$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: JOpAC0BasbY3yiFGf6XxLvV1SZanb726XtcS3odZAJk= Subject key identifier: E5:1D:F4:F2:C9:06:4A:AD:96:5E:D2:0A:97:66:D0:61:AE:16:16:E6 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0502 Signing time: Thu 24 Apr 2025 23:28:09 +0000 Manifest this update: Thu 24 Apr 2025 23:28:08 +0000 Manifest next update: Thu 01 May 2025 23:28:08 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: m/Ce6Q4FrHzR3UfPTu9LEL6BNNCe7AXLWF4/C1D+ZVI=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Apr 24 23:28:08 2025 GMT Not After : May 1 23:28:08 2025 GMT Subject: CN=680ac909-d28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:8c:a4:e8:6b:08:bb:e7:f9:4d:24:56:a8: e3:36:d9:5e:77:c1:39:3e:66:06:c9:80:9b:35:a6: 70:36:8a:cf:0d:2b:33:05:cd:27:7b:6c:46:b4:b7: 7d:8c:db:c1:30:dd:ef:65:44:9f:86:14:d5:0b:c9: 0d:ec:30:28:4c:58:5b:5c:d3:25:ea:34:89:88:7d: 5d:c1:21:9c:a3:13:34:5b:66:c5:d0:a2:58:fd:ad: e9:42:b1:ad:af:5d:ea:b1:f1:ed:f3:ba:f2:5b:ae: 46:62:7f:8d:af:fb:78:72:89:14:bb:e2:cc:6c:c8: 7a:a7:80:5e:21:dc:69:90:2f:2f:d6:c0:b5:d5:9d: ca:f4:17:3f:bb:81:22:a6:f8:79:82:4e:5c:fe:00: 8f:b6:d9:23:c0:79:dc:a1:99:5a:95:7a:69:35:5e: 1a:09:25:07:9b:65:cb:bf:b9:4c:8c:9f:25:c9:b8: 9d:9e:e0:19:78:f7:57:02:c3:c2:dd:39:ed:20:53: 28:78:6c:f7:5d:4c:0d:d8:1a:4b:c9:31:20:4d:50: ae:7a:ac:ca:c0:40:0c:34:f9:e2:7e:b4:ef:82:a9: 80:50:00:13:8f:55:9a:3f:b8:69:2d:9a:c7:64:74: bc:00:9d:24:00:6a:56:c1:0c:a7:91:f7:a0:59:fb: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:F4:F2:C9:06:4A:AD:96:5E:D2:0A:97:66:D0:61:AE:16:16:E6 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:6e:00:5c:17:2c:b4:03:6f:73:52:03:d4:00:d1:e7:aa:68: aa:5d:93:fe:41:12:6f:91:44:b9:39:61:aa:e8:71:73:f7:e8: 56:b9:b8:09:2b:0e:8e:0f:dc:eb:dc:c4:cf:74:20:5e:c7:e6: 82:4f:e1:52:60:1f:5e:ad:1e:40:48:ff:a1:e9:e5:6d:7a:39: 47:0f:19:80:f3:c4:94:aa:49:be:33:e3:75:46:04:11:e7:9c: 19:39:ab:3e:08:64:dd:2a:8b:99:c9:08:48:44:88:74:ec:87: c7:d3:43:f8:6d:8b:06:aa:09:2e:29:c1:a6:42:9b:fb:11:01: a6:b0:4e:a1:8e:26:9a:3f:97:79:09:cc:27:3a:75:01:0e:ca: 12:3c:06:74:a8:e6:b0:5c:4b:56:a6:06:91:51:6d:da:64:00: 34:6d:bf:f8:89:0e:02:05:8c:ef:49:be:85:ef:b7:09:4c:33: 62:ba:73:8b:ac:89:2d:b0:d3:20:b9:3c:54:12:ce:eb:c0:fb: e6:72:39:3c:36:30:42:a3:e6:bf:ce:8b:0d:da:62:91:53:4e: 4f:91:59:af:67:4c:a0:dc:84:90:e0:c8:0c:3e:bc:3b:1c:9d: cd:e4:7c:eb:bc:6c:cf:6a:37:77:48:6b:31:a4:29:bf:02:b6: 7a:93:bf:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwNDI0MjMyODA4WhcNMjUwNTAxMjMyODA4WjAYMRYwFAYD VQQDEw02ODBhYzkwOS1kMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5CMpOhrCLvn+U0kVqjjNtled8E5PmYGyYCbNaZwNorPDSszBc0ne2xGtLd9 jNvBMN3vZUSfhhTVC8kN7DAoTFhbXNMl6jSJiH1dwSGcoxM0W2bF0KJY/a3pQrGt r13qsfHt87ryW65GYn+Nr/t4cokUu+LMbMh6p4BeIdxpkC8v1sC11Z3K9Bc/u4Ei pvh5gk5c/gCPttkjwHncoZlalXppNV4aCSUHm2XLv7lMjJ8lybidnuAZePdXAsPC 3TntIFMoeGz3XUwN2BpLyTEgTVCueqzKwEAMNPnifrTvgqmAUAATj1WaP7hpLZrH ZHS8AJ0kAGpWwQynkfegWfugKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUd9PLJ Bkqtll7SCpdm0GGuFhbmMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwbgBcFyy0A29zUgPUANHnqmiqXZP+QRJvkUS5OWGq6HFz9+hWubgJ Kw6OD9zr3MTPdCBex+aCT+FSYB9erR5ASP+h6eVtejlHDxmA88SUqkm+M+N1RgQR 55wZOas+CGTdKouZyQhIRIh07IfH00P4bYsGqgkuKcGmQpv7EQGmsE6hjiaaP5d5 CcwnOnUBDsoSPAZ0qOawXEtWpgaRUW3aZAA0bb/4iQ4CBYzvSb6F77cJTDNiunOL rIktsNMguTxUEs7rwPvmcjk8NjBCo+a/zosN2mKRU05PkVmvZ0yg3ISQ4MgMPrw7 HJ3N5HzrvGzPajd3SGsxpCm/ArZ6k7/S -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:33 2025 by rpki-client