:6d:d0:0e:fe:24:88:bc: 82:0e:20:54:9d:6b:8d:6d:ec:e9:49:71:a6:1b:94:f6:dd:80: 3f:ef:05:a9:2f:0d:3d:19:b3:a4:7d:4b:f5:af:b5:4b:2e:f9: ff:57:33:61:94:58:8b:6e:e5:03:e4:7a:80:e6:96:d9:d6:3f: 55:b5:5c:08:d0:95:a7:e9:92:d9:36:dc:ac:29:ff:ff:14:ed: b7:47:1c:23:95:86:a1:51:49:f3:4a:e3:1d:61:1d:eb:3b:d8: 31:46:b4:73:7f:de:ff:c8:91:aa:5d:15:56:33:d1:27:c0:ec: 6b:fb:3f:db:2c:28:c5:81:88:67:11:fc:a3:2a:eb:d7:20:a4: 3d:e7:1d:33:f6:81:4a:f3:2c:f6:a6:69:0d:b5:0d:e8:8c:8b: cf:04:30:50:12:76:96:24:0c:72:d5:32:c4:9e:aa:db:9a:31: 7c:f4:e0:dd:ec:0b:73:5b:89:ec:d0:3c:a7:f8:2c:f6:30:2d: e0:5f:16:f2:9b:38:28:7a:0c:15:01:e6:d5:33:3a:cb:be:6b: 38:a8:e5:1c:2f:47:1d:10:9f:48:c5:61:38:d6:e1:28:9c:f9: 32:63:0d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwNDI1MDMzMTUwWhcNMjUwNTAyMDMzMTUwWjAYMRYwFAYD VQQDEw02ODBiMDIyNi0zZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvDhgved5pS1/iEBdZXqaoescQahpcR9KQMltUNLuDWawMn3RY5AoL+eulIk fguc/a+s5MNGDyE/SqtdkYzPoCmuXz2Q1VgmFB/zzYFGGAx2vsPl9e5oZ2y2R7Nx ccremKcT23nd6sGbyL0nxm+2xyf9OyeYUa9RCCyFVqtEJQV/QpGtZO6jrn4E5Mp8 rtDTMg+Q5SxRh2uE+JQuTYkNzBLr9V/zEdK2ZiYe47SE9myjNIyW0aoDSdoi86Gb wPCH+9CdD6TsWDQOwNcat7h1isnh0JqAG7X/i/xJn9bXJw5JAFTdM/Tus8XYMDbP fGkqPNqqPjPWviAf+L3rOLsaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq1Qbio 9pZiuDKYpp+td/ZAnyT1MB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/MWihOKvyUE66vlvOs5MaK8UrUJLEU8mLGybcVW3QDv4kiLyCDiBU nWuNbezpSXGmG5T23YA/7wWpLw09GbOkfUv1r7VLLvn/VzNhlFiLbuUD5HqA5pbZ 1j9VtVwI0JWn6ZLZNtysKf//FO23RxwjlYahUUnzSuMdYR3rO9gxRrRzf97/yJGq XRVWM9EnwOxr+z/bLCjFgYhnEfyjKuvXIKQ95x0z9oFK8yz2pmkNtQ3ojIvPBDBQ EnaWJAxy1TLEnqrbmjF89ODd7AtzW4ns0Dyn+Cz2MC3gXxbymzgoegwVAebVMzrL vms4qOUcL0cdEJ9IxWE41uEonPkyYw2l -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:54 2025 by rpki-client