$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: R6AjuJ3tLSsk3P/jSQhDqwwm3ZlmCmBWqpCeAIfOcUY= Subject key identifier: 92:46:1A:55:67:2A:1E:8B:50:DA:B5:F8:8E:D6:B0:45:89:16:96:13 Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 121D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 11F2 Signing time: Thu 24 Apr 2025 17:11:40 +0000 Manifest this update: Thu 24 Apr 2025 17:11:39 +0000 Manifest next update: Thu 01 May 2025 17:11:39 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: BLdHJHpY57wW02jojl7l30okUPuNtLwklrRpGYVrBo0=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4637 (0x121d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Apr 24 17:11:39 2025 GMT Not After : May 1 17:11:39 2025 GMT Subject: CN=680a70cc-665e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:84:07:c0:52:cc:96:c4:9e:06:96:47:2b: 68:30:1a:c6:78:07:fd:8b:d0:db:92:a4:5f:d0:38: b2:51:83:23:06:03:d8:3d:01:40:19:33:df:68:fb: 54:14:53:7d:9b:c8:14:e3:94:6a:f7:9f:e0:f6:a1: d4:9a:9d:da:52:4d:6f:17:1b:7f:0e:c5:a4:5a:00: 50:a8:55:ff:0d:fa:16:d1:8c:f3:ab:c6:20:41:50: 05:84:b2:4b:69:cd:59:d7:ad:ac:cf:5f:7f:ae:f1: 33:58:eb:ce:f5:0c:a4:e9:f7:57:b7:bd:92:b5:7d: c3:f4:e7:bc:db:3e:3b:1c:7a:73:b9:ba:db:d5:da: b2:c9:c4:7b:92:4f:ef:40:9c:e5:af:a8:a9:f9:4e: df:10:a6:0b:b3:8b:ea:72:40:94:89:9f:e9:bd:1d: d8:17:a0:ce:4f:f8:ac:45:f7:b4:66:58:af:98:1b: f2:38:95:62:fb:60:75:e8:7d:ad:34:1f:d5:c9:c2: 2d:e7:fb:60:36:7b:04:ce:90:6f:1f:10:65:91:27: 5b:d1:8f:0d:24:ec:74:b5:8c:ac:c5:92:e7:64:c1: bc:77:b0:a8:f2:6e:a0:7b:25:5c:cd:c4:a9:12:5e: e3:1c:89:68:20:06:f1:03:ac:dc:66:2f:14:4d:9a: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:1A:55:67:2A:1E:8B:50:DA:B5:F8:8E:D6:B0:45:89:16:96:13 X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:80:31:14:01:00:1c:a3:2a:60:17:b1:a8:3c:77:f8:bf:eb: fa:50:63:3b:71:94:b4:d1:a9:43:8c:c3:6b:c1:8c:71:b6:03: 43:82:42:d5:e8:f2:00:59:4d:30:34:56:74:7f:80:d2:17:2f: f8:a5:84:67:9c:df:f9:7a:de:e3:57:24:6a:c3:82:94:53:a5: 20:41:81:5c:7b:16:6c:da:f1:c6:bd:05:b6:a9:96:a8:74:32: cb:55:58:80:f7:f4:bc:ac:d7:a0:b3:6f:bf:04:30:85:a9:b8: d3:bb:7b:3b:10:a2:10:3e:6a:fc:99:3f:7c:2a:5a:a2:91:77: 29:4c:e2:04:10:eb:fa:7b:d1:75:a9:34:25:de:d9:56:a4:e2: 79:c9:1b:a5:f9:04:4d:a1:08:7b:15:52:2b:43:22:66:51:df: 19:d4:7b:13:03:aa:db:87:21:bd:b4:18:c3:2d:3f:7f:d2:cb: ed:2d:22:1f:80:e5:37:01:7e:a1:00:d0:3e:8e:64:3f:b2:93: dd:7a:8b:7f:53:b6:2e:6a:d6:0d:11:d4:32:12:4d:f7:4d:a7: cf:4f:52:6d:91:b4:f2:6a:ce:d0:c9:32:00:45:c3:45:47:21: f9:1f:c4:73:1a:4f:8e:8f:64:0b:15:bd:41:5e:8b:0e:3a:3f: 38:f9:28:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUwNDI0MTcxMTM5WhcNMjUwNTAxMTcxMTM5WjAYMRYwFAYD VQQDEw02ODBhNzBjYy02NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLmEB8BSzJbEngaWRytoMBrGeAf9i9DbkqRf0DiyUYMjBgPYPQFAGTPfaPtU FFN9m8gU45Rq95/g9qHUmp3aUk1vFxt/DsWkWgBQqFX/DfoW0Yzzq8YgQVAFhLJL ac1Z162sz19/rvEzWOvO9Qyk6fdXt72StX3D9Oe82z47HHpzubrb1dqyycR7kk/v QJzlr6ip+U7fEKYLs4vqckCUiZ/pvR3YF6DOT/isRfe0ZlivmBvyOJVi+2B16H2t NB/VycIt5/tgNnsEzpBvHxBlkSdb0Y8NJOx0tYysxZLnZMG8d7Co8m6geyVczcSp El7jHIloIAbxA6zcZi8UTZpOPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJGGlVn Kh6LUNq1+I7WsEWJFpYTMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBogDEUAQAcoypgF7GoPHf4v+v6UGM7cZS00alDjMNrwYxxtgNDgkLV 6PIAWU0wNFZ0f4DSFy/4pYRnnN/5et7jVyRqw4KUU6UgQYFcexZs2vHGvQW2qZao dDLLVViA9/S8rNegs2+/BDCFqbjTu3s7EKIQPmr8mT98KlqikXcpTOIEEOv6e9F1 qTQl3tlWpOJ5yRul+QRNoQh7FVIrQyJmUd8Z1HsTA6rbhyG9tBjDLT9/0svtLSIf gOU3AX6hANA+jmQ/spPdeot/U7YuatYNEdQyEk33TafPT1JtkbTyas7QyTIARcNF RyH5H8RzGk+Oj2QLFb1BXosOOj84+Si7 -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:37 2025 by rpki-client