$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft File: TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json) Hash identifier: i+8T8Vslfv9DEa+KHBV5XiRzDXg9KU5DrI4qvdTOZcM= Subject key identifier: D5:69:C6:D8:9A:E5:2E:4E:52:B6:5B:55:2C:8D:B9:17:DF:05:A3:CC Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft Manifest number: 0C88 Signing time: Sat 26 Apr 2025 18:07:36 +0000 Manifest this update: Sat 26 Apr 2025 18:07:36 +0000 Manifest next update: Sat 03 May 2025 18:07:36 +0000 Files and hashes: 1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: vMBm15k310UkziK2LDb9e79VY4ZLcfbLHjtrWP7V46s=) 2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=) 3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=) 4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Validity Not Before: Apr 26 18:07:36 2025 GMT Not After : May 3 18:07:36 2025 GMT Subject: CN=680d20e8-c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:80:92:9b:da:11:48:fd:fd:01:f5:49:09: 7d:4a:e3:a6:16:49:65:bf:2a:ad:02:69:89:27:ba: fa:e8:57:e0:5f:bc:27:77:60:87:e2:17:df:74:c4: 86:fb:7e:a1:4d:17:64:df:fd:19:b7:dd:8e:b1:a8: 6e:e5:49:a3:8c:9b:60:cd:cb:e7:27:2b:30:72:17: 88:ef:19:4c:34:f3:fd:f2:d4:90:14:e4:8e:55:b0: 2b:9f:a4:e0:e6:8d:8e:c0:9a:6f:49:2e:91:2f:52: f7:b1:c5:76:65:42:02:4e:fb:16:b0:80:7d:d8:e5: b5:cd:da:e0:27:f2:ef:91:32:52:cd:49:d6:ef:0c: bc:c3:c2:1a:12:f9:8f:01:89:25:09:dd:bd:92:94: e4:c1:ff:e8:1d:5b:99:2a:91:06:90:5e:1a:24:f4: 5e:86:93:0b:be:98:af:28:5d:f2:18:4e:07:2c:38: 2a:2c:28:56:ee:a7:26:c8:46:f2:b2:86:1c:a1:d0: 88:cb:c2:8f:20:94:75:c3:f8:87:46:df:04:6c:79: df:23:8d:5c:96:c3:0e:7c:75:da:dd:9f:3f:41:eb: 3c:e4:69:96:26:ce:06:40:c6:34:b8:b1:47:4c:cd: 8c:4f:51:91:b2:e0:dd:88:f7:ca:a8:a8:c5:09:a5: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:C6:D8:9A:E5:2E:4E:52:B6:5B:55:2C:8D:B9:17:DF:05:A3:CC X509v3 Authority Key Identifier: keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:24:f4:87:3b:85:48:c3:69:c6:6e:d7:49:c2:82:62:ac: 08:c5:5b:20:dc:09:13:02:3c:25:2a:23:a6:ca:a9:e6:17:8b: f0:3d:91:69:83:18:4c:9d:af:51:69:16:28:7a:4d:e3:1b:a6: d9:5d:82:73:4d:03:ae:23:37:50:fa:92:6b:71:fa:45:22:d6: 51:10:6b:a3:cb:d7:42:5a:4e:49:13:77:75:16:c5:5f:3c:42: 2b:35:11:51:8c:44:11:9c:93:47:db:57:5c:9c:79:ad:95:22: e7:07:0b:2b:7d:4f:4d:76:2e:e1:fc:75:7a:27:8f:13:f1:e8: 7d:dc:1b:73:01:60:08:4f:30:23:f1:3b:28:cd:3d:ac:fb:7a: 9f:d7:26:84:46:f7:0a:bc:33:ee:46:09:fb:ba:89:3d:f9:ec: 81:e8:04:3c:b4:b3:c9:19:fd:35:99:18:a4:56:09:f8:7d:d9: b4:c0:e5:8f:fd:51:91:84:3f:cd:7f:83:56:90:e1:d3:a8:78: 23:09:7b:c6:42:ab:da:11:3a:27:7b:15:49:ad:e1:1a:8c:85: 02:a4:28:9e:70:d1:a7:55:e5:9f:d1:5d:84:ab:95:45:20:6b: 76:55:17:6c:4c:db:26:a3:80:7c:b2:67:b6:64:57:bc:ae:ef: 3b:68:a9:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0 M0U3RTdBREIwHhcNMjUwNDI2MTgwNzM2WhcNMjUwNTAzMTgwNzM2WjAYMRYwFAYD VQQDEw02ODBkMjBlOC1jMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOiAkpvaEUj9/QH1SQl9SuOmFkllvyqtAmmJJ7r66FfgX7wnd2CH4hffdMSG +36hTRdk3/0Zt92Osahu5UmjjJtgzcvnJyswcheI7xlMNPP98tSQFOSOVbArn6Tg 5o2OwJpvSS6RL1L3scV2ZUICTvsWsIB92OW1zdrgJ/LvkTJSzUnW7wy8w8IaEvmP AYklCd29kpTkwf/oHVuZKpEGkF4aJPRehpMLvpivKF3yGE4HLDgqLChW7qcmyEby soYcodCIy8KPIJR1w/iHRt8EbHnfI41clsMOfHXa3Z8/Qes85GmWJs4GQMY0uLFH TM2MT1GRsuDdiPfKqKjFCaV/CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVpxtia 5S5OUrZbVSyNuRffBaPMMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2 ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzA5NC8wMUY4RUI5MkY2ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wt cjJERGpuYVZzRHRENS1ldHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwMyT0hzuFSMNpxm7XScKCYqwIxVsg3AkTAjwlKiOmyqnmF4vwPZFp gxhMna9RaRYoek3jG6bZXYJzTQOuIzdQ+pJrcfpFItZREGujy9dCWk5JE3d1FsVf PEIrNRFRjEQRnJNH21dcnHmtlSLnBwsrfU9Ndi7h/HV6J48T8eh93BtzAWAITzAj 8TsozT2s+3qf1yaERvcKvDPuRgn7uok9+eyB6AQ8tLPJGf01mRikVgn4fdm0wOWP /VGRhD/Nf4NWkOHTqHgjCXvGQqvaETonexVJreEajIUCpCiecNGnVeWf0V2Eq5VF IGt2VRdsTNsmo4B8sme2ZFe8ru87aKlo -----END CERTIFICATE-----Generated at Sun Apr 27 01:12:07 2025 by rpki-client