$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: jmgItLHPTl9RckUi1PJKiLr6hmgDlkbjY3ZiCI4DdJs= Subject key identifier: 19:EF:AE:7A:8A:B3:64:5A:43:54:A6:DA:06:44:8E:E4:0B:61:BA:0B Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 019D Signing time: Fri 25 Apr 2025 02:30:45 +0000 Manifest this update: Fri 25 Apr 2025 02:30:45 +0000 Manifest next update: Fri 02 May 2025 02:30:45 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: scfJ9xsOT7vzucatErZWaTn4O1B3gikQdRlaOb62jUo=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Apr 25 02:30:45 2025 GMT Not After : May 2 02:30:45 2025 GMT Subject: CN=680af3d5-817e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:63:b9:fd:90:03:f8:97:48:18:20:7f:7c: ea:05:52:db:62:3f:88:2d:e4:2c:35:40:25:77:cf: 05:78:14:a5:3d:36:3e:e7:6f:3c:93:dd:bd:09:1d: 2a:d6:de:3c:04:a8:1c:f1:93:d5:cc:d9:af:0e:47: 66:51:7c:e1:6f:d9:3a:ea:45:bb:c0:6f:88:a0:00: 28:8a:c7:f7:21:ed:8b:d2:32:78:c2:20:88:84:21: b3:98:32:5f:0c:59:23:4e:80:c0:c3:82:f6:ff:4e: c9:2a:3e:c8:73:33:42:ac:e1:14:5a:80:af:a7:00: d3:ea:4f:2b:3b:cc:fd:c6:03:ab:b4:02:d6:31:6f: 65:76:c6:f1:ff:2e:43:9e:9f:f9:6a:7b:4f:15:12: 94:4f:6e:20:1b:ab:ce:8d:6d:b4:67:75:b7:2e:52: 38:6b:1e:c4:68:eb:80:2c:de:fc:8e:9d:a9:f6:a5: e4:5b:1a:45:3d:4d:fd:7f:13:a3:8e:4a:97:d5:71: 4e:a3:8d:87:9f:ca:13:91:a3:11:3d:b3:25:c7:4e: cf:85:4a:72:af:5f:b0:16:9a:09:97:0c:36:a9:24: e8:9d:1a:79:cd:02:d7:bf:c0:07:b9:93:80:78:2b: 2b:cf:65:d1:30:a2:5b:88:cc:ee:d8:5a:9d:23:47: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:AE:7A:8A:B3:64:5A:43:54:A6:DA:06:44:8E:E4:0B:61:BA:0B X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1c:01:bd:1b:9c:ea:76:51:fd:f9:5d:48:20:71:2d:b0:75: 9e:93:4e:04:a8:02:f6:50:3e:b7:3f:b2:d8:69:98:31:a3:6c: 9f:59:4d:c8:5e:7a:39:3c:23:db:b0:b4:e0:88:40:be:f5:7d: bf:ca:c7:c2:dd:f9:96:cc:e6:9e:40:6f:30:8c:d4:09:da:c3: 40:47:6d:7f:7d:ce:83:5d:62:de:e5:40:a5:f9:69:ee:84:d0: e1:a7:2f:3a:5d:c0:12:03:e9:30:82:9a:34:a6:94:6d:5b:33: 23:86:97:ab:53:23:91:07:f7:7f:41:41:7a:b7:1d:31:e4:37: c3:e1:9c:92:85:cb:90:0f:a0:51:5b:b0:c1:4a:4a:2f:15:e8: 06:6d:20:f8:c8:4c:0b:f9:94:29:7c:a7:cc:a7:b4:67:6b:4c: 30:0a:b1:b6:eb:d1:b8:b9:bd:9b:05:7e:33:b8:3a:a3:37:6f: 47:d7:ab:22:62:9d:d6:e3:14:5c:a1:36:94:b4:89:57:8b:5f: 64:bc:f4:bd:f3:46:4c:6d:c4:7c:76:4d:20:01:33:50:f8:3e: bd:ee:4b:c8:2a:33:04:26:ed:d4:06:89:30:cd:28:b0:bc:e7: 75:66:15:10:0b:81:9f:1a:e5:af:d7:a6:0e:55:12:39:46:6e: a2:9d:a2:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNDI1MDIzMDQ1WhcNMjUwNTAyMDIzMDQ1WjAYMRYwFAYD VQQDEw02ODBhZjNkNS04MTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq49juf2QA/iXSBggf3zqBVLbYj+ILeQsNUAld88FeBSlPTY+5288k929CR0q 1t48BKgc8ZPVzNmvDkdmUXzhb9k66kW7wG+IoAAoisf3Ie2L0jJ4wiCIhCGzmDJf DFkjToDAw4L2/07JKj7IczNCrOEUWoCvpwDT6k8rO8z9xgOrtALWMW9ldsbx/y5D np/5antPFRKUT24gG6vOjW20Z3W3LlI4ax7EaOuALN78jp2p9qXkWxpFPU39fxOj jkqX1XFOo42Hn8oTkaMRPbMlx07PhUpyr1+wFpoJlww2qSTonRp5zQLXv8AHuZOA eCsrz2XRMKJbiMzu2FqdI0fIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnvrnqK s2RaQ1Sm2gZEjuQLYboLMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfHAG9G5zqdlH9+V1IIHEtsHWek04EqAL2UD63P7LYaZgxo2yfWU3I Xno5PCPbsLTgiEC+9X2/ysfC3fmWzOaeQG8wjNQJ2sNAR21/fc6DXWLe5UCl+Wnu hNDhpy86XcASA+kwgpo0ppRtWzMjhperUyORB/d/QUF6tx0x5DfD4ZyShcuQD6BR W7DBSkovFegGbSD4yEwL+ZQpfKfMp7Rna0wwCrG269G4ub2bBX4zuDqjN29H16si Yp3W4xRcoTaUtIlXi19kvPS980ZMbcR8dk0gATNQ+D697kvIKjMEJu3UBokwzSiw vOd1ZhUQC4GfGuWv16YOVRI5Rm6inaIQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:38 2025 by rpki-client