$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: 6xbkukgTUOGNim7qQYdouRgNBWK43CaL+jri5tx4ZrU= Subject key identifier: 13:EF:62:50:DB:0D:69:BA:DF:23:EB:DF:54:BD:7F:9B:6E:97:1E:DA Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 01DF Signing time: Fri 25 Apr 2025 01:53:30 +0000 Manifest this update: Fri 25 Apr 2025 01:53:30 +0000 Manifest next update: Fri 02 May 2025 01:53:29 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: iiO5cjcB3H67bP6ateNJIjtg69dNU7I+mumeqYHJN5g=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Apr 25 01:53:30 2025 GMT Not After : May 2 01:53:29 2025 GMT Subject: CN=680aeb1a-4bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:96:16:a0:53:87:b6:98:95:f5:dd:6c:cb: 37:0b:97:c8:ad:ec:bd:01:98:a9:48:d4:04:11:0c: 60:11:88:4f:6e:6e:4f:97:c1:c3:d2:69:4d:b3:27: 76:7e:81:c9:f1:bf:c3:ec:5d:1d:07:dd:d6:ce:4b: bd:cb:a7:5e:6d:13:73:d9:b5:48:d0:31:26:03:ab: 49:c0:c3:93:8a:37:0a:6f:21:a3:b2:96:67:f9:14: f9:97:05:4f:bf:3a:a7:2e:ed:c3:36:e4:6c:95:bc: 49:87:44:02:20:74:91:16:ab:d1:b9:12:b7:66:47: fb:04:9f:26:03:0b:d7:65:49:72:cd:3b:73:43:c6: 59:fb:4a:ec:94:f5:8a:0b:d9:a8:ad:5f:dd:7c:f7: 8a:5f:49:2d:e9:c0:45:13:f8:ee:79:e1:e6:c6:b9: 0e:06:ef:66:d3:c4:3a:ff:c1:b9:90:17:7d:90:14: e9:4a:59:f9:ec:f7:71:71:e5:c5:68:bb:21:63:bf: 23:0c:dd:ae:5d:eb:28:c1:84:50:91:98:2b:a3:ed: 13:80:d6:a9:04:33:9c:b2:00:84:cb:19:4f:bc:84: 3a:2d:4f:3b:dd:e1:25:99:40:e3:99:3f:e1:da:bc: 2e:8c:b0:74:4c:bf:7b:97:4f:e0:d8:3d:e7:db:a9: e8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:62:50:DB:0D:69:BA:DF:23:EB:DF:54:BD:7F:9B:6E:97:1E:DA X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:73:b8:2d:59:0a:c3:0a:2b:26:1d:31:ef:f1:1c:1f:d6:f7: 9b:db:6c:81:02:f3:96:88:27:10:fc:23:04:13:96:3c:93:86: f7:01:30:74:de:9b:52:f4:04:13:be:5a:43:66:89:f7:ef:c4: 91:da:a7:3e:de:88:ac:aa:ae:52:d8:27:15:87:ce:d8:3b:21: d5:4d:a5:20:89:1c:39:bb:c8:f9:c6:d9:40:8c:23:ed:53:04: d5:c5:e4:7a:11:b0:fa:19:53:75:00:bb:8d:c6:41:38:1c:02: 9e:26:9c:62:43:d5:ae:48:06:f1:d3:aa:df:2a:f8:6c:5d:02: f3:df:24:d0:f4:30:79:c4:59:4f:da:dd:5e:51:29:de:a4:a4: ae:e3:99:3b:c1:d3:a5:6a:19:22:13:7a:bd:85:ae:ad:3c:70: a6:b2:cb:2b:4a:e4:4b:2c:90:dc:67:cd:40:80:d4:bf:d5:50: f4:79:dc:b8:d4:cb:e9:f3:8b:95:fd:f5:c6:48:34:87:1d:9c: 4c:c2:17:e5:3e:1a:27:a3:4a:02:6e:98:35:0e:5a:a2:ab:be: 0b:49:fa:39:34:77:db:4b:20:47:d5:09:83:61:31:ef:eb:2f: f8:85:37:fd:43:a7:db:af:7e:78:aa:31:48:55:e1:fb:fb:07: af:55:31:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNDI1MDE1MzMwWhcNMjUwNTAyMDE1MzI5WjAYMRYwFAYD VQQDEw02ODBhZWIxYS00YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZqWFqBTh7aYlfXdbMs3C5fIrey9AZipSNQEEQxgEYhPbm5Pl8HD0mlNsyd2 foHJ8b/D7F0dB93Wzku9y6debRNz2bVI0DEmA6tJwMOTijcKbyGjspZn+RT5lwVP vzqnLu3DNuRslbxJh0QCIHSRFqvRuRK3Zkf7BJ8mAwvXZUlyzTtzQ8ZZ+0rslPWK C9morV/dfPeKX0kt6cBFE/jueeHmxrkOBu9m08Q6/8G5kBd9kBTpSln57PdxceXF aLshY78jDN2uXesowYRQkZgro+0TgNapBDOcsgCEyxlPvIQ6LU873eElmUDjmT/h 2rwujLB0TL97l0/g2D3n26noowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPvYlDb DWm63yPr31S9f5tulx7aMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/c7gtWQrDCismHTHv8Rwf1veb22yBAvOWiCcQ/CMEE5Y8k4b3ATB0 3ptS9AQTvlpDZon378SR2qc+3oisqq5S2CcVh87YOyHVTaUgiRw5u8j5xtlAjCPt UwTVxeR6EbD6GVN1ALuNxkE4HAKeJpxiQ9WuSAbx06rfKvhsXQLz3yTQ9DB5xFlP 2t1eUSnepKSu45k7wdOlahkiE3q9ha6tPHCmsssrSuRLLJDcZ81AgNS/1VD0edy4 1Mvp84uV/fXGSDSHHZxMwhflPhono0oCbpg1Dlqiq74LSfo5NHfbSyBH1QmDYTHv 6y/4hTf9Q6fbr354qjFIVeH7+wevVTEN -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:49 2025 by rpki-client