$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft File: TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json) Hash identifier: cksLob6kYc1AWnPmAi6uZfRmSbXTDgSbTJhOn+2yByw= Subject key identifier: AE:44:26:E1:17:11:2E:FD:44:C8:AB:5B:1C:CE:A0:C3:15:8B:40:7A Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 Certificate issuer: /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft Manifest number: 04DA Signing time: Fri 25 Apr 2025 00:50:17 +0000 Manifest this update: Fri 25 Apr 2025 00:50:17 +0000 Manifest next update: Fri 02 May 2025 00:50:17 +0000 Files and hashes: 1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: 2O75k3cwMkKFWj8h4nb+CmCDEng5m7TkkESgbGwXOTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Validity Not Before: Apr 25 00:50:17 2025 GMT Not After : May 2 00:50:17 2025 GMT Subject: CN=680adc49-49bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:a0:4f:80:f9:36:c0:91:33:31:7a:97:a7: 7b:80:c4:ef:1a:ad:91:6a:32:44:89:3d:fb:64:a0: 9e:d8:f5:9d:9e:27:d9:ad:05:c6:ee:f3:8e:6d:ec: 35:16:75:61:49:a8:ec:2d:a3:23:f7:ab:6d:0e:bb: fa:7c:7f:c7:a6:6e:c0:44:58:a9:b0:dd:9e:0b:c3: ce:4f:bd:5c:a9:b8:a8:f0:56:09:90:ed:5c:12:51: 31:1b:42:48:86:30:68:35:7b:2b:15:49:3d:9e:54: a5:52:c4:41:fb:93:24:86:c3:7e:97:02:ad:0c:6a: d3:e4:47:4b:6b:b2:3c:16:8f:da:25:78:50:11:78: 52:17:83:0b:54:47:4c:96:cc:11:69:9c:67:2f:9b: 70:68:94:15:7d:45:0f:d6:e0:08:b8:c3:50:08:3e: 77:11:27:84:fc:23:a5:50:6b:94:3f:ae:53:37:de: 4d:12:37:85:18:aa:54:e2:51:84:e6:92:7e:74:26: 53:20:a7:90:33:b3:0d:2c:89:d0:4f:02:dd:39:1d: d6:aa:f7:67:a7:24:74:64:96:60:e7:6b:53:29:60: 15:b4:2b:a9:ca:e1:e3:1f:9a:16:44:b6:54:4a:06: 6c:de:ac:7f:cf:7f:d3:84:9b:60:36:77:85:32:4b: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:44:26:E1:17:11:2E:FD:44:C8:AB:5B:1C:CE:A0:C3:15:8B:40:7A X509v3 Authority Key Identifier: keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e7:0a:93:a1:85:af:a0:8f:d0:4d:39:3f:30:5a:dc:a9:af: 77:cd:eb:62:7f:96:f2:cd:25:15:30:32:b3:39:d8:48:4d:b8: c9:52:e9:14:6f:0e:0d:bc:7a:78:02:b1:7f:ef:8a:e5:3a:67: 88:d7:c3:32:34:2f:b6:c1:99:78:8b:75:27:36:66:0c:c5:e3: b0:e5:0a:ca:6f:58:e3:f8:6b:ad:46:37:65:37:92:36:76:9c: 87:16:6f:d8:1d:35:d4:06:cb:1e:1e:76:fb:52:b6:b8:c7:10: ab:eb:4d:3e:00:53:88:18:ef:8a:31:b7:3a:30:d3:e7:0c:5e: 6b:0c:4a:e4:ce:c0:f7:d2:aa:a7:a5:76:44:f9:f6:df:d2:d9: 1f:ee:da:5b:00:ab:11:c1:b2:21:3d:ae:c2:6b:e6:0f:97:e6: ec:21:42:b0:b1:82:7e:0f:32:02:a2:14:0e:c6:3d:46:42:7f: 80:1b:f1:a0:23:35:20:32:ef:6b:5a:a6:8b:b6:30:b7:d5:a1: 3e:4d:32:d2:d5:27:c7:ed:6f:04:bc:2b:83:47:e4:d2:07:52: e3:62:56:a2:5f:e1:63:b9:4f:3c:38:a9:92:6d:f0:fa:61:a9: 9c:4e:6d:2e:46:32:f6:03:97:9a:2c:38:97:82:df:9e:12:1b: 15:b8:b0:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDREMzlERTNFNTA2MDY4QzM4MzZBMDA1NDgxNTU0MTNF NjgyNTk1QjMwHhcNMjUwNDI1MDA1MDE3WhcNMjUwNTAyMDA1MDE3WjAYMRYwFAYD VQQDEw02ODBhZGM0OS00OWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLugT4D5NsCRMzF6l6d7gMTvGq2RajJEiT37ZKCe2PWdnifZrQXG7vOObew1 FnVhSajsLaMj96ttDrv6fH/Hpm7ARFipsN2eC8POT71cqbio8FYJkO1cElExG0JI hjBoNXsrFUk9nlSlUsRB+5MkhsN+lwKtDGrT5EdLa7I8Fo/aJXhQEXhSF4MLVEdM lswRaZxnL5twaJQVfUUP1uAIuMNQCD53ESeE/COlUGuUP65TN95NEjeFGKpU4lGE 5pJ+dCZTIKeQM7MNLInQTwLdOR3WqvdnpyR0ZJZg52tTKWAVtCupyuHjH5oWRLZU SgZs3qx/z3/ThJtgNneFMkvNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5EJuEX ES79RMirWxzOoMMVi0B6MB8GA1UdIwQYMBaAFE053j5QYGjDg2oAVIFVQT5oJZWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FNT0RhZ0JVZ1ZWQlBtZ2xs Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RUbmVQbEJnYU1PRGFnQlVnVlZCUG1nbGxiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FN T0RhZ0JVZ1ZWQlBtZ2xsYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb5wqToYWvoI/QTTk/MFrcqa93zetif5byzSUVMDKzOdhITbjJUukU bw4NvHp4ArF/74rlOmeI18MyNC+2wZl4i3UnNmYMxeOw5QrKb1jj+GutRjdlN5I2 dpyHFm/YHTXUBsseHnb7Ura4xxCr600+AFOIGO+KMbc6MNPnDF5rDErkzsD30qqn pXZE+fbf0tkf7tpbAKsRwbIhPa7Ca+YPl+bsIUKwsYJ+DzICohQOxj1GQn+AG/Gg IzUgMu9rWqaLtjC31aE+TTLS1SfH7W8EvCuDR+TSB1LjYlaiX+FjuU88OKmSbfD6 YamcTm0uRjL2A5eaLDiXgt+eEhsVuLA4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:16 2025 by rpki-client