$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json) Hash identifier: aST9C+/ji8IIASzyNgH4iu+ND5abAl5BhR+H10oCWH4= Subject key identifier: E8:85:FA:26:E6:00:A7:F4:58:28:06:D6:E2:4C:59:B0:37:DF:87:89 Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft Manifest number: 0B34 Signing time: Thu 24 Apr 2025 19:04:52 +0000 Manifest this update: Thu 24 Apr 2025 19:04:52 +0000 Manifest next update: Thu 01 May 2025 19:04:52 +0000 Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: TfGo7MQWMcaATriOXF3vIrsUD1fR7A2jFq6VH7JZ3Ro=) 2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 88DAO3QlO8H0+j4IQqrGiQaCtaGiXiNDQrSD6ob+BaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Validity Not Before: Apr 24 19:04:52 2025 GMT Not After : May 1 19:04:52 2025 GMT Subject: CN=680a8b54-5abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:13:94:4c:d6:90:98:9d:49:8d:96:26:dd: 4c:98:e5:e0:93:15:0e:ef:32:83:76:bd:55:18:81: d7:a5:d7:b5:c1:53:5e:87:3f:99:43:bd:3a:30:f8: 06:07:72:3a:1e:77:75:fb:e7:fd:56:1c:c9:4d:70: be:56:c9:bb:2a:94:1e:93:ee:d0:72:40:83:d3:41: 7f:74:ed:a2:08:a7:b0:e6:9c:dc:59:92:d4:3b:6d: 9a:eb:21:20:33:c0:75:08:78:1c:69:fe:c8:90:a0: 75:3c:62:39:03:32:27:f7:7a:13:ae:c8:dd:b2:8e: 0a:fa:98:85:09:a4:e0:43:fb:75:5f:51:b0:57:fd: 78:4e:ed:f2:d7:ae:e3:51:f6:0c:ac:48:4a:cc:01: 75:eb:70:30:df:ba:f1:53:12:ab:82:14:39:cb:58: 43:11:9e:57:11:6d:10:b5:07:00:0a:01:24:7c:10: 45:59:70:bb:39:5d:69:79:ba:f7:5a:dc:97:aa:92: 50:45:d6:2f:75:3c:06:1f:d1:ca:93:8a:fe:04:71: ab:f8:59:2f:2f:8b:91:02:f5:ac:ba:d7:d9:68:e7: 49:8e:2e:3c:04:db:eb:52:2d:bc:d2:41:d1:73:c1: c7:49:3c:9c:65:26:cc:93:6c:5c:14:f1:74:84:34: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:FA:26:E6:00:A7:F4:58:28:06:D6:E2:4C:59:B0:37:DF:87:89 X509v3 Authority Key Identifier: keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e5:24:31:85:95:74:7e:53:11:c9:9d:de:4d:c2:21:67:f4: 8f:c3:0b:7b:56:35:4a:16:cb:1e:64:6e:34:39:a6:4e:31:7f: 43:b6:c2:3f:34:19:dc:ce:77:6b:0a:1f:ce:29:69:19:36:45: ce:93:a0:f9:ed:71:62:c2:61:47:50:74:dd:16:b7:a6:8f:c3: 66:2f:fa:c7:8a:31:81:cd:e2:ef:53:c9:46:9e:25:cd:f7:b4: 97:f0:4e:8f:43:54:ad:fe:02:93:ab:e8:9b:80:58:9e:7b:09: 86:1a:24:25:42:e3:0d:7b:c4:39:ff:8d:59:de:1e:36:ca:72: b1:71:c1:73:8a:05:51:22:bb:8f:3a:ad:d5:b7:8e:a4:2b:3e: 8b:5a:72:57:5c:a4:2b:2f:7c:4c:8e:9e:00:07:97:10:25:41: a2:dd:1b:d8:c9:cd:12:3a:9a:d3:3f:f0:98:38:e6:2c:cd:fa: 9f:e4:6a:38:d5:fb:6c:38:9e:73:34:4e:c8:3f:3f:6a:c1:9a: f2:43:a2:0e:e8:4d:a7:13:58:c4:86:a6:d0:6b:7d:29:f4:a1: f6:fd:66:a4:6d:ac:99:e1:d8:4d:3b:3e:f1:4b:bf:61:6b:41: b8:b2:cf:19:4b:95:a7:21:d2:24:58:ce:ee:f5:6b:ca:2d:98: 78:13:0d:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG RTE0ODQ0QkIwHhcNMjUwNDI0MTkwNDUyWhcNMjUwNTAxMTkwNDUyWjAYMRYwFAYD VQQDEw02ODBhOGI1NC01YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszQTlEzWkJidSY2WJt1MmOXgkxUO7zKDdr1VGIHXpde1wVNehz+ZQ706MPgG B3I6Hnd1++f9VhzJTXC+Vsm7KpQek+7QckCD00F/dO2iCKew5pzcWZLUO22a6yEg M8B1CHgcaf7IkKB1PGI5AzIn93oTrsjdso4K+piFCaTgQ/t1X1GwV/14Tu3y167j UfYMrEhKzAF163Aw37rxUxKrghQ5y1hDEZ5XEW0QtQcACgEkfBBFWXC7OV1pebr3 WtyXqpJQRdYvdTwGH9HKk4r+BHGr+FkvL4uRAvWsutfZaOdJji48BNvrUi280kHR c8HHSTycZSbMk2xcFPF0hDRBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiF+ibm AKf0WCgG1uJMWbA334eJMB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2 REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1 ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS5SQxhZV0flMRyZ3eTcIhZ/SPwwt7VjVKFsseZG40OaZOMX9DtsI/ NBnczndrCh/OKWkZNkXOk6D57XFiwmFHUHTdFremj8NmL/rHijGBzeLvU8lGniXN 97SX8E6PQ1St/gKTq+ibgFieewmGGiQlQuMNe8Q5/41Z3h42ynKxccFzigVRIruP Oq3Vt46kKz6LWnJXXKQrL3xMjp4AB5cQJUGi3RvYyc0SOprTP/CYOOYszfqf5Go4 1ftsOJ5zNE7IPz9qwZryQ6IO6E2nE1jEhqbQa30p9KH2/WakbayZ4dhNOz7xS79h a0G4ss8ZS5WnIdIkWM7u9WvKLZh4Ew3W -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:22 2025 by rpki-client