$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: dEqU+yXxLu289/Qg7Rr3c3YNkU2TqAyf4bUGAg5DuFU= Subject key identifier: AC:79:AE:15:19:BA:D8:7F:A8:FC:29:F1:57:D9:20:4C:03:CA:43:42 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 0235 Signing time: Fri 25 Apr 2025 01:40:44 +0000 Manifest this update: Fri 25 Apr 2025 01:40:43 +0000 Manifest next update: Fri 02 May 2025 01:40:43 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: 9Zd3sC+00aRaHicN68hEMmTc6tuziUAQxBR9ocAiZSA=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Apr 25 01:40:43 2025 GMT Not After : May 2 01:40:43 2025 GMT Subject: CN=680ae81c-e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:3d:da:34:fc:8f:18:cf:be:71:91:c6:78: cd:98:2d:75:b7:cc:ed:0a:15:79:4f:2a:28:c5:13: e4:5b:10:7b:50:a1:6e:9a:05:a0:af:f0:02:66:98: 1a:06:ba:e6:4c:ee:82:2a:dd:a0:ed:7f:98:d4:8b: 4b:2c:07:ce:dc:80:50:07:29:c2:9b:da:8a:48:0a: b5:62:b8:b2:1b:05:ac:22:ae:c2:66:c9:47:ae:ea: e1:b1:05:ea:13:13:ad:46:2b:34:ac:63:13:96:51: b3:5b:73:dc:8f:77:44:9d:4d:ff:ba:d5:27:38:9b: 28:48:61:89:62:95:ce:fc:7c:b4:ab:a9:a8:dd:b3: cc:d8:71:80:dc:7b:79:b1:a3:50:65:2b:81:2c:34: 7c:9e:34:4c:ba:7e:87:bc:15:39:f4:c1:96:30:a5: a3:fe:a1:22:8b:6a:cd:83:e5:ae:d2:4d:91:7f:6b: 0f:0a:29:82:b0:31:d0:f0:3a:fe:4d:18:c0:39:26: 9d:d5:81:9f:d5:3a:fc:f5:46:8c:58:b9:e4:50:7d: ae:5a:fc:f7:99:63:8d:a4:56:d8:1a:15:3a:b4:e0: bf:ae:0a:21:4b:5a:53:f0:05:a2:84:9f:e2:e5:ad: 5a:d2:90:4f:a4:1b:9e:0c:fd:ac:43:a4:84:76:54: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:79:AE:15:19:BA:D8:7F:A8:FC:29:F1:57:D9:20:4C:03:CA:43:42 X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:df:75:d7:c1:a7:76:99:01:69:13:6b:55:12:ae:85:7a:fe: 5e:50:2c:68:cd:2b:0f:e6:9d:cb:68:12:0b:d0:27:a2:85:f6: 3a:8b:c6:62:95:2e:7a:9e:93:5e:7a:82:cb:95:34:63:13:4c: 9b:6d:12:4d:43:b8:8f:d8:0e:ef:68:5c:64:c2:01:71:34:00: bd:a9:2f:84:26:f3:9c:fa:f7:9f:be:f3:78:99:0c:53:ce:7a: 32:e3:37:45:01:b6:75:98:24:69:ba:a8:c0:c9:79:e2:13:cb: 89:bb:1c:39:38:e3:86:ef:2f:df:01:4a:2f:00:f5:bd:7b:0e: 89:c0:42:1c:38:28:46:fe:d9:03:07:bd:b7:8f:63:0b:f2:0a: e5:2d:07:65:02:c3:7e:d7:27:d9:d1:6c:4f:b0:c4:cb:28:ef: d7:a4:b2:4c:fb:cf:b5:89:68:5f:08:6e:18:86:7f:80:f9:0a: 3a:a6:4d:00:03:35:e3:84:1d:51:fb:ee:e6:cc:84:8c:d7:1a: 4f:00:ad:ce:63:6a:6f:75:d4:af:2b:9e:75:fc:65:54:d7:f9: b9:1a:ae:1a:f9:ac:3a:61:9c:42:a2:42:9a:34:4c:00:fa:91: d0:56:ab:05:c2:1e:a8:b2:88:88:56:be:f7:2d:6c:10:e1:71: 2a:75:6a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUwNDI1MDE0MDQzWhcNMjUwNTAyMDE0MDQzWjAYMRYwFAYD VQQDEw02ODBhZTgxYy1lMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05U92jT8jxjPvnGRxnjNmC11t8ztChV5TyooxRPkWxB7UKFumgWgr/ACZpga BrrmTO6CKt2g7X+Y1ItLLAfO3IBQBynCm9qKSAq1YriyGwWsIq7CZslHrurhsQXq ExOtRis0rGMTllGzW3Pcj3dEnU3/utUnOJsoSGGJYpXO/Hy0q6mo3bPM2HGA3Ht5 saNQZSuBLDR8njRMun6HvBU59MGWMKWj/qEii2rNg+Wu0k2Rf2sPCimCsDHQ8Dr+ TRjAOSad1YGf1Tr89UaMWLnkUH2uWvz3mWONpFbYGhU6tOC/rgohS1pT8AWihJ/i 5a1a0pBPpBueDP2sQ6SEdlTUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx5rhUZ uth/qPwp8VfZIEwDykNCMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX33XXwad2mQFpE2tVEq6Fev5eUCxozSsP5p3LaBIL0CeihfY6i8Zi lS56npNeeoLLlTRjE0ybbRJNQ7iP2A7vaFxkwgFxNAC9qS+EJvOc+vefvvN4mQxT znoy4zdFAbZ1mCRpuqjAyXniE8uJuxw5OOOG7y/fAUovAPW9ew6JwEIcOChG/tkD B723j2ML8grlLQdlAsN+1yfZ0WxPsMTLKO/XpLJM+8+1iWhfCG4Yhn+A+Qo6pk0A AzXjhB1R++7mzISM1xpPAK3OY2pvddSvK551/GVU1/m5Gq4a+aw6YZxCokKaNEwA +pHQVqsFwh6osoiIVr73LWwQ4XEqdWrh -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:40 2025 by rpki-client