$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: 5g78miBgPHTSi4vanrZDVCcjdaiGk7hOx8TlU/jV7lA= Subject key identifier: 56:5E:E3:A8:76:BB:9F:55:8A:48:79:2C:AA:19:D8:35:00:6D:48:5E Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 018C Signing time: Fri 25 Apr 2025 02:41:20 +0000 Manifest this update: Fri 25 Apr 2025 02:41:19 +0000 Manifest next update: Fri 02 May 2025 02:41:19 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: rpY6X+F5H8f8itPi5FBGOcE4JB9dDN84+7yKUyN6mkU=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Apr 25 02:41:19 2025 GMT Not After : May 2 02:41:19 2025 GMT Subject: CN=680af64f-1c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:fa:77:6e:b2:5f:f8:92:ff:26:5a:5e:05: e7:ab:c7:a4:a7:e0:96:6a:bb:ce:f1:a4:a3:f0:e3: c1:40:b0:48:03:5a:aa:03:08:a7:9b:94:02:ec:bf: 00:2b:31:9c:c2:7b:75:59:a8:09:50:1c:ca:8c:c3: a8:c9:e7:25:09:9c:ef:31:cc:f1:99:12:17:80:eb: 6b:e3:8f:6a:34:fd:5f:8d:d4:21:ca:4c:3e:1a:24: 98:0d:4f:5d:b4:e9:4d:04:fe:ad:95:b6:98:a2:62: d0:78:74:15:e6:ce:86:33:0b:1d:b7:5d:fb:90:3c: 9a:ed:77:0b:cc:a4:63:23:b5:ff:bb:ff:d1:12:64: 97:b9:a8:13:5e:7d:15:70:e6:14:59:0c:fd:7f:53: ac:74:76:96:59:6d:fb:9c:95:5c:b3:e8:be:d1:7d: 4c:64:4c:3d:fb:45:b8:76:6e:37:29:c3:b3:41:7e: 4e:79:e4:ef:fa:ef:30:75:7f:57:d6:6e:75:08:e9: 93:9f:45:55:e9:1d:ac:a2:87:e6:5f:5f:f7:5b:c3: 66:e1:f1:b7:5b:d4:cb:2e:a5:27:26:22:ef:b8:29: 25:bb:d3:53:55:cf:78:d6:e4:fc:01:57:c5:68:5a: 31:52:c6:d5:53:8a:3e:38:54:50:43:3b:99:43:bd: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:E3:A8:76:BB:9F:55:8A:48:79:2C:AA:19:D8:35:00:6D:48:5E X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:40:ca:22:28:86:ac:80:5d:5d:4c:ea:ff:52:8c:41:40:6c: 6c:a4:db:cd:07:13:17:a7:b2:8a:14:d6:82:aa:53:d6:9a:83: 28:bd:31:24:3d:92:6e:da:c6:fc:45:f3:67:07:d0:4d:0d:aa: 5f:ce:de:4d:96:38:45:64:82:96:fc:ca:d2:73:75:28:8a:bf: 31:be:f7:2f:45:5a:f3:51:9b:17:7e:7f:5b:9e:da:1a:9b:05: 26:c8:35:7d:3a:32:88:f5:75:a3:37:fe:78:af:8b:10:db:1e: 83:58:b0:4e:1e:15:62:28:d1:ad:f1:9c:0a:15:82:bf:0c:82: ed:88:ab:91:69:40:cb:31:aa:3a:24:63:af:80:e4:37:09:1c: de:e0:72:5c:41:e4:f9:4b:f8:fd:3d:26:a4:1d:7c:3c:09:16: 06:87:fb:86:3d:cd:65:12:ff:06:be:7c:33:c4:1a:df:55:38: 6d:03:d2:ff:62:55:45:b9:ea:ee:d0:d6:22:e7:9c:6a:b5:86: a8:58:72:da:92:09:a0:db:06:48:5a:9e:80:5e:6a:87:50:15: 2e:bd:e2:83:ac:5e:05:28:3c:ab:45:76:9b:d0:f7:df:27:f7: 8a:8b:d3:8e:2a:dd:1a:9a:af:1b:08:0e:af:85:84:77:9d:31: 9f:96:ae:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUwNDI1MDI0MTE5WhcNMjUwNTAyMDI0MTE5WjAYMRYwFAYD VQQDEw02ODBhZjY0Zi0xYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRT6d26yX/iS/yZaXgXnq8ekp+CWarvO8aSj8OPBQLBIA1qqAwinm5QC7L8A KzGcwnt1WagJUBzKjMOoyeclCZzvMczxmRIXgOtr449qNP1fjdQhykw+GiSYDU9d tOlNBP6tlbaYomLQeHQV5s6GMwsdt137kDya7XcLzKRjI7X/u//REmSXuagTXn0V cOYUWQz9f1OsdHaWWW37nJVcs+i+0X1MZEw9+0W4dm43KcOzQX5OeeTv+u8wdX9X 1m51COmTn0VV6R2soofmX1/3W8Nm4fG3W9TLLqUnJiLvuCklu9NTVc941uT8AVfF aFoxUsbVU4o+OFRQQzuZQ702+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZe46h2 u59Vikh5LKoZ2DUAbUheMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQMoiKIasgF1dTOr/UoxBQGxspNvNBxMXp7KKFNaCqlPWmoMovTEk PZJu2sb8RfNnB9BNDapfzt5NljhFZIKW/MrSc3Uoir8xvvcvRVrzUZsXfn9bntoa mwUmyDV9OjKI9XWjN/54r4sQ2x6DWLBOHhViKNGt8ZwKFYK/DILtiKuRaUDLMao6 JGOvgOQ3CRze4HJcQeT5S/j9PSakHXw8CRYGh/uGPc1lEv8GvnwzxBrfVThtA9L/ YlVFueru0NYi55xqtYaoWHLakgmg2wZIWp6AXmqHUBUuveKDrF4FKDyrRXab0Pff J/eKi9OOKt0amq8bCA6vhYR3nTGflq4R -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:57 2025 by rpki-client