$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: Osi4oQclrVy7AXH4p6wPGvni4hdMs3U+z/RbGsAzAK8= Subject key identifier: 86:87:56:06:79:8B:00:69:70:3E:4C:FD:56:29:61:28:E7:7F:1B:41 Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: 97 Signing time: Fri 25 Apr 2025 05:20:59 +0000 Manifest this update: Fri 25 Apr 2025 05:20:58 +0000 Manifest next update: Fri 02 May 2025 05:20:58 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: +g/HyLQYD0ouJRRMPAKG/oWGXke5biCNBvy9IdMnhtE=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: LrQNetWX/kWMMJz247yWUJ25L5V6W9haJZqldtz3j0Y=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: KlwexvDGFQzb3abuiXQPF43ztld2Pg+xYp8Fr2ZD2ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Apr 25 05:20:58 2025 GMT Not After : May 2 05:20:58 2025 GMT Subject: CN=680b1bbb-3954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:39:0d:bf:49:42:0e:f2:23:1a:99:db:24: b9:1f:0f:d7:c6:2e:23:d7:cc:36:67:23:90:97:51: dd:b8:a3:75:d9:d9:80:21:61:8e:93:3a:d9:0b:5f: 7d:7b:06:7a:83:a0:94:9d:ec:78:4e:d6:6a:14:b4: 8d:7c:8d:1b:a5:cd:27:6b:67:1e:a8:65:da:d5:a1: 17:8a:b0:96:ed:31:7b:ba:d5:28:ad:62:14:b2:22: c0:75:60:2f:bb:cb:19:ba:6c:bb:6c:76:80:5f:ea: 98:18:ce:24:19:c0:8c:23:7a:6c:00:70:84:cd:db: de:f6:11:ec:e6:48:e1:46:71:24:72:5e:3f:f1:1a: 19:71:40:8d:22:c2:0c:ca:f2:35:27:17:93:70:14: 32:15:e2:9d:71:e2:8f:a0:27:7f:e9:c7:d1:bd:05: 68:6d:7c:a7:88:3f:a3:3e:c1:ba:7a:31:50:e0:95: 0d:ea:da:d2:7c:da:db:14:5b:57:68:64:a4:d8:77: e5:33:6a:fa:de:2f:3d:06:31:bf:36:1b:95:0e:91: 06:0e:42:4f:cf:19:68:35:1c:85:a2:3f:db:53:fd: aa:8b:1c:98:4b:fc:8b:3f:48:1c:c5:f9:2c:d9:10: 24:35:b1:1d:46:54:9e:03:38:1e:18:ba:0c:bb:53: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:56:06:79:8B:00:69:70:3E:4C:FD:56:29:61:28:E7:7F:1B:41 X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1c:82:7b:c5:76:c4:91:62:c0:ea:04:92:d9:1a:bf:00:f2: f0:6b:78:01:f2:20:3b:16:7f:49:a4:0d:59:a7:55:e4:7b:34: 65:40:0a:63:3c:a6:8d:df:9b:2a:0e:ab:2b:af:8b:55:79:4f: 02:45:9f:d9:5f:b2:59:a0:86:a3:b3:ab:30:8a:48:fe:c0:2f: fe:73:37:c6:1d:67:7b:a2:e5:ef:7e:01:4c:88:5e:03:c5:d6: 3e:79:90:f5:67:94:43:47:a1:e7:34:01:fd:67:7b:23:ba:3a: c0:01:b6:26:1a:15:bd:c6:38:29:5d:8f:2e:cd:59:03:02:c5: d4:bb:18:e9:1d:c6:b8:d1:35:10:a1:54:8a:be:4c:1f:41:ec: 64:c0:8c:ee:50:36:05:98:aa:ae:09:e0:5f:2e:59:e3:8f:55: f6:7a:1b:93:53:34:1d:02:48:97:f0:d2:90:92:63:e5:43:88: e8:4c:f1:79:d1:9b:f5:a5:9c:14:7b:a3:39:11:67:ce:d9:14: bf:30:f6:62:67:3e:c5:44:0c:66:65:6a:83:91:03:e0:54:1a: d3:a7:18:a1:ec:2f:f2:ad:89:29:53:8e:3b:ef:a1:e8:b8:39: 57:ba:07:61:6f:5b:a4:33:0f:7b:a5:ab:67:5b:30:36:6f:ea: 8f:f5:4c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjUwNDI1MDUyMDU4WhcNMjUwNTAyMDUyMDU4WjAYMRYwFAYD VQQDEw02ODBiMWJiYi0zOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35Y5Db9JQg7yIxqZ2yS5Hw/Xxi4j18w2ZyOQl1HduKN12dmAIWGOkzrZC199 ewZ6g6CUnex4TtZqFLSNfI0bpc0na2ceqGXa1aEXirCW7TF7utUorWIUsiLAdWAv u8sZumy7bHaAX+qYGM4kGcCMI3psAHCEzdve9hHs5kjhRnEkcl4/8RoZcUCNIsIM yvI1JxeTcBQyFeKdceKPoCd/6cfRvQVobXyniD+jPsG6ejFQ4JUN6trSfNrbFFtX aGSk2HflM2r63i89BjG/NhuVDpEGDkJPzxloNRyFoj/bU/2qixyYS/yLP0gcxfks 2RAkNbEdRlSeAzgeGLoMu1PMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaHVgZ5 iwBpcD5M/VYpYSjnfxtBMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXHIJ7xXbEkWLA6gSS2Rq/APLwa3gB8iA7Fn9JpA1Zp1XkezRlQApj PKaN35sqDqsrr4tVeU8CRZ/ZX7JZoIajs6swikj+wC/+czfGHWd7ouXvfgFMiF4D xdY+eZD1Z5RDR6HnNAH9Z3sjujrAAbYmGhW9xjgpXY8uzVkDAsXUuxjpHca40TUQ oVSKvkwfQexkwIzuUDYFmKquCeBfLlnjj1X2ehuTUzQdAkiX8NKQkmPlQ4joTPF5 0Zv1pZwUe6M5EWfO2RS/MPZiZz7FRAxmZWqDkQPgVBrTpxih7C/yrYkpU44776Ho uDlXugdhb1ukMw97patnWzA2b+qP9UwX -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:28 2025 by rpki-client