$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: roCS0IFf7E3ZSqZrX5spIuNcFuDdiGGt0/LMhuylNSk= Subject key identifier: 39:E3:09:FF:E7:AE:B4:FB:3C:8A:1E:D9:2F:7D:28:3D:1A:1A:65:93 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 09F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1908 Signing time: Thu 24 Apr 2025 17:36:42 +0000 Manifest this update: Thu 24 Apr 2025 17:36:42 +0000 Manifest next update: Thu 01 May 2025 17:36:42 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: JYYZBwVIF/QW33hgVFvCQAqx1aICqGr/gaNWqB3ZNjs=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2550 (0x9f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Apr 24 17:36:42 2025 GMT Not After : May 1 17:36:42 2025 GMT Subject: CN=680a76aa-a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:18:66:db:39:2a:4d:37:ec:da:56:8d:67: c0:c6:6f:3d:a4:3d:e3:48:65:ba:9f:81:fa:2b:77: 57:82:d2:cd:b0:1d:e1:2a:28:d1:5f:09:8f:a0:be: 7f:83:83:c4:d2:39:a8:57:31:57:e1:18:dc:b7:5b: ab:97:ed:86:75:b6:b7:8d:dd:d5:46:61:b9:55:ac: db:16:82:08:61:e7:2e:51:0f:85:eb:a5:96:a1:f9: 1f:3b:04:89:48:17:e5:91:a6:1f:a9:91:ad:7f:02: 28:c4:e0:76:5b:64:db:4a:e3:d4:60:f7:d4:45:26: 21:0f:86:e0:76:bc:bb:07:17:8c:9a:be:f2:dc:f9: eb:52:62:bb:33:61:e4:9c:36:0a:c5:7f:43:20:b5: 88:b9:8d:9b:92:3e:ba:13:32:52:2c:ed:5c:2b:86: 01:e9:4e:fc:c1:c3:53:17:f3:be:cd:b6:5c:da:9c: a5:e6:7e:07:b2:5f:25:65:45:47:95:91:66:14:ae: 5f:b8:ec:60:12:99:a7:14:8e:0d:b1:74:8e:61:46: 0e:23:6b:60:c0:15:46:63:bc:0e:d3:cf:07:71:1c: de:e1:41:9e:d0:c4:52:56:9b:24:ef:5e:a1:d1:d2: 14:59:c0:7b:60:0f:97:ab:db:80:80:1f:02:0c:9c: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E3:09:FF:E7:AE:B4:FB:3C:8A:1E:D9:2F:7D:28:3D:1A:1A:65:93 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7b:78:76:6a:88:07:d1:11:b0:a6:de:a3:93:65:ce:c8:28: 6e:59:76:05:1f:c0:da:a6:82:2d:15:43:0d:45:a4:6f:ab:1a: c1:f5:c8:ed:44:06:59:dd:bc:29:bd:35:3f:2e:27:17:2c:c4: ce:ff:24:78:4a:93:34:61:f6:9d:da:39:3d:77:37:c8:f9:95: 23:40:c1:f7:53:c1:4c:8a:24:32:44:22:05:13:e4:e9:31:09: bd:4c:3c:7b:97:83:70:6c:9a:3f:d7:57:50:e5:89:3e:1b:9d: 56:ba:ee:c0:77:81:2d:ba:87:89:ac:56:31:81:7c:ad:3a:75: 3d:8e:aa:f6:f3:d0:db:e4:4c:97:bc:2a:6a:64:ca:20:25:73: e2:0f:e3:76:e8:5b:5d:7f:83:bd:77:d2:76:b3:ef:34:0d:63: 42:02:e3:5d:17:6c:1f:c2:ea:fb:92:fb:33:5c:cc:90:8e:1f: d8:e7:82:dd:e6:32:c5:2b:ca:01:5a:2e:cd:55:e1:cd:2f:7c: 54:bd:04:e6:07:37:87:3e:b1:29:e1:cc:40:18:84:44:72:e2: 81:79:38:24:7e:23:37:7d:43:c8:55:b9:6e:91:ee:ac:4e:b5: ba:b4:3a:35:5f:68:ac:84:73:da:ce:2a:40:e7:e2:16:37:30: af:76:e3:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNDI0MTczNjQyWhcNMjUwNTAxMTczNjQyWjAYMRYwFAYD VQQDEw02ODBhNzZhYS1hNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbsYZts5Kk037NpWjWfAxm89pD3jSGW6n4H6K3dXgtLNsB3hKijRXwmPoL5/ g4PE0jmoVzFX4Rjct1url+2Gdba3jd3VRmG5VazbFoIIYecuUQ+F66WWofkfOwSJ SBflkaYfqZGtfwIoxOB2W2TbSuPUYPfURSYhD4bgdry7BxeMmr7y3PnrUmK7M2Hk nDYKxX9DILWIuY2bkj66EzJSLO1cK4YB6U78wcNTF/O+zbZc2pyl5n4Hsl8lZUVH lZFmFK5fuOxgEpmnFI4NsXSOYUYOI2tgwBVGY7wO088HcRze4UGe0MRSVpsk716h 0dIUWcB7YA+Xq9uAgB8CDJySqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnjCf/n rrT7PIoe2S99KD0aGmWTMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOe3h2aogH0RGwpt6jk2XOyChuWXYFH8DapoItFUMNRaRvqxrB9cjt RAZZ3bwpvTU/LicXLMTO/yR4SpM0Yfad2jk9dzfI+ZUjQMH3U8FMiiQyRCIFE+Tp MQm9TDx7l4NwbJo/11dQ5Yk+G51Wuu7Ad4EtuoeJrFYxgXytOnU9jqr289Db5EyX vCpqZMogJXPiD+N26Ftdf4O9d9J2s+80DWNCAuNdF2wfwur7kvszXMyQjh/Y54Ld 5jLFK8oBWi7NVeHNL3xUvQTmBzeHPrEp4cxAGIREcuKBeTgkfiM3fUPIVbluke6s TrW6tDo1X2ishHPazipA5+IWNzCvduMR -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:35 2025 by rpki-client