$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json) Hash identifier: 1uPe5AlAcCQEMuAIhBzRpqIzzKZME2M1s16W9nM0gCI= Subject key identifier: DE:02:15:DF:7B:FC:31:70:51:0F:68:DB:FA:A9:C5:3F:6C:A0:1D:C9 Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft Manifest number: 0703 Signing time: Thu 24 Apr 2025 21:46:25 +0000 Manifest this update: Thu 24 Apr 2025 21:46:25 +0000 Manifest next update: Thu 01 May 2025 21:46:25 +0000 Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: eTR4ajM55okqeioTz5MmC1EouOtzz/BnxrEA+8fE/68=) 2: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: UEeWCT6ImEaxx6DYiNNHxE3gZPCQQ4xS1glK4ixz1u8=) 3: 74AB6A4A69A311EFAAE0FA5BC4F9AE02.roa (hash: /0w41HOsNlcXpRWlzhILaNzRflWr6eesavXYpteo0zE=) 4: C1770D5A499811EFBB8C701EC4F9AE02.roa (hash: bRXM6aO12Du5rWWxHCAs6gVAFfbVxDg0k7dT/XJ9KEE=) 5: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: fjb9xxIvXmy/Q4aA7zhlhVkljXVrUMNfVIOWbyyneP8=) 6: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: agCGjmWYmlY22GfNRQLo7JWrox6fkhHy906PQcOJAjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Validity Not Before: Apr 24 21:46:25 2025 GMT Not After : May 1 21:46:25 2025 GMT Subject: CN=680ab131-d1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:50:3d:b7:cc:68:ad:3f:61:6b:b2:40:41: a6:e1:d2:ee:78:6c:e3:4e:4f:c6:ee:5c:db:5d:2a: 5e:75:41:d8:18:ca:e1:55:e8:d4:50:16:5d:09:8a: d2:7d:4d:14:3b:cc:37:d3:98:11:61:54:48:d4:8c: c2:0d:ad:68:60:23:12:b4:d5:24:07:e4:4a:94:f9: 0b:74:0d:f3:cc:50:b3:f8:9f:14:d8:9e:9b:9f:4d: 29:c7:f5:1c:25:a3:38:28:7a:29:f4:ad:ab:f0:a2: fa:86:bf:f6:34:24:4c:ce:6c:6c:26:13:e9:5b:c8: c9:4f:b6:d1:27:fc:75:0a:55:93:b7:15:d4:e5:25: ff:ef:77:11:4f:57:e0:c3:fd:d7:76:c1:ad:26:9f: a1:d4:69:3d:84:1a:d1:4b:49:db:22:71:96:6e:4a: 55:04:77:30:34:a9:db:39:9f:9e:41:5b:76:a7:34: 05:e8:62:95:93:6f:6b:bc:3b:6d:ff:2d:8a:e3:ee: 4f:e3:74:c0:0d:5a:af:e4:71:c4:22:1e:25:46:58: f0:e4:78:94:14:bc:ce:19:a9:b3:c2:bd:87:43:c6: 99:b8:88:42:05:68:bf:b2:31:4f:ab:79:ff:62:9a: fc:33:8e:82:fc:d3:75:58:8c:94:90:c0:b8:74:55: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:15:DF:7B:FC:31:70:51:0F:68:DB:FA:A9:C5:3F:6C:A0:1D:C9 X509v3 Authority Key Identifier: keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e5:eb:a3:30:c8:07:16:4c:f8:d9:2b:ac:8d:c2:59:89:35: 2b:a4:b7:54:e1:a3:80:35:91:bd:71:5d:51:97:97:5e:24:9a: 81:e1:f5:dd:c1:f8:03:96:e2:04:32:73:e3:61:17:6d:29:f1: e9:58:d4:1a:69:c0:56:da:59:f9:06:a6:68:5c:50:1b:33:9f: ea:de:9c:60:e9:b2:8f:7c:1b:d3:ff:aa:ee:01:78:af:23:8a: 70:49:cc:f0:a8:0c:ce:b5:ab:93:ea:0b:a7:4c:cf:7e:8f:c1: 96:6c:2c:67:6e:e2:e5:8d:64:23:6a:37:34:7f:4e:28:a1:0b: 6d:b9:a3:72:81:cd:84:ec:ad:b6:e0:a9:a0:11:b2:6d:88:95: 4a:9d:e9:3f:59:23:f2:0f:69:7a:31:a4:0c:d7:03:88:01:a8: b6:cc:a0:f5:94:04:3e:83:43:24:86:29:90:66:f4:c9:17:ee: 4b:0d:f2:1e:98:2e:47:36:72:c4:8b:03:47:39:cd:e1:d5:82: 87:c6:c8:ed:32:51:99:00:58:46:ba:72:05:a4:fe:30:c8:5d: 4e:f5:f9:d4:6c:f4:75:19:5b:70:49:42:8f:5e:b7:57:de:58: 89:84:1d:f3:44:a5:c1:e4:d9:a8:8d:ee:3d:99:c9:43:f3:3e: 20:09:b8:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB NkYyRUQ3REIwHhcNMjUwNDI0MjE0NjI1WhcNMjUwNTAxMjE0NjI1WjAYMRYwFAYD VQQDEw02ODBhYjEzMS1kMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygdQPbfMaK0/YWuyQEGm4dLueGzjTk/G7lzbXSpedUHYGMrhVejUUBZdCYrS fU0UO8w305gRYVRI1IzCDa1oYCMStNUkB+RKlPkLdA3zzFCz+J8U2J6bn00px/Uc JaM4KHop9K2r8KL6hr/2NCRMzmxsJhPpW8jJT7bRJ/x1ClWTtxXU5SX/73cRT1fg w/3XdsGtJp+h1Gk9hBrRS0nbInGWbkpVBHcwNKnbOZ+eQVt2pzQF6GKVk29rvDtt /y2K4+5P43TADVqv5HHEIh4lRljw5HiUFLzOGamzwr2HQ8aZuIhCBWi/sjFPq3n/ Ypr8M46C/NN1WIyUkMC4dFUe2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4CFd97 /DFwUQ9o2/qpxT9soB3JMB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC a1ZERTgzSWZUNENtOHUxOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/5eujMMgHFkz42SusjcJZiTUrpLdU4aOANZG9cV1Rl5deJJqB4fXd wfgDluIEMnPjYRdtKfHpWNQaacBW2ln5BqZoXFAbM5/q3pxg6bKPfBvT/6ruAXiv I4pwSczwqAzOtauT6gunTM9+j8GWbCxnbuLljWQjajc0f04ooQttuaNygc2E7K22 4KmgEbJtiJVKnek/WSPyD2l6MaQM1wOIAai2zKD1lAQ+g0MkhimQZvTJF+5LDfIe mC5HNnLEiwNHOc3h1YKHxsjtMlGZAFhGunIFpP4wyF1O9fnUbPR1GVtwSUKPXrdX 3liJhB3zRKXB5Nmoje49mclD8z4gCbgp -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:00 2025 by rpki-client