$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: 3Dmv2jBthwRCAL8IsKBfoiOyATuECoIPeF4rM+r8zBE= Subject key identifier: 34:79:A0:BD:89:A1:A3:7E:17:5E:D0:B4:B2:D8:53:E9:96:F1:3F:54 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02BB Signing time: Fri 25 Apr 2025 01:12:49 +0000 Manifest this update: Fri 25 Apr 2025 01:12:48 +0000 Manifest next update: Fri 02 May 2025 01:12:48 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: 5FSb8zBPQeiStTG9z40X+OIh673hQg5dRndYzT1gEpU=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Apr 25 01:12:48 2025 GMT Not After : May 2 01:12:48 2025 GMT Subject: CN=680ae190-fbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:2c:05:c8:4c:58:f6:d4:e8:46:ee:04:0a: 58:ec:01:e0:fa:96:06:0c:fc:5d:6b:2b:c8:d7:07: 2f:f5:6f:53:eb:30:d5:9d:04:85:25:52:c7:09:ed: 7a:c3:1d:cc:af:c0:dc:91:8e:a3:1a:e0:a1:a8:79: a8:20:f5:df:cd:d7:6f:90:c2:85:38:b9:99:a6:6a: a9:4d:0f:47:5c:ad:7b:eb:2a:d2:7d:08:46:ff:ae: a6:84:cc:9a:70:69:a2:ad:1b:a7:8e:ab:1c:48:df: 9f:8f:57:3a:20:98:11:b8:70:75:ed:55:a0:f8:c7: f0:63:ad:38:df:61:0c:e1:8e:f3:40:c4:e4:ce:0e: 23:5c:c3:ed:ab:31:7f:38:ca:04:b8:7f:49:da:df: 8d:b2:ea:2e:2a:77:b7:81:91:30:70:5f:ec:af:3d: 20:68:80:50:ac:8b:bd:8d:d9:b1:c3:21:b0:aa:21: e0:2e:36:f9:5e:9c:55:f2:85:30:2e:24:7a:57:2a: d4:b6:cc:01:7e:01:11:26:fb:a2:fa:38:2b:97:68: de:b1:ca:aa:3b:72:a3:4e:d4:2a:40:1b:80:cd:05: 55:09:84:e9:ed:ce:b3:47:60:e2:83:c6:1b:4b:af: bb:2c:78:67:52:be:e6:de:7c:6f:59:a9:de:8b:9e: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:A0:BD:89:A1:A3:7E:17:5E:D0:B4:B2:D8:53:E9:96:F1:3F:54 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:df:de:76:cb:f6:c4:6f:a6:ba:7f:01:f6:03:11:0a:bd:87: 4c:92:d5:47:f8:ec:98:29:cf:cc:d0:ff:53:47:2b:f4:38:17: f9:bf:c3:7a:4a:12:2e:12:ee:5e:0c:67:73:46:e5:2e:0d:70: 9b:bd:f4:c8:0b:fb:dd:f7:5f:3a:e0:31:47:4d:41:4f:91:14: d9:f1:3c:03:52:15:7e:4a:4d:7a:68:f0:30:83:92:af:67:d0: 39:83:8f:72:ad:13:5a:3a:ed:4d:76:d7:84:30:3e:b9:2e:08: b6:bb:87:07:8c:7d:30:c5:8f:62:ff:0b:98:aa:c3:e4:0c:7a: 88:ac:b1:d3:4e:e7:fa:c7:56:d5:29:e8:1d:27:1c:4a:1f:59: 04:c0:3e:b4:98:c1:ea:b2:02:dd:2a:17:c1:ff:f4:02:75:01: 58:e9:ef:1f:b4:e8:28:9d:c8:47:02:7e:88:ef:92:79:7c:57: 05:b6:8a:55:7f:43:8e:b8:96:fc:6d:03:ad:93:a0:e1:e4:ca: 6c:c1:64:01:92:dc:0c:50:28:b3:3f:7e:a2:f5:d9:50:57:8a: 5d:34:f0:56:02:7b:0d:cc:86:95:16:0a:f7:7b:10:84:f9:4e: 87:26:d3:13:c4:60:11:78:76:f0:36:05:fa:3a:a4:cd:d3:8c: 80:b5:db:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNDI1MDExMjQ4WhcNMjUwNTAyMDExMjQ4WjAYMRYwFAYD VQQDEw02ODBhZTE5MC1mYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1UsBchMWPbU6EbuBApY7AHg+pYGDPxdayvI1wcv9W9T6zDVnQSFJVLHCe16 wx3Mr8DckY6jGuChqHmoIPXfzddvkMKFOLmZpmqpTQ9HXK176yrSfQhG/66mhMya cGmirRunjqscSN+fj1c6IJgRuHB17VWg+MfwY60432EM4Y7zQMTkzg4jXMPtqzF/ OMoEuH9J2t+NsuouKne3gZEwcF/srz0gaIBQrIu9jdmxwyGwqiHgLjb5XpxV8oUw LiR6VyrUtswBfgERJvui+jgrl2jescqqO3KjTtQqQBuAzQVVCYTp7c6zR2Dig8Yb S6+7LHhnUr7m3nxvWanei56l5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR5oL2J oaN+F17QtLLYU+mW8T9UMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe3952y/bEb6a6fwH2AxEKvYdMktVH+OyYKc/M0P9TRyv0OBf5v8N6 ShIuEu5eDGdzRuUuDXCbvfTIC/vd91864DFHTUFPkRTZ8TwDUhV+Sk16aPAwg5Kv Z9A5g49yrRNaOu1NdteEMD65Lgi2u4cHjH0wxY9i/wuYqsPkDHqIrLHTTuf6x1bV KegdJxxKH1kEwD60mMHqsgLdKhfB//QCdQFY6e8ftOgonchHAn6I75J5fFcFtopV f0OOuJb8bQOtk6Dh5MpswWQBktwMUCizP36i9dlQV4pdNPBWAnsNzIaVFgr3exCE +U6HJtMTxGAReHbwNgX6OqTN04yAtduW -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:42 2025 by rpki-client