$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json) Hash identifier: IGmEe+W2htq7WJoByJcE3cn1bCqsPJsWzH2//wTsauY= Subject key identifier: 83:42:82:C7:5D:68:11:7F:B3:E0:2A:92:9D:E2:83:D4:09:0F:EC:A7 Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft Manifest number: 044D Signing time: Sat 26 Apr 2025 23:51:50 +0000 Manifest this update: Sat 26 Apr 2025 23:51:50 +0000 Manifest next update: Sat 03 May 2025 23:51:50 +0000 Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: +sdSIdVXjDs4Xfa9vE1YVFgjAr2b658/N/95BbY6eIE=) 2: C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (hash: 6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Validity Not Before: Apr 26 23:51:50 2025 GMT Not After : May 3 23:51:50 2025 GMT Subject: CN=680d7196-a6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:40:10:00:d3:68:3b:ce:f3:03:ea:99:82: 25:85:71:0a:52:4e:e2:0f:72:9b:45:ba:fa:68:dd: 4b:43:f7:69:96:d6:bb:07:fd:28:44:84:4f:6a:66: b0:31:77:fb:93:4b:c5:a3:a3:d1:78:af:10:37:77: dd:7b:10:54:68:87:d0:6f:a5:6a:6c:4e:bb:15:23: bb:2a:22:e3:48:e6:aa:b3:59:bd:ab:47:c7:2f:f5: 62:90:bb:c1:4b:ea:28:cd:2c:16:5f:49:f3:69:4b: ad:90:46:fd:01:94:dd:2e:48:55:a8:6e:45:5a:2b: 49:34:72:f8:c8:de:95:75:07:df:66:9a:2e:66:da: 60:cc:65:d9:c5:0e:26:de:c7:14:61:0a:87:4d:d8: 30:14:76:bb:e3:ca:48:10:76:3a:63:80:59:b5:90: 41:8f:35:d4:95:c0:0e:56:a5:ee:ec:a5:91:6d:23: 4a:93:4f:c4:cc:dd:df:56:3f:d9:1c:00:4c:6c:79: 93:55:9b:90:c2:89:69:ca:62:df:e4:1f:54:7f:2a: d7:ea:7b:98:48:c7:c5:7a:b7:51:9d:ad:83:7e:2c: 9d:a0:d1:82:bc:79:65:16:5f:fe:b3:56:b4:29:3b: c6:61:af:1d:b1:aa:64:5e:07:4b:98:df:24:41:4f: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:42:82:C7:5D:68:11:7F:B3:E0:2A:92:9D:E2:83:D4:09:0F:EC:A7 X509v3 Authority Key Identifier: keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:a8:18:a5:7f:1b:f8:9b:dd:d6:2f:fd:e8:4c:1f:bc:c5:33: 36:38:d9:6b:c0:ad:c1:79:b4:e4:4a:f6:3e:59:5b:83:3b:6f: 4f:c7:e7:10:cc:db:d4:1a:9d:92:7f:23:cf:d6:c8:93:99:ac: d9:40:8c:5e:95:9f:f2:79:0b:a4:cb:64:32:c9:cb:eb:d7:9d: c0:02:0f:50:74:0d:0b:3e:ae:c9:4e:2a:3f:82:4a:b7:e5:5e: 95:28:5c:8b:a1:b6:60:47:42:43:52:69:71:4e:ef:f3:b1:99: 36:72:b4:06:b7:74:36:12:46:11:bb:25:bc:7d:57:34:58:ba: 7c:0a:dc:58:0e:dd:a8:2c:2e:e9:15:e8:74:8e:ae:f7:68:88: 0f:45:df:4d:37:5e:f5:60:f1:93:f7:d3:8e:3b:6a:d1:9a:4b: e0:b7:0f:f6:a5:12:d1:59:ce:91:94:dd:83:fa:bc:f9:4b:9d: 49:5e:26:e6:cb:f8:bd:d2:ac:96:fc:65:c4:92:20:38:54:48: 5e:99:07:1b:6c:60:a2:0c:32:6f:41:49:0b:c0:38:62:78:62: d2:03:84:2b:d7:b7:a2:fd:34:47:dd:f9:0f:67:d9:20:78:2d: d8:e1:14:96:1e:5e:be:8d:11:d3:53:5a:0e:15:de:45:f2:02: 7b:e8:66:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1 NTgwRUUwMzEwHhcNMjUwNDI2MjM1MTUwWhcNMjUwNTAzMjM1MTUwWjAYMRYwFAYD VQQDEw02ODBkNzE5Ni1hNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwctAEADTaDvO8wPqmYIlhXEKUk7iD3KbRbr6aN1LQ/dplta7B/0oRIRPamaw MXf7k0vFo6PReK8QN3fdexBUaIfQb6VqbE67FSO7KiLjSOaqs1m9q0fHL/VikLvB S+oozSwWX0nzaUutkEb9AZTdLkhVqG5FWitJNHL4yN6VdQffZpouZtpgzGXZxQ4m 3scUYQqHTdgwFHa748pIEHY6Y4BZtZBBjzXUlcAOVqXu7KWRbSNKk0/EzN3fVj/Z HABMbHmTVZuQwolpymLf5B9UfyrX6nuYSMfFerdRna2DfiydoNGCvHllFl/+s1a0 KTvGYa8dsapkXgdLmN8kQU+czwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINCgsdd aBF/s+Aqkp3ig9QJD+ynMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080 REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDlFNi9CNjE2Qzg2QTRGNzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2 NFJLLXhUV2NNY2xWZ080REUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjqBilfxv4m93WL/3oTB+8xTM2ONlrwK3BebTkSvY+WVuDO29Px+cQ zNvUGp2SfyPP1siTmazZQIxelZ/yeQuky2Qyycvr153AAg9QdA0LPq7JTio/gkq3 5V6VKFyLobZgR0JDUmlxTu/zsZk2crQGt3Q2EkYRuyW8fVc0WLp8CtxYDt2oLC7p Feh0jq73aIgPRd9NN171YPGT99OOO2rRmkvgtw/2pRLRWc6RlN2D+rz5S51JXibm y/i90qyW/GXEkiA4VEhemQcbbGCiDDJvQUkLwDhieGLSA4Qr17ei/TRH3fkPZ9kg eC3Y4RSWHl6+jRHTU1oOFd5F8gJ76Gb5 -----END CERTIFICATE-----Generated at Sun Apr 27 04:29:44 2025 by rpki-client