$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: c0J6cD0IaZ8dRT624ZWGKDS2pqbn14fVKCIokuSZaew= Subject key identifier: DC:77:F2:7E:55:BC:62:91:7E:60:1F:F5:BF:83:84:6D:FC:21:57:2F Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 1271 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 126A Signing time: Thu 24 Apr 2025 17:07:45 +0000 Manifest this update: Thu 24 Apr 2025 17:07:44 +0000 Manifest next update: Thu 01 May 2025 17:07:44 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: TBjOnw9XhUz9wDx+FC9iW1JFOYfuXTR390eEWeGs5W4=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4721 (0x1271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Apr 24 17:07:44 2025 GMT Not After : May 1 17:07:44 2025 GMT Subject: CN=680a6fe0-bf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:94:33:16:87:e2:f8:34:6d:e4:29:40:d8:95: b8:4d:7d:e4:49:38:07:c1:7d:a3:ea:64:86:ab:00: f3:9d:fb:8d:b0:3c:40:ed:2e:77:b9:82:cb:30:2e: 9b:96:65:30:b3:f6:03:d6:6c:5a:8c:ca:93:1e:fb: 92:50:a4:c6:c0:1a:ed:c3:f4:23:3b:a3:15:6c:d4: 4c:07:1e:31:2f:ad:99:ce:31:ac:b4:22:2a:84:a9: 9a:e8:5c:a0:11:11:d8:ad:7e:b3:48:9a:32:7d:47: 77:8a:ce:c0:9c:d9:f2:81:e9:82:be:06:30:78:e9: fe:b4:60:c6:f4:12:bc:2c:16:00:d0:03:82:4f:9e: ff:64:2b:0c:e9:ea:b6:74:a8:2c:59:ce:ec:7d:66: 19:69:ac:57:c3:1e:79:ed:d1:01:1d:8c:97:64:85: aa:35:fc:ce:30:66:02:5b:cf:e3:24:fe:39:10:96: f7:6c:a9:b2:f3:5e:f9:68:59:35:31:f6:dc:e1:6a: b2:8d:83:e7:b1:a2:3c:b8:7a:4c:8b:f8:d1:c1:16: 18:57:51:99:e8:bf:38:c7:5b:ba:3a:8f:65:20:f0: d9:03:25:e4:68:25:07:ea:79:d4:c6:5e:4f:a2:f6: 4f:28:1e:22:17:d2:76:3f:9b:04:e9:31:91:72:e9: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:F2:7E:55:BC:62:91:7E:60:1F:F5:BF:83:84:6D:FC:21:57:2F X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1e:68:86:3f:d5:83:83:d6:d7:fa:5f:43:25:ec:1b:fa:81: 8a:27:97:8f:e1:e4:cf:f6:84:e3:e8:dd:7d:e8:1a:84:30:c3: b0:b4:9d:82:78:59:17:44:b8:91:95:8b:4e:b7:cb:51:96:73: a6:e8:d2:ed:41:64:f5:e1:5e:f4:98:71:bc:bc:52:18:5a:6f: 27:21:a8:35:c0:3e:16:50:b2:fc:13:7d:cc:80:ae:b3:be:61: 2c:0c:b4:e1:2e:24:79:d5:88:27:11:2b:23:94:be:a5:e2:61: 39:33:6a:7f:f6:24:c3:0b:b0:ab:7a:0c:65:df:39:d4:79:f5: cb:a3:3c:51:1b:12:14:d4:0f:82:c3:b1:d7:0a:77:e8:3a:5b: 1a:cd:b8:19:ec:6d:8b:3a:68:da:6c:8b:d0:8d:3c:05:c0:a7: 67:77:7c:b6:2d:db:d5:00:c7:ff:f7:c8:12:d9:ab:9e:4b:12: 8e:53:92:cd:70:45:4f:3d:89:70:e7:a7:55:0f:22:63:13:e9: f0:24:81:8c:ad:2f:e0:ee:0e:54:91:d8:99:66:2d:00:7e:86: d8:7e:a5:5d:f0:43:b4:2f:a6:ca:c5:32:2d:fb:9a:41:2b:02: 1a:ca:bc:9e:c3:86:f6:77:93:d7:c9:93:53:db:41:4b:01:84: 84:91:4b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwNDI0MTcwNzQ0WhcNMjUwNTAxMTcwNzQ0WjAYMRYwFAYD VQQDEw02ODBhNmZlMC1iZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75QzFofi+DRt5ClA2JW4TX3kSTgHwX2j6mSGqwDznfuNsDxA7S53uYLLMC6b lmUws/YD1mxajMqTHvuSUKTGwBrtw/QjO6MVbNRMBx4xL62ZzjGstCIqhKma6Fyg ERHYrX6zSJoyfUd3is7AnNnygemCvgYweOn+tGDG9BK8LBYA0AOCT57/ZCsM6eq2 dKgsWc7sfWYZaaxXwx557dEBHYyXZIWqNfzOMGYCW8/jJP45EJb3bKmy8175aFk1 Mfbc4WqyjYPnsaI8uHpMi/jRwRYYV1GZ6L84x1u6Oo9lIPDZAyXkaCUH6nnUxl5P ovZPKB4iF9J2P5sE6TGRcukJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx38n5V vGKRfmAf9b+DhG38IVcvMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHmiGP9WDg9bX+l9DJewb+oGKJ5eP4eTP9oTj6N196BqEMMOwtJ2C eFkXRLiRlYtOt8tRlnOm6NLtQWT14V70mHG8vFIYWm8nIag1wD4WULL8E33MgK6z vmEsDLThLiR51YgnESsjlL6l4mE5M2p/9iTDC7Cregxl3znUefXLozxRGxIU1A+C w7HXCnfoOlsazbgZ7G2LOmjabIvQjTwFwKdnd3y2LdvVAMf/98gS2aueSxKOU5LN cEVPPYlw56dVDyJjE+nwJIGMrS/g7g5UkdiZZi0AfobYfqVd8EO0L6bKxTIt+5pB KwIayryew4b2d5PXyZNT20FLAYSEkUuJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:57 2025 by rpki-client