$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: vvLFdcquh93tAeZ/PhSHuraQvXLiry6x1XNbWcT1zZQ= Subject key identifier: 02:59:DF:2A:26:5F:20:2C:08:B9:83:E6:55:53:E0:5F:1A:9D:62:3E Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0630 Signing time: Thu 24 Apr 2025 22:15:49 +0000 Manifest this update: Thu 24 Apr 2025 22:15:49 +0000 Manifest next update: Thu 01 May 2025 22:15:49 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: Tc10mR05WnqiDdDaAJppBoCRI/VDNHw73o0Oglhd2cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Apr 24 22:15:49 2025 GMT Not After : May 1 22:15:49 2025 GMT Subject: CN=680ab815-a57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:88:d4:ce:fd:3e:08:3e:d3:dd:bf:34:88: f7:ba:ec:58:09:c0:0d:fd:39:80:4d:63:57:2b:9e: 61:94:ef:1c:31:45:02:3a:70:c2:69:22:34:9c:24: 1a:7b:d8:97:72:77:46:4d:d0:a8:a2:2a:4d:f8:8b: 7a:67:d4:4b:de:b8:d4:4a:e6:af:bf:e7:1f:66:b2: 70:44:e5:15:8c:69:77:8c:ca:44:e4:41:a8:33:d1: de:41:c3:ac:15:e2:f8:e8:28:47:dd:41:62:92:b7: 0c:d5:29:94:53:1a:2a:d9:6b:72:a4:9f:d3:72:6c: 92:11:86:70:0a:82:59:dd:f1:6d:bd:31:c7:4c:04: c5:fb:91:1e:03:a8:51:44:0a:42:46:fc:3b:a3:cf: b8:12:80:c6:d4:36:7e:43:38:43:1e:4a:c9:28:e9: 63:92:36:28:a9:fb:52:d5:20:bf:ee:78:33:f3:0d: 70:6f:86:eb:35:2d:2d:67:c7:26:22:2e:d4:78:5f: 99:3a:df:b4:77:40:54:a3:3e:cb:78:58:1c:a0:ba: 43:91:9f:34:8e:51:24:80:57:43:b7:c8:1f:71:9e: c6:9a:a0:c5:b1:c5:69:59:d8:e0:e6:03:97:57:63: e5:5e:83:87:7e:6b:aa:1f:f2:f6:5a:21:3a:03:d5: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:DF:2A:26:5F:20:2C:08:B9:83:E6:55:53:E0:5F:1A:9D:62:3E X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6f:b6:05:97:5b:f8:69:c2:0c:03:ac:f4:a8:05:34:3d:4b: ae:38:aa:e8:8f:33:df:fd:a7:52:a2:02:52:fc:00:f8:37:cc: c8:42:87:c7:e3:29:b3:d1:ab:2f:e4:2b:62:db:93:03:7a:df: 8e:85:09:d2:9d:a4:e6:11:a3:01:75:18:6f:c1:d6:b8:4d:f6: 85:71:86:3b:8a:c2:0b:5b:f5:b9:b6:bc:8f:ec:7c:cf:17:f1: 4c:4d:e3:39:35:c0:1d:6c:3a:99:c5:d1:04:a2:3f:2f:ee:a7: 9e:06:9f:48:de:c2:30:a8:8d:56:0e:8a:fd:cc:98:51:a0:dd: 13:3c:d6:79:09:6c:00:e3:2c:88:19:2f:77:d0:3f:1d:b9:0d: a0:70:f8:a8:22:ac:5d:59:6b:f9:e2:6d:35:4a:9e:4d:a5:9d: d7:4a:b3:5b:1d:a3:35:24:53:b7:21:32:1d:1f:8e:54:76:94: 5c:20:cf:d2:8e:00:c9:d8:61:d7:77:69:3b:80:63:87:f3:8f: f5:08:08:9b:bf:47:0c:16:21:76:8e:3e:5f:7d:29:e0:40:73: a5:a2:a2:f3:5e:6a:00:d4:7d:55:1d:fd:4e:44:1c:82:e6:54: e7:7e:33:3a:b2:9e:27:48:b6:df:de:ea:83:a3:3c:b1:69:76: 87:46:54:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwNDI0MjIxNTQ5WhcNMjUwNTAxMjIxNTQ5WjAYMRYwFAYD VQQDEw02ODBhYjgxNS1hNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpKI1M79Pgg+092/NIj3uuxYCcAN/TmATWNXK55hlO8cMUUCOnDCaSI0nCQa e9iXcndGTdCooipN+It6Z9RL3rjUSuavv+cfZrJwROUVjGl3jMpE5EGoM9HeQcOs FeL46ChH3UFikrcM1SmUUxoq2WtypJ/TcmySEYZwCoJZ3fFtvTHHTATF+5EeA6hR RApCRvw7o8+4EoDG1DZ+QzhDHkrJKOljkjYoqftS1SC/7ngz8w1wb4brNS0tZ8cm Ii7UeF+ZOt+0d0BUoz7LeFgcoLpDkZ80jlEkgFdDt8gfcZ7GmqDFscVpWdjg5gOX V2PlXoOHfmuqH/L2WiE6A9VEfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJZ3yom XyAsCLmD5lVT4F8anWI+MB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3b7YFl1v4acIMA6z0qAU0PUuuOKrojzPf/adSogJS/AD4N8zIQofH 4ymz0asv5Cti25MDet+OhQnSnaTmEaMBdRhvwda4TfaFcYY7isILW/W5tryP7HzP F/FMTeM5NcAdbDqZxdEEoj8v7qeeBp9I3sIwqI1WDor9zJhRoN0TPNZ5CWwA4yyI GS930D8duQ2gcPioIqxdWWv54m01Sp5NpZ3XSrNbHaM1JFO3ITIdH45UdpRcIM/S jgDJ2GHXd2k7gGOH84/1CAibv0cMFiF2jj5ffSngQHOloqLzXmoA1H1VHf1ORByC 5lTnfjM6sp4nSLbf3uqDozyxaXaHRlSy -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:01 2025 by rpki-client