$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: uaMGjUX1yFG0p3ONsRALN/duv3ruM+sDFIIdz1B9s5A= Subject key identifier: 9B:10:41:0D:02:9B:9C:EF:6F:99:91:95:4F:51:27:1C:B2:F8:52:0B Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05CF Signing time: Thu 24 Apr 2025 22:49:36 +0000 Manifest this update: Thu 24 Apr 2025 22:49:36 +0000 Manifest next update: Thu 01 May 2025 22:49:36 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: Vu0c+VrYe4bbHPIgYhMnsn4R8oDHVIMQvlxqZVnU7ZY=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Apr 24 22:49:36 2025 GMT Not After : May 1 22:49:36 2025 GMT Subject: CN=680ac000-a945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:d1:f4:4a:dc:46:33:83:ee:ea:f0:89:93: 5a:eb:6f:f3:18:77:5d:36:ac:b0:7a:57:7a:b7:e8: 2e:c0:80:f6:43:1a:76:f4:48:91:f0:1a:d2:5c:6a: e2:c0:9e:bc:a1:e1:69:3c:23:58:02:24:fb:11:eb: 26:cc:e4:3c:6f:7e:62:3e:36:1a:21:cd:6d:b1:11: 92:50:ed:61:5e:4b:1f:d1:d0:28:14:02:bf:94:dd: d3:52:39:76:59:ff:d6:0a:c7:1c:d5:a2:a4:3e:80: 3d:f8:68:81:47:7d:5c:4d:41:95:c0:73:61:4b:58: b1:ed:a1:e2:c7:7c:f7:4d:f3:10:d6:2e:5c:48:e9: 8f:91:14:19:89:fd:4a:1c:d8:fd:1a:f0:cf:c5:7f: 1c:3a:85:9b:d9:bc:b1:be:c4:13:b6:64:3d:8a:4c: 7c:81:48:f2:c1:72:72:c9:50:06:d5:64:8f:bc:fb: 49:5c:36:91:4e:07:c2:af:88:e3:58:63:39:06:72: 79:5a:ba:1b:ef:dc:09:23:4a:17:e5:a2:7d:0a:41: 84:67:55:fd:7c:19:10:33:03:2f:61:c8:50:55:21: 0d:fe:e6:3f:6a:24:45:9b:2e:fb:3c:23:34:27:ad: e9:76:4f:62:66:2f:15:12:77:c6:c0:6d:a0:e4:3a: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:10:41:0D:02:9B:9C:EF:6F:99:91:95:4F:51:27:1C:B2:F8:52:0B X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4c:35:85:5a:05:0b:fc:29:b4:b8:d7:eb:43:10:5a:4d:93: a1:09:41:26:74:af:3a:45:d8:3b:6f:54:10:07:f2:ff:25:78: 10:db:0e:0c:c5:6a:39:96:10:ea:60:91:e3:23:fc:32:4e:1a: b3:b5:0b:53:7c:ae:91:31:94:d4:9b:3b:6d:53:96:0c:d1:2a: 9f:2e:75:5a:ba:1e:cf:69:56:8c:8c:02:3a:d5:02:cf:cf:12: d5:62:d9:96:38:ce:68:8f:ac:70:ee:75:65:5e:76:c2:4b:3b: 36:68:ea:e7:93:38:a7:5e:f8:b7:52:a6:5b:94:d8:bf:16:05: b4:f4:1b:6c:7b:a2:93:e3:ec:f2:31:71:1b:20:27:4e:ec:b4: 95:38:9d:3b:78:f1:c2:dc:28:16:49:5f:43:89:f5:33:0c:96: 73:3b:9f:60:d1:8b:dd:a4:03:4d:f3:92:d7:cd:32:ad:fc:db: cc:7b:71:e9:af:b9:11:44:5b:4d:4e:02:c2:0b:3a:f6:1a:a3: 97:f9:e8:ff:f3:1b:95:90:14:6e:fe:6c:af:3e:f3:5f:a2:85: 94:c1:57:e9:26:d3:0e:46:3c:75:a2:52:9c:de:9f:7f:13:60: 43:08:f1:29:c3:77:af:3e:ff:ec:fe:a2:0c:0d:36:35:33:d9: ce:d8:2d:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwNDI0MjI0OTM2WhcNMjUwNTAxMjI0OTM2WjAYMRYwFAYD VQQDEw02ODBhYzAwMC1hOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XjR9ErcRjOD7urwiZNa62/zGHddNqyweld6t+guwID2Qxp29EiR8BrSXGri wJ68oeFpPCNYAiT7EesmzOQ8b35iPjYaIc1tsRGSUO1hXksf0dAoFAK/lN3TUjl2 Wf/WCscc1aKkPoA9+GiBR31cTUGVwHNhS1ix7aHix3z3TfMQ1i5cSOmPkRQZif1K HNj9GvDPxX8cOoWb2byxvsQTtmQ9ikx8gUjywXJyyVAG1WSPvPtJXDaRTgfCr4jj WGM5BnJ5Wrob79wJI0oX5aJ9CkGEZ1X9fBkQMwMvYchQVSEN/uY/aiRFmy77PCM0 J63pdk9iZi8VEnfGwG2g5DpVoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsQQQ0C m5zvb5mRlU9RJxyy+FILMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTDWFWgUL/Cm0uNfrQxBaTZOhCUEmdK86Rdg7b1QQB/L/JXgQ2w4M xWo5lhDqYJHjI/wyThqztQtTfK6RMZTUmzttU5YM0SqfLnVauh7PaVaMjAI61QLP zxLVYtmWOM5oj6xw7nVlXnbCSzs2aOrnkzinXvi3UqZblNi/FgW09Btse6KT4+zy MXEbICdO7LSVOJ07ePHC3CgWSV9DifUzDJZzO59g0YvdpANN85LXzTKt/NvMe3Hp r7kRRFtNTgLCCzr2GqOX+ej/8xuVkBRu/myvPvNfooWUwVfpJtMORjx1olKc3p9/ E2BDCPEpw3evPv/s/qIMDTY1M9nO2C1J -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:59 2025 by rpki-client