$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: faVjiDXW8A+yGrOydS9AYsgiLUl7dSPpALf3xFOwgNg= Subject key identifier: 85:83:DE:B5:37:97:EF:5C:F8:20:E0:BF:C1:2E:AA:13:38:50:88:E8 Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: DF Signing time: Sat 03 May 2025 05:17:01 +0000 Manifest this update: Sat 03 May 2025 05:17:01 +0000 Manifest next update: Sat 10 May 2025 05:17:01 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: Q57cegKEOTOyZF0ajisK7NDBAQUN7/1iycKs5NB3MzE=) 2: 59E4E2A415BA11F084EFBB7CC4F9AE02.roa (hash: HZDyu1joYX+dxKnFptiA5xky7OHNJkIOKQTmsVfZf5A=) 3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: May 3 05:17:01 2025 GMT Not After : May 10 05:17:01 2025 GMT Subject: CN=6815a6cd-c439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:41:5e:eb:93:05:a4:a8:90:bf:a9:d8:48: a1:9b:ec:05:81:96:e1:5b:13:24:a8:31:49:65:d4: 25:8c:26:72:92:c6:1e:52:bc:3d:6b:9e:5f:ca:00: 2d:f4:6e:f2:53:d8:d0:8a:82:18:f4:b5:85:07:87: 05:5c:7b:64:f8:0e:cd:ec:a1:1e:9b:75:08:22:5b: 2f:f3:34:10:b1:14:b1:1e:b5:84:0b:56:7b:72:38: 26:3e:77:99:f2:6f:76:19:21:61:26:eb:16:7b:c8: bd:bb:02:76:d9:a1:49:82:3f:99:c0:5e:47:6c:ae: 6a:b6:ff:09:a9:dc:8f:b6:7b:66:d3:cf:91:32:a5: 96:4f:e1:1b:3e:94:2e:85:9e:98:3d:02:17:41:87: 5f:36:7d:5e:7b:36:af:c3:02:af:9f:3f:ee:4a:3b: 60:ad:ed:49:42:bf:54:03:96:1a:42:a7:4a:75:25: 1f:31:2b:d0:98:e7:b5:de:f3:fd:41:28:72:13:29: eb:bc:5e:ec:eb:a0:8b:cc:b9:e4:cc:05:9b:91:2f: 72:f9:db:45:50:0d:57:bf:51:4f:9c:74:47:f2:fc: 28:c5:ca:b6:52:83:80:78:88:c2:4a:79:a5:48:f4: ae:6a:22:23:72:aa:73:91:94:fd:85:e0:3c:a1:d2: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:DE:B5:37:97:EF:5C:F8:20:E0:BF:C1:2E:AA:13:38:50:88:E8 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0a:ab:3b:0e:ff:f9:f6:24:77:e7:b0:26:55:67:f1:3a:88: 2e:82:9f:cb:f4:41:dc:06:d6:31:ca:8f:ae:e2:14:bf:a8:73: b4:2c:e1:9e:44:5b:35:d2:61:59:76:2c:a8:6b:b3:48:67:d0: 9c:b2:dc:ce:d4:ea:80:6e:ea:4f:6b:f8:0c:f2:07:aa:f0:53: 5c:a8:e1:bd:bf:cb:e2:c1:58:bb:26:40:74:c8:44:65:0b:77: 34:a2:93:47:e0:71:84:cb:64:82:cc:4f:b1:d8:a5:76:4d:ab: 6c:3d:36:e1:f5:98:fb:c1:c1:aa:f0:db:c4:d3:47:7a:30:46: 34:e3:f3:21:f5:11:11:06:68:d4:c3:1a:aa:89:2e:9e:43:73: 05:f4:ef:cd:6b:73:0c:84:20:3a:a1:a1:60:80:78:33:93:fa: b4:9c:af:e2:c5:34:24:bc:ec:f8:6c:36:1a:71:cf:a1:60:fe: c4:53:99:f7:95:0c:12:ea:32:9f:b2:6d:a4:04:18:ad:4a:17: f5:76:70:2e:a3:9c:dc:79:c5:01:96:9d:63:02:4f:07:c4:51: 88:28:99:67:ec:03:4b:29:a3:e4:3e:7f:3f:2e:10:e2:8a:bc: 9c:51:14:7f:23:f8:d5:87:32:9c:ac:9c:49:c0:ff:8d:a7:f2: cb:34:7c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUwNTAzMDUxNzAxWhcNMjUwNTEwMDUxNzAxWjAYMRYwFAYD VQQDEw02ODE1YTZjZC1jNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoBBXuuTBaSokL+p2Eihm+wFgZbhWxMkqDFJZdQljCZyksYeUrw9a55fygAt 9G7yU9jQioIY9LWFB4cFXHtk+A7N7KEem3UIIlsv8zQQsRSxHrWEC1Z7cjgmPneZ 8m92GSFhJusWe8i9uwJ22aFJgj+ZwF5HbK5qtv8JqdyPtntm08+RMqWWT+EbPpQu hZ6YPQIXQYdfNn1eezavwwKvnz/uSjtgre1JQr9UA5YaQqdKdSUfMSvQmOe13vP9 QShyEynrvF7s66CLzLnkzAWbkS9y+dtFUA1Xv1FPnHRH8vwoxcq2UoOAeIjCSnml SPSuaiIjcqpzkZT9heA8odKEyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWD3rU3 l+9c+CDgv8EuqhM4UIjoMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoCqs7Dv/59iR357AmVWfxOogugp/L9EHcBtYxyo+u4hS/qHO0LOGe RFs10mFZdiyoa7NIZ9CcstzO1OqAbupPa/gM8geq8FNcqOG9v8viwVi7JkB0yERl C3c0opNH4HGEy2SCzE+x2KV2TatsPTbh9Zj7wcGq8NvE00d6MEY04/Mh9RERBmjU wxqqiS6eQ3MF9O/Na3MMhCA6oaFggHgzk/q0nK/ixTQkvOz4bDYacc+hYP7EU5n3 lQwS6jKfsm2kBBitShf1dnAuo5zcecUBlp1jAk8HxFGIKJln7ANLKaPkPn8/LhDi irycURR/I/jVhzKcrJxJwP+Np/LLNHxo -----END CERTIFICATE-----Generated at Sun May 4 07:25:11 2025 by rpki-client