$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: FPxKDLecqqAQYfPbS55GuzW1gybdclBU9YbL1VJps2o= Subject key identifier: 00:18:A1:D9:8C:D9:6D:61:75:92:7F:2F:FD:B2:5F:A5:39:D4:3B:7D Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 09F5 Signing time: Thu 24 Apr 2025 19:45:58 +0000 Manifest this update: Thu 24 Apr 2025 19:45:57 +0000 Manifest next update: Thu 01 May 2025 19:45:57 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: focOyIA9Rh4+V1eW4PHYbRC0xki2LdKAda0mu1c1nHU=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Apr 24 19:45:57 2025 GMT Not After : May 1 19:45:57 2025 GMT Subject: CN=680a94f5-51e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:98:df:e4:93:ce:3f:b1:5b:ff:bb:be:2b:9d: 68:3a:6d:79:e7:ab:25:62:ce:2a:78:f4:52:e6:8e: 3e:21:85:a0:64:bf:82:f5:cd:74:89:aa:2e:b4:8c: fb:c3:c6:7c:b1:67:40:85:54:a3:17:28:18:ba:7d: 02:93:95:37:93:88:49:6d:fa:3b:ef:14:d1:df:78: 92:9d:bd:aa:f1:cc:55:bb:35:e7:71:45:03:e1:83: 37:0d:e8:91:7d:49:b2:66:34:3c:87:0e:dc:b4:bf: f0:2c:eb:f7:c5:f7:b2:5e:37:ae:7b:72:cc:e6:7f: 1b:c5:c9:ee:41:0d:48:75:7b:64:b8:0e:af:60:da: d4:5b:ec:aa:9d:93:c5:a1:d5:fc:a7:77:10:9c:26: a5:78:52:90:c0:29:c1:1e:cc:31:5a:1c:da:7a:17: b0:57:8f:58:92:c1:66:ee:31:a5:fb:5e:3b:07:76: 7d:12:a4:cf:ff:1f:68:f8:51:05:40:8d:dc:11:c2: 39:3f:c0:34:cd:cc:8a:17:08:5f:18:52:13:be:f1: 7f:6b:92:21:ce:77:37:98:fb:ff:34:f8:18:bc:a6: 65:5c:9a:44:36:1a:42:00:6e:42:27:5b:f7:d2:c8: 19:2c:fa:e4:3d:44:41:f3:b5:c1:7a:59:ca:58:f5: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:A1:D9:8C:D9:6D:61:75:92:7F:2F:FD:B2:5F:A5:39:D4:3B:7D X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f5:26:03:8d:a7:21:37:85:6f:00:37:92:ac:b8:ef:69:0b: 0d:3c:51:29:ce:e2:2c:7c:79:64:4f:c8:9a:36:a3:53:94:07: 81:ee:e1:b7:88:77:d4:13:b8:93:82:e9:f7:aa:f2:57:4f:54: a4:da:53:0b:8f:4e:bc:81:2b:61:66:a1:5f:5f:dd:0c:1c:07: 24:6e:1a:82:e2:05:59:af:f3:7f:3b:29:d7:2d:49:8d:3d:39: de:d3:ee:ea:2e:38:14:be:ba:74:92:51:3f:78:ee:3a:d3:2d: 53:64:83:8d:2a:eb:28:29:3b:d6:b7:99:32:f3:53:1d:d6:2d: da:ab:17:4c:55:b1:d1:5e:79:ec:66:8e:27:2d:80:0b:0f:38: b8:6b:d7:09:bb:a6:02:86:b2:e2:4e:e5:ce:43:b5:79:76:dc: 28:aa:2f:5f:04:d3:50:ad:13:11:89:31:f0:4c:8b:64:3f:88: 68:f6:8e:f6:e6:46:e0:4b:4c:7b:25:e6:fe:aa:17:30:d5:f4: a9:ee:a0:5a:c2:8b:95:0f:5c:6c:ce:2e:54:7c:6a:20:2c:56: 38:42:df:94:65:c0:b3:71:be:d7:ac:7f:3e:51:df:ae:5d:8e: 77:80:1f:4c:a5:96:28:4d:d2:58:7d:54:de:c7:0f:c8:bd:80: 9b:f9:57:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUwNDI0MTk0NTU3WhcNMjUwNTAxMTk0NTU3WjAYMRYwFAYD VQQDEw02ODBhOTRmNS01MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Jjf5JPOP7Fb/7u+K51oOm1556slYs4qePRS5o4+IYWgZL+C9c10iaoutIz7 w8Z8sWdAhVSjFygYun0Ck5U3k4hJbfo77xTR33iSnb2q8cxVuzXncUUD4YM3DeiR fUmyZjQ8hw7ctL/wLOv3xfeyXjeue3LM5n8bxcnuQQ1IdXtkuA6vYNrUW+yqnZPF odX8p3cQnCaleFKQwCnBHswxWhzaehewV49YksFm7jGl+147B3Z9EqTP/x9o+FEF QI3cEcI5P8A0zcyKFwhfGFITvvF/a5Ihznc3mPv/NPgYvKZlXJpENhpCAG5CJ1v3 0sgZLPrkPURB87XBelnKWPUntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAYodmM 2W1hdZJ/L/2yX6U51Dt9MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO9SYDjachN4VvADeSrLjvaQsNPFEpzuIsfHlkT8iaNqNTlAeB7uG3 iHfUE7iTgun3qvJXT1Sk2lMLj068gSthZqFfX90MHAckbhqC4gVZr/N/OynXLUmN PTne0+7qLjgUvrp0klE/eO460y1TZIONKusoKTvWt5ky81Md1i3aqxdMVbHRXnns Zo4nLYALDzi4a9cJu6YChrLiTuXOQ7V5dtwoqi9fBNNQrRMRiTHwTItkP4ho9o72 5kbgS0x7Jeb+qhcw1fSp7qBawouVD1xszi5UfGogLFY4Qt+UZcCzcb7XrH8+Ud+u XY53gB9MpZYoTdJYfVTexw/IvYCb+Vf+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:44 2025 by rpki-client