$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: TCuuzxInxQBJRwab2BypUTlpo68TpVZhiQpbNdAhjX4= Subject key identifier: 51:C2:0D:F2:91:CE:DF:AE:32:3E:05:83:1A:D7:83:46:1E:29:7C:F8 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 016C Signing time: Fri 25 Apr 2025 03:06:09 +0000 Manifest this update: Fri 25 Apr 2025 03:06:09 +0000 Manifest next update: Fri 02 May 2025 03:06:09 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: d09PEBoY6M1bTXil9EqMvEtplgX7SIAgAVODpmv1GhU=) 2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: Nnq2nSrzZVVFW1WeAqLhZAthl6arj6cpbPo8gyxuIuE=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aBVN2JXXEh8Q6gT/6fY3ErLQwRzmiGLd4BoBMHyur8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Apr 25 03:06:09 2025 GMT Not After : May 2 03:06:09 2025 GMT Subject: CN=680afc21-9c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:91:8c:a4:93:cf:19:34:89:23:98:fe:ca: 4f:ed:6a:d8:72:fb:05:d1:af:82:1c:41:cc:32:24: 92:57:a5:2c:0c:bc:82:64:70:12:ae:bc:a3:3d:cb: 4b:06:d5:cf:3c:77:9c:ae:44:fb:58:82:9c:cd:93: 7d:aa:5e:21:1e:d4:e4:43:01:4e:f9:d6:f3:29:df: bd:70:47:08:a5:b1:9e:30:87:6d:45:25:d1:1f:45: 5d:eb:5e:ae:0e:57:f3:6e:4e:c1:99:6f:fa:6f:b5: ca:99:b7:a5:e1:b8:8a:ea:e6:37:10:97:3d:00:9c: 76:a5:02:40:11:a4:5c:1b:2b:1f:e2:4b:9a:09:73: 52:25:fc:5b:e0:f0:a2:fb:3c:03:23:d5:8e:a9:90: 32:5d:da:2b:89:b4:6e:36:70:65:17:a8:7d:65:e3: 33:fc:04:13:ef:cc:41:06:5c:39:78:fb:0e:90:8a: 39:c0:25:41:07:04:6a:8c:3b:53:35:bc:c7:1b:a3: c6:26:e9:33:6e:a9:5d:6c:da:9b:7f:a7:31:80:45: 8b:44:4a:b7:0e:ca:a6:16:85:72:e9:aa:95:70:49: cf:c2:a1:fa:00:7d:1e:2c:84:cf:d1:56:08:79:e3: 1f:a7:fc:c7:00:51:3b:79:c7:21:6f:cf:95:5b:ee: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:0D:F2:91:CE:DF:AE:32:3E:05:83:1A:D7:83:46:1E:29:7C:F8 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a8:88:a3:02:54:b6:e6:ae:32:76:bb:3e:cc:90:55:5a:41: f6:1f:e6:13:15:48:46:6c:0e:ae:70:23:1f:e0:90:43:4b:99: 62:3d:38:5b:cc:84:93:19:4d:12:2a:c7:b4:83:85:38:9c:ab: 52:fa:88:eb:a3:cf:ad:fe:4c:74:51:ce:0b:23:75:b7:dc:fe: 8d:65:98:c4:8d:10:7b:40:a8:74:af:bc:c8:34:9a:9f:b1:c4: 30:67:f9:e5:34:30:ef:1d:8a:fe:b6:38:6e:13:36:94:80:c3: b5:26:a5:cf:4f:0a:27:4a:b1:a2:0c:09:74:66:fa:8a:47:b2: c7:a8:f8:97:0b:5d:f9:c5:c0:8b:b7:55:d9:69:f9:ac:f0:34: cc:3d:ae:84:d7:05:9e:c2:98:f5:67:96:c6:9e:09:50:a0:c1: b0:8f:1b:40:6f:c1:bf:13:1b:03:a1:88:f7:05:58:1b:c8:91: b1:ba:f2:e8:13:3c:ee:3b:00:cb:41:be:d3:22:1c:6e:cd:ea: 99:c1:e8:3a:ae:2c:a0:f9:b2:c0:d1:ee:77:48:c2:ce:1e:1a: 66:49:7c:4a:3d:01:50:e2:7b:1f:41:8d:f7:2f:b1:5a:ae:1d: cf:3d:92:93:f0:b7:89:b8:75:bb:29:c6:5e:69:25:e2:31:b7: c0:3b:93:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwNDI1MDMwNjA5WhcNMjUwNTAyMDMwNjA5WjAYMRYwFAYD VQQDEw02ODBhZmMyMS05Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35WRjKSTzxk0iSOY/spP7WrYcvsF0a+CHEHMMiSSV6UsDLyCZHASrryjPctL BtXPPHecrkT7WIKczZN9ql4hHtTkQwFO+dbzKd+9cEcIpbGeMIdtRSXRH0Vd616u Dlfzbk7BmW/6b7XKmbel4biK6uY3EJc9AJx2pQJAEaRcGysf4kuaCXNSJfxb4PCi +zwDI9WOqZAyXdoribRuNnBlF6h9ZeMz/AQT78xBBlw5ePsOkIo5wCVBBwRqjDtT NbzHG6PGJukzbqldbNqbf6cxgEWLREq3DsqmFoVy6aqVcEnPwqH6AH0eLITP0VYI eeMfp/zHAFE7ecchb8+VW+5/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHCDfKR zt+uMj4FgxrXg0YeKXz4MB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZqIijAlS25q4ydrs+zJBVWkH2H+YTFUhGbA6ucCMf4JBDS5liPThb zISTGU0SKse0g4U4nKtS+ojro8+t/kx0Uc4LI3W33P6NZZjEjRB7QKh0r7zINJqf scQwZ/nlNDDvHYr+tjhuEzaUgMO1JqXPTwonSrGiDAl0ZvqKR7LHqPiXC135xcCL t1XZafms8DTMPa6E1wWewpj1Z5bGnglQoMGwjxtAb8G/ExsDoYj3BVgbyJGxuvLo EzzuOwDLQb7TIhxuzeqZweg6riyg+bLA0e53SMLOHhpmSXxKPQFQ4nsfQY33L7Fa rh3PPZKT8LeJuHW7KcZeaSXiMbfAO5Ph -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client