$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: YN1UwanQyDM5lIiKIgmASjhTI+bio8mBu8EseM7Q+DI= Subject key identifier: 5C:79:82:D9:F0:B1:BD:22:B4:5F:F9:DD:76:8F:4A:8D:40:2F:3E:A4 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 0439 Signing time: Fri 25 Apr 2025 00:03:59 +0000 Manifest this update: Fri 25 Apr 2025 00:03:59 +0000 Manifest next update: Fri 02 May 2025 00:03:59 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: W6KZabNgDkegJw3We6Wwgdln+bG9RM96o6c2rbIMzrw=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: jLktry4iXdQWD0/47QB08nrgPUPRx2Qy+Cc/teSX0cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Apr 25 00:03:59 2025 GMT Not After : May 2 00:03:59 2025 GMT Subject: CN=680ad16f-5d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:b2:2a:19:b8:89:b5:af:50:f7:ee:e7:bf: 55:1c:24:c0:a6:88:bf:92:83:02:80:25:3e:c7:fb: 13:a6:08:60:cf:54:9a:71:3f:86:24:6f:60:8d:31: c6:63:74:59:25:43:b4:87:d2:b2:14:9c:7e:b4:2d: 81:12:5f:14:28:03:fc:df:e9:91:fc:86:f8:8c:9a: 8d:ac:ac:46:f5:b8:fa:2d:5b:1e:ec:05:c2:16:2d: d9:7d:c6:0d:24:9b:f4:0d:31:6a:9a:b1:fa:74:08: cd:79:31:1f:cd:9a:e2:f2:bb:a6:60:49:28:3c:3b: 8b:f2:8f:dc:8e:93:90:ef:8d:7d:0d:e5:81:36:41: 9c:db:a6:8c:c7:b9:38:db:46:83:83:a7:2c:7b:18: 22:fd:2e:5e:a2:07:c0:15:26:e0:b6:83:70:56:1d: 58:46:2a:90:5f:49:6e:ca:00:10:74:c2:96:cd:4c: f5:87:c3:98:af:70:33:76:15:1d:0b:0c:15:d1:c2: e1:86:cb:fe:c1:c3:3d:73:17:42:c2:9c:2a:01:65: 74:07:02:a6:55:1b:f9:71:0b:cc:c4:99:9a:b4:85: 5b:38:3c:4a:71:6b:41:aa:6c:28:ba:fa:72:f2:53: 8f:1e:02:16:6c:8e:c4:2c:8e:eb:65:86:13:2c:74: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:79:82:D9:F0:B1:BD:22:B4:5F:F9:DD:76:8F:4A:8D:40:2F:3E:A4 X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:e9:f4:50:a4:4e:3d:4e:22:d3:35:e9:b6:63:d9:c2:65: 04:4f:63:b6:1a:53:3f:13:2d:43:4d:ac:7d:63:47:f0:18:a0: 8b:9b:d9:13:c1:b1:84:3e:e8:a4:0f:49:8c:89:54:22:24:f9: 8a:60:97:ec:09:8c:9a:00:c6:4c:56:b5:3c:ac:a9:62:f9:8e: 65:6e:df:d0:62:ba:81:03:54:cf:26:80:b8:f1:97:b8:0f:7b: dd:c1:01:ac:de:dd:e6:62:fe:24:11:ba:7d:bb:cb:c1:a6:b0: 9d:6e:4a:88:c9:58:69:47:c0:37:71:c8:45:7f:48:97:47:85: 2b:79:22:61:c1:4b:39:d7:af:75:91:b7:07:98:ba:31:b4:b2: 5e:8c:95:ce:0d:7a:b7:cd:69:10:92:08:2a:3e:fa:dc:8e:cc: e0:26:36:dd:f2:25:27:cd:ed:df:9c:cf:c2:02:bf:c4:60:43: dc:7f:3d:8c:a5:6e:47:6b:06:87:11:b6:bc:fa:93:c0:6f:c8: d0:91:49:4e:d5:35:c5:7c:c3:1a:1d:be:af:36:50:9b:5f:38: 2c:92:d5:10:11:96:3d:4a:0f:55:f2:25:69:9b:d8:76:d4:d5: 49:0c:99:61:69:5f:e4:8e:58:79:e2:d7:69:7b:66:dc:c2:dc: 84:7d:ff:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUwNDI1MDAwMzU5WhcNMjUwNTAyMDAwMzU5WjAYMRYwFAYD VQQDEw02ODBhZDE2Zi01ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HqyKhm4ibWvUPfu579VHCTApoi/koMCgCU+x/sTpghgz1SacT+GJG9gjTHG Y3RZJUO0h9KyFJx+tC2BEl8UKAP83+mR/Ib4jJqNrKxG9bj6LVse7AXCFi3ZfcYN JJv0DTFqmrH6dAjNeTEfzZri8rumYEkoPDuL8o/cjpOQ7419DeWBNkGc26aMx7k4 20aDg6csexgi/S5eogfAFSbgtoNwVh1YRiqQX0luygAQdMKWzUz1h8OYr3AzdhUd CwwV0cLhhsv+wcM9cxdCwpwqAWV0BwKmVRv5cQvMxJmatIVbODxKcWtBqmwouvpy 8lOPHgIWbI7ELI7rZYYTLHQZ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx5gtnw sb0itF/53XaPSo1ALz6kMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF4un0UKROPU4i0zXptmPZwmUET2O2GlM/Ey1DTax9Y0fwGKCLm9kT wbGEPuikD0mMiVQiJPmKYJfsCYyaAMZMVrU8rKli+Y5lbt/QYrqBA1TPJoC48Ze4 D3vdwQGs3t3mYv4kEbp9u8vBprCdbkqIyVhpR8A3cchFf0iXR4UreSJhwUs51691 kbcHmLoxtLJejJXODXq3zWkQkggqPvrcjszgJjbd8iUnze3fnM/CAr/EYEPcfz2M pW5HawaHEba8+pPAb8jQkUlO1TXFfMMaHb6vNlCbXzgsktUQEZY9Sg9V8iVpm9h2 1NVJDJlhaV/kjlh54tdpe2bcwtyEff+/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:41 2025 by rpki-client