$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: fZpZNFI+SkYQsDRLecrlXsMVG40THlghoVRw8DMxf8k= Subject key identifier: B0:80:E3:B1:01:AF:50:42:85:80:BF:A2:5A:C0:97:8E:4E:D1:5B:41 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05A7 Signing time: Thu 24 Apr 2025 22:57:30 +0000 Manifest this update: Thu 24 Apr 2025 22:57:30 +0000 Manifest next update: Thu 01 May 2025 22:57:30 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: Oc8QQrM2nz5ug6E0TQwLn6up8lAtuvCKTXEg9p96HxI=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Apr 24 22:57:30 2025 GMT Not After : May 1 22:57:30 2025 GMT Subject: CN=680ac1da-18e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:45:0f:fa:2b:91:f2:bb:af:c0:f8:8f:c9: 6b:96:47:d4:fd:f6:3c:ca:69:ab:ab:55:89:b3:8f: 0d:99:a5:13:01:3c:fe:67:b7:96:aa:29:03:84:3d: a1:cc:e8:80:3a:ed:5e:bf:ef:26:71:67:dc:f1:ad: 5c:c8:20:7c:b7:54:00:a8:cb:b3:9c:d5:4f:93:d8: b7:2e:57:78:6e:44:19:8c:86:d6:e1:5d:b8:50:6c: 45:cd:b3:82:91:83:2e:56:7a:d9:a3:10:04:ed:af: 91:ac:47:dd:78:0f:db:0c:29:eb:d5:9b:ba:ba:51: d8:12:e9:33:18:51:06:37:10:03:8d:24:29:69:56: 74:63:3c:96:ef:74:00:31:cb:3c:5a:9a:82:73:cd: b9:1a:ae:4c:16:a0:ca:f7:0c:85:f0:3c:17:86:fe: 05:ce:2a:a3:88:e6:89:d9:bb:3a:f7:37:ba:d2:6e: 62:57:c4:44:24:47:e7:b2:09:aa:59:31:1b:8d:40: ef:b2:42:b8:29:1e:69:95:47:1b:dc:29:15:ae:ee: 9a:54:0b:bd:e2:43:7c:bf:b0:dc:9f:98:a7:b8:8b: 19:be:4b:12:39:29:c2:e1:9a:8d:72:23:86:fe:30: cf:a1:a1:d0:70:d1:8f:28:ae:3c:97:d3:f3:43:b8: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:80:E3:B1:01:AF:50:42:85:80:BF:A2:5A:C0:97:8E:4E:D1:5B:41 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:28:f2:c6:d4:c2:76:e1:67:eb:46:e4:cc:89:6e:83:6c:2f: 31:d3:be:91:db:bc:fe:8b:e7:2d:46:42:d2:f4:f7:93:30:70: 27:f0:e1:15:5f:ad:f0:2c:e1:f5:56:14:7c:e0:f9:b4:f3:14: 3f:94:b8:23:a9:37:18:56:be:1e:4e:2a:fc:05:3d:7a:0b:6d: 92:32:c9:a1:a6:41:d4:65:52:43:ea:01:66:50:6c:1e:82:58: 1d:d5:42:53:a5:cc:56:f3:77:bb:56:0a:8e:69:e4:5c:b2:cb: a2:0f:cd:14:64:4d:72:91:e0:fd:9b:28:ec:66:09:f4:94:82: bd:a8:ce:f7:ec:bb:e7:78:7f:8b:4c:c1:11:59:ff:34:e7:1c: 40:a4:2b:3b:9f:35:ce:57:c4:07:83:e7:1e:42:14:8b:90:38: b8:7c:c6:49:c7:a4:ff:43:e4:f8:bf:8f:83:4d:77:df:2c:be: af:d8:ce:59:7d:6a:24:0c:f9:8b:e1:c6:76:3b:56:e5:8a:b7: 8c:d3:e7:69:2f:ca:c3:04:b9:8f:50:42:ff:f7:6b:93:d6:20: ad:4e:b6:f1:88:78:a7:4d:a3:21:9d:8e:3f:79:44:40:8f:33: d5:1f:a4:cf:96:df:f6:99:6b:27:9a:00:9f:db:eb:4f:62:f6: cd:fc:1f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwNDI0MjI1NzMwWhcNMjUwNTAxMjI1NzMwWjAYMRYwFAYD VQQDEw02ODBhYzFkYS0xOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CVFD/orkfK7r8D4j8lrlkfU/fY8ymmrq1WJs48NmaUTATz+Z7eWqikDhD2h zOiAOu1ev+8mcWfc8a1cyCB8t1QAqMuznNVPk9i3Lld4bkQZjIbW4V24UGxFzbOC kYMuVnrZoxAE7a+RrEfdeA/bDCnr1Zu6ulHYEukzGFEGNxADjSQpaVZ0YzyW73QA Mcs8WpqCc825Gq5MFqDK9wyF8DwXhv4FziqjiOaJ2bs69ze60m5iV8REJEfnsgmq WTEbjUDvskK4KR5plUcb3CkVru6aVAu94kN8v7Dcn5inuIsZvksSOSnC4ZqNciOG /jDPoaHQcNGPKK48l9PzQ7iHRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCA47EB r1BChYC/olrAl45O0VtBMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLKPLG1MJ24WfrRuTMiW6DbC8x076R27z+i+ctRkLS9PeTMHAn8OEV X63wLOH1VhR84Pm08xQ/lLgjqTcYVr4eTir8BT16C22SMsmhpkHUZVJD6gFmUGwe glgd1UJTpcxW83e7VgqOaeRcssuiD80UZE1ykeD9myjsZgn0lIK9qM737LvneH+L TMERWf805xxApCs7nzXOV8QHg+ceQhSLkDi4fMZJx6T/Q+T4v4+DTXffLL6v2M5Z fWokDPmL4cZ2O1blireM0+dpL8rDBLmPUEL/92uT1iCtTrbxiHinTaMhnY4/eURA jzPVH6TPlt/2mWsnmgCf2+tPYvbN/B+I -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:44 2025 by rpki-client